Manifest

$ rpki-client -vvvf repo.rpki.space/repo/Pfcloud/2/CAE8150E9595DBE9A74A289BFD0E8D2B1CE6B38D.mft
File:                     CAE8150E9595DBE9A74A289BFD0E8D2B1CE6B38D.mft (raw, json)
Hash identifier:          VDYHNKqAtdomQeXsLyYdI+FKQDBzU2pRMlun5GI8xfM=
Subject key identifier:   3A:B4:2A:88:E3:8F:36:0F:78:CB:A0:F3:5B:26:42:13:69:8A:B7:AB
Authority key identifier: CA:E8:15:0E:95:95:DB:E9:A7:4A:28:9B:FD:0E:8D:2B:1C:E6:B3:8D
Certificate issuer:       /CN=cae8150e9595dbe9a74a289bfd0e8d2b1ce6b38d
Certificate serial:       04A648E059B03F2F50560D672E985BCC62EE8742
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yugVDpWV2-mnSiib_Q6NKxzms40.cer
Subject info access:      rsync://repo.rpki.space/repo/Pfcloud/2/CAE8150E9595DBE9A74A289BFD0E8D2B1CE6B38D.mft
Manifest number:          016A
Signing time:             Wed 30 Sep 2026 17:26:42 +0000
Manifest this update:     Wed 30 Sep 2026 17:21:42 +0000
Manifest next update:     Thu 01 Oct 2026 19:57:42 +0000
Files and hashes:         1: CAE8150E9595DBE9A74A289BFD0E8D2B1CE6B38D.crl (hash: s6f7QCHJm4vyetdft6IssnKeIgnd+p1Kc5NXTrKslU8=)
                          2: 326131343a383030303a3a2f32392d3239203d3e203531333936.roa (hash: 954ovZyNTCdFRHquG/fM/KMahRQBOehVwNmvvADjdxQ=)
                          3: AS51396.asa (hash: 0Cf/c6X9d+VxTP+HrophqXvXroNtNkC+Elk5uS8LluE=)
Validation:               OK
Signature path:           rsync://repo.rpki.space/repo/Pfcloud/2/CAE8150E9595DBE9A74A289BFD0E8D2B1CE6B38D.crl
                          rsync://repo.rpki.space/repo/Pfcloud/2/CAE8150E9595DBE9A74A289BFD0E8D2B1CE6B38D.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yugVDpWV2-mnSiib_Q6NKxzms40.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 Oct 2026 19:57:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:a6:48:e0:59:b0:3f:2f:50:56:0d:67:2e:98:5b:cc:62:ee:87:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cae8150e9595dbe9a74a289bfd0e8d2b1ce6b38d
        Validity
            Not Before: Sep 30 17:21:42 2026 GMT
            Not After : Oct  1 19:57:42 2026 GMT
        Subject: CN=3AB42A88E38F360F78CBA0F35B264213698AB7AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:f0:90:f3:d9:79:5e:6a:af:7b:54:a1:a0:bc:
                    16:71:4b:6a:fd:7a:1b:29:e4:f3:19:6c:82:f4:5b:
                    63:f4:ce:68:b1:fb:14:be:d1:4f:31:03:a3:ff:01:
                    89:32:d5:2c:cb:72:84:32:0d:8b:77:e9:48:f1:7b:
                    fc:a7:06:77:b7:c1:9a:22:1e:6a:3d:a1:0f:b3:7c:
                    9c:be:87:c0:d0:76:cc:0c:76:00:04:82:cc:45:96:
                    6c:7b:ab:17:f3:c2:31:7e:ed:e6:15:54:ba:64:cd:
                    6b:ba:6d:28:01:78:58:29:16:9d:e2:49:5b:9c:36:
                    4c:61:9c:7d:34:59:1d:89:f6:39:2f:f5:67:c6:3c:
                    b5:33:33:0a:01:f7:06:89:d8:d3:e8:72:fd:48:d3:
                    80:29:d5:e2:06:31:8c:84:63:bf:6b:af:75:6d:90:
                    0d:72:d0:87:43:18:a6:24:43:0a:74:bd:8e:20:00:
                    d8:5f:35:bb:4b:e8:55:76:03:6d:f9:79:ec:56:73:
                    69:cc:46:3f:a6:4b:94:db:53:8b:a2:56:35:41:ce:
                    7d:ca:ec:ab:89:2b:0c:ab:c0:61:f2:00:6f:a3:25:
                    b5:15:d1:83:b0:01:b3:e0:d4:06:b2:1f:dc:4c:f9:
                    76:55:86:9d:d9:54:35:54:0c:32:ad:57:8f:1d:48:
                    bd:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:B4:2A:88:E3:8F:36:0F:78:CB:A0:F3:5B:26:42:13:69:8A:B7:AB
            X509v3 Authority Key Identifier:
                keyid:CA:E8:15:0E:95:95:DB:E9:A7:4A:28:9B:FD:0E:8D:2B:1C:E6:B3:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo.rpki.space/repo/Pfcloud/2/CAE8150E9595DBE9A74A289BFD0E8D2B1CE6B38D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yugVDpWV2-mnSiib_Q6NKxzms40.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo.rpki.space/repo/Pfcloud/2/CAE8150E9595DBE9A74A289BFD0E8D2B1CE6B38D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:9e:4f:74:cb:f2:29:7c:ab:34:d0:b5:46:44:6c:96:30:f4:
         0c:4d:55:15:7a:22:1c:35:bc:b5:a3:e4:49:24:c6:59:5b:62:
         e2:9c:61:9f:4f:ed:5a:5d:8a:e3:05:77:08:fc:9f:35:3a:91:
         c2:7b:c0:db:bc:6e:a2:fd:c3:02:ae:89:1b:e7:48:81:3b:5d:
         66:e1:16:bb:77:22:27:58:88:fc:65:48:77:e0:52:a4:34:0f:
         d3:b7:d8:39:da:3d:f0:35:49:26:d0:9a:88:78:cc:ce:07:20:
         e6:9f:80:06:7a:d4:ca:14:6a:c9:62:5b:09:3a:a1:6a:86:a9:
         9b:ea:50:55:82:25:a9:c8:86:4b:f4:7d:b5:fe:13:38:2d:1b:
         e4:f5:0c:8e:9f:2e:7b:0c:1f:ab:0b:f1:8b:9f:ca:56:16:fe:
         c7:27:53:91:3e:f2:d0:95:86:0a:5e:88:91:2c:71:9a:53:9f:
         d4:c8:38:08:a7:8d:c7:e8:1f:d4:68:af:9c:16:c5:b8:e3:66:
         04:01:a3:2b:cf:fb:6e:45:f4:70:aa:40:20:a4:b1:40:41:79:
         7f:81:fc:90:15:2d:96:49:bf:18:cd:cc:39:b1:7f:2a:52:3a:
         47:30:d3:6a:98:6b:76:c5:fb:1e:32:91:df:f3:2e:1d:c2:15:
         e2:b6:3f:eb
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Oct 1 12:00:55 2026 by rpki-client