Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/27ebde03-34df-4f2c-92fa-8fe1d083d15d/0/822F2BF26D1606B43A2F4992E5B0840307D9F4F9.mft
File: 822F2BF26D1606B43A2F4992E5B0840307D9F4F9.mft (raw, json)
Hash identifier: 7+lsmp8XMnDhAAJg/9/PrCwUoIr0S7LZwUvqyWs32fI=
Subject key identifier: 90:7C:44:63:0E:C6:6A:30:65:AD:34:2C:4C:32:67:0D:E1:65:FC:20
Authority key identifier: 82:2F:2B:F2:6D:16:06:B4:3A:2F:49:92:E5:B0:84:03:07:D9:F4:F9
Certificate issuer: /CN=822f2bf26d1606b43a2f4992e5b0840307d9f4f9
Certificate serial: 622E7C34D5118491460105A4BE3EDCDE2E39C050
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gi8r8m0WBrQ6L0mS5bCEAwfZ9Pk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/27ebde03-34df-4f2c-92fa-8fe1d083d15d/0/822F2BF26D1606B43A2F4992E5B0840307D9F4F9.mft
Manifest number: 21
Signing time: Sun 31 Aug 2025 12:57:25 +0000
Manifest this update: Sun 31 Aug 2025 12:52:25 +0000
Manifest next update: Mon 01 Sep 2025 16:11:25 +0000
Files and hashes: 1: AS206604.asa (hash: DRtf99eR08V14ZA3u9RbEr+or3K38Yj6jepswq86ulI=)
2: 822F2BF26D1606B43A2F4992E5B0840307D9F4F9.crl (hash: oQa9XdS5EhKroBAbG34+inrutVAXAATr/ZwZyNmC30g=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:2e:7c:34:d5:11:84:91:46:01:05:a4:be:3e:dc:de:2e:39:c0:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=822f2bf26d1606b43a2f4992e5b0840307d9f4f9
Validity
Not Before: Aug 31 12:52:25 2025 GMT
Not After : Sep 1 16:11:25 2025 GMT
Subject: CN=907C44630EC66A3065AD342C4C32670DE165FC20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:55:3d:36:65:49:8a:49:34:0f:62:d6:27:4d:
d4:b6:0e:62:2a:37:1f:0a:85:56:23:8c:53:40:57:
c1:10:e7:3d:59:e4:d5:95:98:2d:f3:c9:30:d6:14:
06:74:c4:9e:96:2b:c9:76:6a:bd:ae:f0:e3:15:e6:
03:69:1a:49:cc:ea:4f:c0:e0:4d:8e:fd:ee:76:0f:
5c:0c:60:24:aa:4e:67:22:5e:3b:a7:f5:2f:a5:3a:
1d:83:21:cd:72:c3:1f:9b:50:4a:c5:42:72:91:5f:
14:28:f2:4d:b7:3f:9f:78:99:a3:10:76:b4:1f:b1:
cb:c9:01:d1:17:fe:16:e9:aa:db:ad:4b:c2:31:1b:
d5:71:41:ec:92:15:aa:ef:0a:0e:da:5e:e3:6b:06:
79:d7:d8:e2:7e:ea:34:58:b3:c9:6b:78:aa:3d:ef:
00:c3:65:7e:43:28:08:5b:a3:e4:17:4c:9c:14:ca:
a6:a8:00:a2:55:ba:f0:a0:bb:26:af:d8:b3:3c:37:
30:d2:b0:66:e0:c9:2c:32:95:73:7b:24:5d:e5:9c:
67:66:a3:65:8e:20:32:ca:a0:0e:09:ce:d5:08:7e:
11:2c:f6:4d:f2:c8:62:72:34:ba:b1:7e:64:fe:93:
84:87:6f:6b:8c:92:f2:9e:0b:cf:bc:eb:9f:b9:2a:
8a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:7C:44:63:0E:C6:6A:30:65:AD:34:2C:4C:32:67:0D:E1:65:FC:20
X509v3 Authority Key Identifier:
keyid:82:2F:2B:F2:6D:16:06:B4:3A:2F:49:92:E5:B0:84:03:07:D9:F4:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/27ebde03-34df-4f2c-92fa-8fe1d083d15d/0/822F2BF26D1606B43A2F4992E5B0840307D9F4F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gi8r8m0WBrQ6L0mS5bCEAwfZ9Pk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/27ebde03-34df-4f2c-92fa-8fe1d083d15d/0/822F2BF26D1606B43A2F4992E5B0840307D9F4F9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:59:bb:4e:27:4c:f3:ac:9c:81:38:8a:cc:29:9f:29:4a:bb:
a6:b9:48:9f:65:f9:11:99:7e:dd:45:e8:d6:ab:98:ea:2f:2b:
ef:92:3b:7f:32:24:4e:18:4b:5d:56:8b:26:58:12:5f:e2:37:
ef:8a:0f:ee:d6:99:b1:fb:af:d9:dc:fe:3f:1d:94:1c:6b:c6:
5c:9d:3a:79:1b:08:3a:7d:8d:be:6f:c0:a4:f2:aa:ba:9e:bf:
28:d7:46:d6:18:6e:a1:09:ac:2e:ee:dd:de:2a:14:ce:e8:79:
55:7a:85:20:60:0b:03:ca:e7:f1:83:88:b4:29:9f:65:96:89:
57:be:d7:7c:b1:17:38:e5:91:94:97:ff:68:0f:05:6b:6a:67:
40:d5:10:1a:b3:f3:a6:37:c9:0f:0b:c6:58:dd:7f:b9:b8:a7:
6e:43:55:34:4c:5c:95:74:5d:0f:6f:18:95:0c:d5:72:52:a5:
99:49:a8:a3:31:62:f5:d5:4b:b1:e7:32:d6:53:50:84:e9:6a:
da:9a:28:14:7e:45:d6:34:d5:34:98:b1:d7:47:87:a2:08:1c:
5d:0a:35:bc:45:d7:b7:43:0b:07:fb:7e:5a:b5:f5:cb:87:2f:
db:12:d7:db:f2:ab:2b:be:51:e0:c2:f9:98:92:9c:10:c7:48:
bb:f7:cc:96
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUYi58NNURhJFGAQWkvj7c3i45wFAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODIyZjJiZjI2ZDE2MDZiNDNhMmY0OTkyZTViMDg0MDMw
N2Q5ZjRmOTAeFw0yNTA4MzExMjUyMjVaFw0yNTA5MDExNjExMjVaMDMxMTAvBgNV
BAMTKDkwN0M0NDYzMEVDNjZBMzA2NUFEMzQyQzRDMzI2NzBERTE2NUZDMjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbVT02ZUmKSTQPYtYnTdS2DmIq
Nx8KhVYjjFNAV8EQ5z1Z5NWVmC3zyTDWFAZ0xJ6WK8l2ar2u8OMV5gNpGknM6k/A
4E2O/e52D1wMYCSqTmciXjun9S+lOh2DIc1ywx+bUErFQnKRXxQo8k23P594maMQ
drQfscvJAdEX/hbpqtutS8IxG9VxQeySFarvCg7aXuNrBnnX2OJ+6jRYs8lreKo9
7wDDZX5DKAhbo+QXTJwUyqaoAKJVuvCguyav2LM8NzDSsGbgySwylXN7JF3lnGdm
o2WOIDLKoA4JztUIfhEs9k3yyGJyNLqxfmT+k4SHb2uMkvKeC8+865+5KoppAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUkHxEYw7GajBlrTQsTDJnDeFl/CAwHwYDVR0j
BBgwFoAUgi8r8m0WBrQ6L0mS5bCEAwfZ9PkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMjdlYmRlMDMtMzRkZi00ZjJjLTkyZmEtOGZlMWQwODNk
MTVkLzAvODIyRjJCRjI2RDE2MDZCNDNBMkY0OTkyRTVCMDg0MDMwN0Q5RjRGOS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2dpOHI4bTBXQnJRNkwwbVM1YkNFQXdm
WjlQay5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yN2ViZGUwMy0z
NGRmLTRmMmMtOTJmYS04ZmUxZDA4M2QxNWQvMC84MjJGMkJGMjZEMTYwNkI0M0Ey
RjQ5OTJFNUIwODQwMzA3RDlGNEY5Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqVm7TidM86ycgTiKzCmf
KUq7prlIn2X5EZl+3UXo1quY6i8r75I7fzIkThhLXVaLJlgSX+I374oP7taZsfuv
2dz+Px2UHGvGXJ06eRsIOn2Nvm/ApPKqup6/KNdG1hhuoQmsLu7d3ioUzuh5VXqF
IGALA8rn8YOItCmfZZaJV77XfLEXOOWRlJf/aA8Fa2pnQNUQGrPzpjfJDwvGWN1/
ubinbkNVNExclXRdD28YlQzVclKlmUmoozFi9dVLsecy1lNQhOlq2pooFH5F1jTV
NJix10eHoggcXQo1vEXXt0MLB/t+WrX1y4cv2xLX2/KrK75R4ML5mJKcEMdIu/fM
lg==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:20:20 2025 by rpki-client