Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/1/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.mft
File:                     E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.mft (raw, json)
Hash identifier:          Brl4mRcnfZ3TCTRb9HqmDNDIlerpnCtNCV3Txoe0lUk=
Subject key identifier:   2B:7B:F6:A5:B1:25:EE:47:98:DF:4A:0F:E1:59:BD:C8:78:84:96:D3
Authority key identifier: E8:9F:91:5D:86:BB:9F:13:D0:F2:29:CA:78:CD:6D:9F:3E:AB:CF:7C
Certificate issuer:       /CN=E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C
Certificate serial:       792293429BBE06D7CDE38B7C3D473BCD686F7B15
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/1/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.mft
Manifest number:          01A8
Signing time:             Mon 29 Jun 2026 23:13:30 +0000
Manifest this update:     Mon 29 Jun 2026 23:08:30 +0000
Manifest next update:     Wed 01 Jul 2026 00:45:30 +0000
Files and hashes:         1: 326131343a373538313a333936363a3a2f34382d3634203d3e20313939373633.roa (hash: QIjLHOShOQYCNbNoFtN4+204Wpz6bLBcbsOL1KoNKsE=)
                          2: 326131343a373538313a333937373a3a2f34382d3634203d3e20313939373633.roa (hash: 6W8xvuJxWbwP3DdLZ6e8Sa+pGsBO2lzU710UJC28MHg=)
                          3: E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.crl (hash: lw71iMVQmxg3EyjlqQhFpZUbwjKLNxCk1F2g1i436xs=)
                          4: 326131343a373538313a333966663a3a2f34382d3634203d3e20313939373633.roa (hash: CXv6x/O9ewNpien44qlt1XDF1W8OUGA/v42u2jmxExg=)
                          5: 326131343a373538313a333936313a3a2f34382d3634203d3e20313939373633.roa (hash: V25LiWzxXAuXeQVJTbroIsiNYHCj/akr9IIXebvCE7Q=)
                          6: 326131343a373538313a333936323a3a2f34382d3634203d3e20313939373633.roa (hash: oCjl7TQd0xhHJ9B8MSi48PHfMmMZri62JgNd0y5lz+I=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:22:93:42:9b:be:06:d7:cd:e3:8b:7c:3d:47:3b:cd:68:6f:7b:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C
        Validity
            Not Before: Jun 29 23:08:30 2026 GMT
            Not After : Jul  1 00:45:30 2026 GMT
        Subject: CN=2B7BF6A5B125EE4798DF4A0FE159BDC8788496D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:07:93:0e:1d:91:8c:8b:71:62:87:63:14:b5:
                    80:d5:4b:28:5d:3a:97:28:a9:64:88:bb:66:56:94:
                    a8:64:e8:6b:07:d1:1d:81:bd:78:cd:1b:4c:57:3e:
                    bc:68:7e:18:e5:7e:25:72:09:c4:5e:c1:2b:e4:48:
                    77:92:6a:50:cc:37:c9:36:49:00:66:1c:86:68:63:
                    e7:1d:fd:12:6e:02:a8:4d:04:48:98:94:fa:92:1f:
                    47:5b:ea:12:ce:22:69:b6:37:29:bc:43:f6:eb:8d:
                    84:66:31:1f:29:08:de:c3:c7:48:d0:52:03:0f:a3:
                    d7:e5:d6:ca:d1:28:98:6f:82:c5:54:fd:74:68:2a:
                    81:de:a4:3c:27:fb:a9:1d:26:21:d4:88:22:02:cc:
                    ce:f6:ca:21:31:e3:76:5b:c0:08:30:f4:7a:a9:c6:
                    ca:22:ef:57:96:e6:43:28:60:3f:6a:c4:93:ad:59:
                    d0:f8:be:32:5b:a6:ee:60:15:7c:d0:d5:81:73:61:
                    94:c9:05:bd:4f:91:0f:4d:7b:bf:f8:4b:bf:95:96:
                    17:b6:6a:37:e5:a2:4a:86:58:b7:0b:1e:e1:1f:dd:
                    92:00:ed:3c:31:57:48:4b:a0:14:8e:b8:44:ca:73:
                    a8:99:08:2e:42:40:20:c9:a1:d3:71:c1:da:89:60:
                    89:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:7B:F6:A5:B1:25:EE:47:98:DF:4A:0F:E1:59:BD:C8:78:84:96:D3
            X509v3 Authority Key Identifier:
                keyid:E8:9F:91:5D:86:BB:9F:13:D0:F2:29:CA:78:CD:6D:9F:3E:AB:CF:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/1/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/1/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:bc:e9:15:ae:81:cf:de:5d:b0:35:22:4a:fd:f5:57:5d:a9:
         b0:ef:b5:53:ab:31:7b:d4:c0:12:77:1f:b6:e4:3f:aa:c2:60:
         77:27:63:2d:6d:62:bd:36:8e:f6:63:07:2c:c9:d1:49:eb:61:
         11:27:ee:35:54:0a:68:1d:8c:5a:08:1e:04:8e:3b:04:df:f9:
         b7:79:0d:50:c5:35:00:52:96:6a:25:d7:65:ad:f7:9e:c4:2d:
         5a:bd:46:ad:b8:81:52:37:64:d9:b1:d3:38:8f:e9:42:99:d6:
         c8:27:16:78:2e:cd:3f:75:81:cf:a4:91:54:5e:51:b6:0a:a9:
         08:f3:36:89:ee:cb:8e:32:72:73:f4:1a:9b:ad:cb:3a:f2:d8:
         46:96:c3:df:3c:41:be:e9:d2:5b:0f:24:13:36:a5:7c:bf:ee:
         6e:5a:2d:5d:eb:2d:73:96:c5:ea:20:61:39:2c:a4:5f:c1:e5:
         31:7e:f3:57:e0:d8:c5:f2:b1:5f:9e:5c:75:42:51:fb:c7:2b:
         03:24:6b:63:78:1c:8c:a1:43:4d:8e:db:be:a3:91:95:3b:ab:
         3a:f3:26:22:24:a1:f0:31:43:f8:19:e7:45:61:00:9d:e9:56:
         bc:a4:d5:17:56:fb:5d:4c:39:7e:bf:2d:51:6b:cb:6c:14:3c:
         5d:13:86:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:49:33 2026 by rpki-client