Manifest

$ rpki-client -vvf repo.rpki.space/repo/Pfcloud/2/CAE8150E9595DBE9A74A289BFD0E8D2B1CE6B38D.mft
File:                     CAE8150E9595DBE9A74A289BFD0E8D2B1CE6B38D.mft (raw, json)
Hash identifier:          m4YzhSOs8DSjzkABu30y+mnJdtkaBEXI8vL3ASw60UQ=
Subject key identifier:   B4:1B:06:62:C4:08:4A:2D:9C:3C:0C:AF:A9:59:81:B6:74:81:B6:BC
Authority key identifier: CA:E8:15:0E:95:95:DB:E9:A7:4A:28:9B:FD:0E:8D:2B:1C:E6:B3:8D
Certificate issuer:       /CN=cae8150e9595dbe9a74a289bfd0e8d2b1ce6b38d
Certificate serial:       6A4E7B84AB8745538EEFA9A1EB681359A709874D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yugVDpWV2-mnSiib_Q6NKxzms40.cer
Subject info access:      rsync://repo.rpki.space/repo/Pfcloud/2/CAE8150E9595DBE9A74A289BFD0E8D2B1CE6B38D.mft
Manifest number:          E8
Signing time:             Wed 24 Jun 2026 23:36:41 +0000
Manifest this update:     Wed 24 Jun 2026 23:31:41 +0000
Manifest next update:     Fri 26 Jun 2026 01:40:41 +0000
Files and hashes:         1: AS51396.asa (hash: 0Cf/c6X9d+VxTP+HrophqXvXroNtNkC+Elk5uS8LluE=)
                          2: 326131343a383030303a3a2f32392d3239203d3e203531333936.roa (hash: 954ovZyNTCdFRHquG/fM/KMahRQBOehVwNmvvADjdxQ=)
                          3: CAE8150E9595DBE9A74A289BFD0E8D2B1CE6B38D.crl (hash: ZnVM4uxAmDeog/hs7ZW7dHeDWQAh9sImXY0IkHqkDlw=)
Validation:               OK
Signature path:           rsync://repo.rpki.space/repo/Pfcloud/2/CAE8150E9595DBE9A74A289BFD0E8D2B1CE6B38D.crl
                          rsync://repo.rpki.space/repo/Pfcloud/2/CAE8150E9595DBE9A74A289BFD0E8D2B1CE6B38D.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yugVDpWV2-mnSiib_Q6NKxzms40.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 25 Jun 2026 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:4e:7b:84:ab:87:45:53:8e:ef:a9:a1:eb:68:13:59:a7:09:87:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cae8150e9595dbe9a74a289bfd0e8d2b1ce6b38d
        Validity
            Not Before: Jun 24 23:31:41 2026 GMT
            Not After : Jun 26 01:40:41 2026 GMT
        Subject: CN=B41B0662C4084A2D9C3C0CAFA95981B67481B6BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:78:b7:11:a1:62:4e:47:23:77:2f:0d:8d:80:
                    34:14:9d:2e:53:41:36:80:a4:9f:f7:c5:eb:f6:b3:
                    ef:ac:f0:51:2c:a2:ae:51:f0:63:ab:af:6e:eb:1b:
                    30:7a:fa:69:94:ca:e0:fb:f9:58:6d:73:47:4b:d3:
                    f5:2c:52:11:ea:2a:54:60:19:d8:62:b1:01:c7:8b:
                    a9:9d:9c:36:66:e0:7e:f3:b1:98:c1:a2:47:ab:28:
                    6a:3d:ad:a9:60:bb:d0:a9:b3:bb:95:ff:cc:60:4d:
                    cb:3a:ea:64:4b:a8:0e:57:aa:a5:0b:b6:70:24:09:
                    b0:e6:40:9f:ec:a0:00:86:d3:9a:89:ba:aa:39:66:
                    fd:b9:50:1d:33:b6:00:57:cb:d5:d6:cd:cb:fe:5c:
                    21:6a:a1:a8:7e:e5:a6:87:ca:2a:10:96:da:35:02:
                    f4:ab:e8:85:07:a5:0b:d9:0f:00:81:7e:92:f4:fb:
                    4a:c4:e2:61:4a:49:14:a0:df:bc:64:f2:2d:60:ec:
                    e2:60:99:45:9a:8f:ce:fa:5e:2d:e8:15:d2:21:8b:
                    c5:fb:b9:cd:cc:d4:95:46:5e:b7:ef:4a:36:45:8b:
                    49:75:66:61:f4:74:74:12:d3:61:84:43:2f:8e:3f:
                    28:0a:00:51:cc:26:6c:a9:32:31:3c:e6:a6:c2:cd:
                    d4:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:1B:06:62:C4:08:4A:2D:9C:3C:0C:AF:A9:59:81:B6:74:81:B6:BC
            X509v3 Authority Key Identifier:
                keyid:CA:E8:15:0E:95:95:DB:E9:A7:4A:28:9B:FD:0E:8D:2B:1C:E6:B3:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo.rpki.space/repo/Pfcloud/2/CAE8150E9595DBE9A74A289BFD0E8D2B1CE6B38D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yugVDpWV2-mnSiib_Q6NKxzms40.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo.rpki.space/repo/Pfcloud/2/CAE8150E9595DBE9A74A289BFD0E8D2B1CE6B38D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:40:3c:ef:ef:f4:25:84:b4:03:6b:cd:7a:37:4f:a3:94:7d:
         b4:10:90:09:92:a2:24:fb:b0:9c:72:dd:0e:f9:51:e6:90:c0:
         cd:de:3e:e4:6f:88:1f:4d:00:49:68:cf:f0:2c:63:cf:cf:c2:
         9c:e7:5e:76:75:1d:62:ea:d2:1c:4b:f7:0d:58:fa:8e:60:e6:
         19:d3:9e:02:46:22:09:74:ec:2e:31:b6:12:8a:31:8e:90:1d:
         81:f9:6f:31:44:5e:81:80:05:8c:ea:0b:62:f7:c3:57:5b:29:
         57:ac:bd:24:c8:64:81:d2:7e:cd:84:64:4c:df:89:d0:87:2d:
         b5:a9:88:11:9f:f2:9e:b9:06:3a:fe:8f:16:91:6e:51:19:c5:
         83:c1:6b:b0:a9:ee:46:d2:4d:fa:46:27:ce:5f:8a:ce:65:48:
         df:09:db:cd:06:85:79:93:43:a0:c4:48:5a:73:64:4a:fa:8e:
         e1:2a:65:fe:b8:24:f4:75:54:d3:bd:e3:3e:bb:7d:b3:9d:1f:
         4f:53:47:6f:7f:97:99:c2:16:ca:df:97:dc:1b:4e:e3:27:3f:
         2e:9f:b4:45:39:52:0e:e8:ee:cf:81:0e:2d:7f:8b:54:92:e0:
         8a:d1:c0:c3:de:bd:ee:fe:88:5a:30:0a:e1:fa:5f:b7:68:6b:
         8b:f4:5a:c3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 25 08:34:38 2026 by rpki-client