Manifest

$ rpki-client -vvf repo.rpki.space/repo/Pfcloud/0/43FB377824B048048B8756B6C65C599B82AEB5B9.mft
File:                     43FB377824B048048B8756B6C65C599B82AEB5B9.mft (raw, json)
Hash identifier:          +7kH040OLps4j1sNslhFDcj+7fM9KHTImDpfYujmD2Y=
Subject key identifier:   1D:F7:F2:E6:30:DC:F9:BF:2F:68:80:53:D2:74:C8:67:29:C9:02:27
Authority key identifier: 43:FB:37:78:24:B0:48:04:8B:87:56:B6:C6:5C:59:9B:82:AE:B5:B9
Certificate issuer:       /CN=43FB377824B048048B8756B6C65C599B82AEB5B9
Certificate serial:       5B4923825F3D7C549B024B3B6332BAF8E07A5F69
Authority info access:    rsync://repo.rpki.space/repo/Infiniroute/1/43FB377824B048048B8756B6C65C599B82AEB5B9.cer
Subject info access:      rsync://repo.rpki.space/repo/Pfcloud/0/43FB377824B048048B8756B6C65C599B82AEB5B9.mft
Manifest number:          01F7
Signing time:             Tue 03 Jun 2025 15:30:00 +0000
Manifest this update:     Tue 03 Jun 2025 15:25:00 +0000
Manifest next update:     Wed 04 Jun 2025 15:30:00 +0000
Files and hashes:         1: 43FB377824B048048B8756B6C65C599B82AEB5B9.crl (hash: FVIsJTZUhnJld+ijnLJXGd6ZsjFowKfgxvOnJQiBCAc=)
                          2: 326131343a3763323a313032323a3a2f34382d3438203d3e203230343733.roa (hash: lmsU4Ru6WU6LD+Trpra0hPmekL3FYErdA4kEIEpXNJY=)
                          3: 326131343a3763323a3a2f33322d3438203d3e203531333936.roa (hash: Q4TanDo/03WlMBqXG5NZRk00E+9yiRjEKl9vjFnMALs=)
                          4: 6F08383FF15292BFB6A427602811D5E225F0853C.cer (hash: DwPyhoPAg32N+V7bitfMVwCIUjikjYCTsp7qjFCQVio=)
                          5: 326131343a3763323a3a2f33312d3332203d3e203531333936.roa (hash: BnqGqWCqFbZRAQvqh2fuARYnYagyLSJRBck3hTgawF8=)
                          6: 326131343a3763323a313030343a3a2f34382d3438203d3e20323135383635.roa (hash: wdy7zhj9prGo6bSgGDkTv3nBiTLVF8B2Xn97a7b8uwM=)
Validation:               OK
Signature path:           rsync://repo.rpki.space/repo/Pfcloud/0/43FB377824B048048B8756B6C65C599B82AEB5B9.crl
                          rsync://repo.rpki.space/repo/Pfcloud/0/43FB377824B048048B8756B6C65C599B82AEB5B9.mft
                          rsync://repo.rpki.space/repo/Infiniroute/1/43FB377824B048048B8756B6C65C599B82AEB5B9.cer
                          rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
                          rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 04 Jun 2025 15:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:49:23:82:5f:3d:7c:54:9b:02:4b:3b:63:32:ba:f8:e0:7a:5f:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43FB377824B048048B8756B6C65C599B82AEB5B9
        Validity
            Not Before: Jun  3 15:25:00 2025 GMT
            Not After : Jun  4 15:30:00 2025 GMT
        Subject: CN=1DF7F2E630DCF9BF2F688053D274C86729C90227
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ba:ce:83:33:22:51:f5:72:d2:e6:a6:4b:c5:
                    28:ac:98:52:f5:4e:bb:8e:e1:1a:58:73:b6:35:b9:
                    66:55:59:5a:86:68:eb:fd:02:2f:61:2b:5c:87:12:
                    15:a7:f3:97:b9:eb:8b:89:f8:db:1b:bc:9a:ad:8e:
                    50:31:57:1e:93:05:75:50:b8:65:23:a3:6b:b3:52:
                    28:a4:d4:d5:06:aa:8a:e9:31:da:6a:2a:5d:a0:c5:
                    c8:5a:29:c3:04:73:63:e2:d8:43:b1:03:52:57:7d:
                    3c:84:05:8d:b5:33:31:c9:5e:2b:3c:89:79:6a:04:
                    54:d1:7b:73:cb:35:68:09:8e:7e:ec:7f:d6:e6:e5:
                    a8:16:d6:c3:2f:6c:e8:f2:51:4a:80:6e:e2:dd:3a:
                    0e:ac:00:d5:1d:2c:68:4b:d1:99:5e:6e:f0:7e:dc:
                    0c:39:3e:87:dd:90:0f:0f:94:49:69:cb:72:b2:47:
                    c1:ba:51:ec:ea:9a:b1:1a:6b:df:0e:5b:b8:f0:f9:
                    6a:a8:e9:39:12:fe:0a:36:1e:01:6b:e4:fd:fa:c1:
                    d4:b3:2b:22:9c:4d:27:48:9d:82:d3:6d:84:81:8b:
                    9f:34:53:4d:ad:af:2d:22:2e:e7:0f:31:23:12:96:
                    0f:e4:bc:7d:8e:2b:46:4f:6c:ab:70:9a:31:41:ae:
                    5a:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:F7:F2:E6:30:DC:F9:BF:2F:68:80:53:D2:74:C8:67:29:C9:02:27
            X509v3 Authority Key Identifier:
                keyid:43:FB:37:78:24:B0:48:04:8B:87:56:B6:C6:5C:59:9B:82:AE:B5:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo.rpki.space/repo/Pfcloud/0/43FB377824B048048B8756B6C65C599B82AEB5B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo.rpki.space/repo/Infiniroute/1/43FB377824B048048B8756B6C65C599B82AEB5B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo.rpki.space/repo/Pfcloud/0/43FB377824B048048B8756B6C65C599B82AEB5B9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:d9:a5:c2:d5:8e:14:c9:1f:85:13:c9:8e:06:a7:40:dc:de:
         96:3c:6e:f9:5e:ed:56:8c:44:44:20:70:87:88:2a:2b:7f:19:
         0c:42:e8:95:ae:e4:a0:ec:73:68:19:9c:9f:10:16:9c:17:bf:
         97:c8:2a:25:57:bc:a7:ec:f6:65:68:f1:fb:08:4b:de:37:22:
         7f:22:5d:c4:85:5d:40:05:e5:6e:c1:32:26:7e:0c:61:19:7f:
         f5:2f:94:d5:12:e5:9f:5c:a9:5d:01:53:e4:e7:a5:be:ef:76:
         43:48:71:cd:bb:71:0f:ff:13:83:98:1c:a4:ad:bd:b9:45:fb:
         49:14:b2:ad:cf:5c:65:9d:45:fa:e2:b5:8f:b4:e4:06:a9:67:
         f2:92:e1:78:54:75:c9:1c:3b:40:d2:36:45:cf:72:75:58:ef:
         6b:1d:45:a4:f4:97:3a:cb:87:b4:10:0e:ac:9d:df:6a:45:a3:
         5f:e3:3a:28:8e:85:27:e3:1b:48:ef:16:9a:3d:e6:46:99:d6:
         dd:6d:08:34:92:51:18:44:ae:b3:0a:f4:29:8b:90:55:f9:f0:
         b8:3d:3c:5e:73:cd:25:72:c3:d4:42:76:67:7a:06:5f:16:b0:
         83:c7:5d:e5:2b:f2:c7:98:54:95:f1:3f:2f:8c:06:3b:e8:be:
         a2:c2:36:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 10:10:50 2025 by rpki-client