Manifest

$ rpki-client -vvf repo.rpki.space/repo/Pfcloud/1/28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.mft
File:                     28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.mft (raw, json)
Hash identifier:          QYffANVOD80zsNVs5j4X4X+JrQB+zX8HwichVJ0A2VE=
Subject key identifier:   6C:D0:31:39:83:6D:F1:35:04:8E:64:D2:AA:D0:E7:DD:62:92:31:BA
Authority key identifier: 28:D2:3E:C5:E7:87:AA:AE:05:2A:87:73:FD:9D:FE:C5:B1:FB:C3:A2
Certificate issuer:       /CN=28d23ec5e787aaae052a8773fd9dfec5b1fbc3a2
Certificate serial:       6E650C8A259289C56EF144A28753B05E1398BA79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KNI-xeeHqq4FKodz_Z3-xbH7w6I.cer
Subject info access:      rsync://repo.rpki.space/repo/Pfcloud/1/28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.mft
Manifest number:          0217
Signing time:             Thu 04 Sep 2025 17:44:19 +0000
Manifest this update:     Thu 04 Sep 2025 17:39:19 +0000
Manifest next update:     Fri 05 Sep 2025 20:11:19 +0000
Files and hashes:         1: AS51396.asa (hash: LPntScnqKTV0B/ca4ayh0Ad7plN1tSxen2CVMDLBZ+E=)
                          2: 28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.crl (hash: U3DIhRP2n4qqWhB8NzAKubQK1lK0SXCZUVxWAnmUY+g=)
Validation:               OK
Signature path:           rsync://repo.rpki.space/repo/Pfcloud/1/28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.crl
                          rsync://repo.rpki.space/repo/Pfcloud/1/28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KNI-xeeHqq4FKodz_Z3-xbH7w6I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Sep 2025 19:46:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:65:0c:8a:25:92:89:c5:6e:f1:44:a2:87:53:b0:5e:13:98:ba:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28d23ec5e787aaae052a8773fd9dfec5b1fbc3a2
        Validity
            Not Before: Sep  4 17:39:19 2025 GMT
            Not After : Sep  5 20:11:19 2025 GMT
        Subject: CN=6CD03139836DF135048E64D2AAD0E7DD629231BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c5:77:22:5e:04:b9:50:f3:5b:21:d6:ed:df:
                    9a:b9:b6:95:23:31:60:10:37:6b:d9:f2:27:bd:38:
                    41:3f:8d:f8:d0:6a:c4:3b:de:b7:6d:8d:9c:37:51:
                    0a:91:07:29:00:3e:78:6f:f2:39:fe:32:00:87:8c:
                    2e:4c:be:b3:3e:5d:80:40:f5:cb:60:76:0b:c7:fe:
                    49:14:1c:06:ca:0f:ca:87:9a:5a:20:1d:b5:bd:cb:
                    a4:44:c4:9e:48:08:79:03:e5:12:bd:eb:2e:bd:8c:
                    16:70:1c:5f:15:a4:e1:9f:68:d6:80:7e:33:5c:7f:
                    7d:91:8a:e6:f4:86:b1:7f:9b:80:2a:b2:7c:58:43:
                    a4:80:eb:a3:b9:02:d4:38:b0:d0:dc:c7:77:ae:ea:
                    3e:f1:f6:4b:20:d9:3c:0c:1f:f7:fb:eb:77:82:74:
                    6f:ef:a3:36:07:c7:20:6d:12:69:7d:d2:26:35:99:
                    60:76:95:88:a4:89:c4:a3:f6:1c:8a:d2:ad:ac:d0:
                    4f:f7:5f:c1:ed:59:47:e1:3a:64:d8:cd:7d:77:42:
                    96:1f:a3:15:42:08:ed:9b:a3:a7:f5:27:16:81:50:
                    f4:58:33:54:63:18:f1:d2:5c:f8:62:a6:55:f8:33:
                    01:2e:ec:60:e4:72:22:49:e2:a2:fb:b0:c4:d9:7f:
                    e2:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:D0:31:39:83:6D:F1:35:04:8E:64:D2:AA:D0:E7:DD:62:92:31:BA
            X509v3 Authority Key Identifier:
                keyid:28:D2:3E:C5:E7:87:AA:AE:05:2A:87:73:FD:9D:FE:C5:B1:FB:C3:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo.rpki.space/repo/Pfcloud/1/28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KNI-xeeHqq4FKodz_Z3-xbH7w6I.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo.rpki.space/repo/Pfcloud/1/28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:82:6d:9d:b3:31:15:40:cb:e9:59:f4:d0:74:1c:2f:4f:c7:
         c7:d6:be:ff:68:ff:94:99:e2:88:10:a4:2a:bd:d9:dd:99:57:
         24:6d:9b:7f:28:09:03:26:0c:38:2d:80:33:3b:2d:4f:a5:18:
         b6:97:4a:db:37:6b:a6:19:47:73:13:5d:68:c2:b1:e8:5e:37:
         f8:e1:ec:39:33:af:5b:9d:f7:94:7d:39:e7:34:dd:a3:ca:61:
         14:c0:af:7a:97:17:ef:da:e1:8f:ec:76:ce:9f:33:8f:8e:8e:
         ea:07:f2:63:74:c1:2d:e8:a4:46:0a:b8:52:90:19:0f:03:69:
         a5:27:89:a7:7c:28:38:02:f9:29:72:25:26:d6:69:bc:29:73:
         f8:87:36:e4:ca:33:c9:5e:cf:95:c1:7f:e6:9f:8b:89:51:ba:
         a9:31:3a:a1:3c:55:9f:db:94:fa:87:cd:82:5d:14:c0:c0:33:
         7f:f2:bf:87:61:f0:19:1b:b2:1c:cb:24:0e:f5:7d:15:13:ac:
         c4:9a:e2:64:7c:1a:54:70:53:61:7d:89:2a:f1:a0:40:50:7e:
         50:90:ed:0f:98:94:d4:86:62:f9:a4:1f:ae:14:a2:8f:61:2e:
         4e:04:d5:7f:5c:ee:fe:c3:74:f5:2c:9c:8d:22:6c:d3:df:f3:
         bd:2e:13:9e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Sep 5 04:53:28 2025 by rpki-client