
$ rpki-client -vvf repo.rpki.space/repo/pfcloud-hostarray/1/03652B3C78925180B74895BD527DF7C661F7318A.mft
File: 03652B3C78925180B74895BD527DF7C661F7318A.mft (raw, json)
Hash identifier: 8pzp3kp95FCZadoYaL5hLCNSpq8mxSMt6CNBosQIWqU=
Subject key identifier: EE:A5:09:EA:37:B2:3D:47:88:CB:A9:47:64:C1:5F:1C:F4:E8:8F:0D
Authority key identifier: 03:65:2B:3C:78:92:51:80:B7:48:95:BD:52:7D:F7:C6:61:F7:31:8A
Certificate issuer: /CN=03652B3C78925180B74895BD527DF7C661F7318A
Certificate serial: 2CC82FC762F972B6ED978570845747B772DDEE7B
Authority info access: rsync://repo.rpki.space/repo/Infiniroute/1/03652B3C78925180B74895BD527DF7C661F7318A.cer
Subject info access: rsync://repo.rpki.space/repo/pfcloud-hostarray/1/03652B3C78925180B74895BD527DF7C661F7318A.mft
Manifest number: 49
Signing time: Thu 12 Mar 2026 13:53:25 +0000
Manifest this update: Thu 12 Mar 2026 13:48:25 +0000
Manifest next update: Fri 13 Mar 2026 17:35:25 +0000
Files and hashes: 1: 326131343a3763303a373030303a3a2f33362d3336203d3e20323134393135.roa (hash: I+lwtvXdNzefCDnyaEEsl14OvcvE6SoWq5u6jb+Yks8=)
2: 326131343a3763303a373030303a3a2f33362d3438203d3e20323134393135.roa (hash: U79fAOCiEyBFdetDIx5dFSSQvQPbRz2AzOx/UX/O1Ak=)
3: 03652B3C78925180B74895BD527DF7C661F7318A.crl (hash: P7/kB3DSnK6XH8maU1YoVK2ZO1E/Po2K4lQuqfjmtaQ=)
4: 326131343a3763303a373030303a3a2f34302d3430203d3e20323134393135.roa (hash: kHVRWteppLrt5qF6ptNtQ5FLxtG46GkEhOHRvRXPh4E=)
Validation: OK
Signature path: rsync://repo.rpki.space/repo/pfcloud-hostarray/1/03652B3C78925180B74895BD527DF7C661F7318A.crl
rsync://repo.rpki.space/repo/pfcloud-hostarray/1/03652B3C78925180B74895BD527DF7C661F7318A.mft
rsync://repo.rpki.space/repo/Infiniroute/1/03652B3C78925180B74895BD527DF7C661F7318A.cer
rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.mft
rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 17:35:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:c8:2f:c7:62:f9:72:b6:ed:97:85:70:84:57:47:b7:72:dd:ee:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03652B3C78925180B74895BD527DF7C661F7318A
Validity
Not Before: Mar 12 13:48:25 2026 GMT
Not After : Mar 13 17:35:25 2026 GMT
Subject: CN=EEA509EA37B23D4788CBA94764C15F1CF4E88F0D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:7b:c6:f2:4a:3a:3f:0a:4d:75:b2:90:77:25:
3c:46:cf:54:3d:1c:4b:28:ad:4d:29:4f:7b:1b:73:
02:75:1c:4a:99:77:cc:d6:93:18:7c:48:24:58:b0:
9f:34:49:10:8f:a9:f5:8a:8a:50:62:74:64:27:a9:
47:9e:3c:db:20:73:af:4b:c2:ec:e8:ab:90:1d:02:
99:12:ef:5c:16:01:3e:6b:a3:26:09:80:1c:33:e2:
a2:0d:d0:98:25:d6:6f:b2:c3:d2:9c:21:38:55:d7:
4c:66:d0:35:30:1b:49:00:bc:60:ca:fb:6f:a3:cb:
69:da:2e:5b:c7:a5:9b:64:ce:12:26:b2:0c:0f:a5:
7e:38:df:22:1f:93:2d:2e:20:3f:47:17:9a:ae:80:
fa:f3:2b:bf:9a:0e:3d:c8:47:5b:3e:fb:66:8d:f3:
0b:75:dc:ca:7a:08:21:32:08:ee:12:26:ed:ac:91:
2e:85:20:2f:1d:3b:e3:2e:3d:46:35:b8:e2:88:21:
da:55:02:fa:75:36:55:8d:68:09:a8:27:4f:12:46:
69:90:94:07:42:52:3b:17:c2:9d:ce:ec:37:a9:01:
eb:69:df:73:2e:a5:d9:06:d8:d5:42:1d:30:3f:14:
d0:20:8f:0c:5f:34:7c:0c:e7:cb:09:0e:2d:49:86:
de:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:A5:09:EA:37:B2:3D:47:88:CB:A9:47:64:C1:5F:1C:F4:E8:8F:0D
X509v3 Authority Key Identifier:
keyid:03:65:2B:3C:78:92:51:80:B7:48:95:BD:52:7D:F7:C6:61:F7:31:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo.rpki.space/repo/pfcloud-hostarray/1/03652B3C78925180B74895BD527DF7C661F7318A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo.rpki.space/repo/Infiniroute/1/03652B3C78925180B74895BD527DF7C661F7318A.cer
Subject Information Access:
Signed Object - URI:rsync://repo.rpki.space/repo/pfcloud-hostarray/1/03652B3C78925180B74895BD527DF7C661F7318A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:37:c4:5a:45:dd:13:93:98:91:c9:9a:5c:2d:a6:15:5c:98:
d5:f7:a8:cb:07:1f:74:83:da:98:ff:d0:69:32:65:68:10:da:
4c:50:65:00:7e:03:33:bc:f0:40:fa:9e:94:34:9d:5f:98:f9:
ad:50:1b:ba:3a:88:fa:01:5f:71:25:3c:6d:5c:19:73:e4:a7:
4b:85:bd:18:8f:9d:a7:4f:4f:ea:79:f4:25:4f:58:9c:4b:24:
71:a7:6b:5f:9f:72:63:4d:3f:e7:bd:ca:7e:19:b2:0b:d0:66:
ca:89:47:10:7c:08:a8:46:4c:1d:a8:40:73:35:b2:10:3f:60:
f4:89:de:85:cb:9f:55:9e:83:de:04:07:e1:3e:ba:71:f6:59:
26:b0:97:61:86:37:30:c8:37:e7:6e:4d:e4:4a:21:ad:eb:1c:
3c:5b:92:71:b1:ca:e0:ce:a6:45:b9:70:7d:4a:6e:a6:a4:1f:
26:62:de:dc:fb:cc:72:4a:b6:a8:44:44:6d:94:44:c2:98:24:
d2:03:f3:50:a2:9b:26:1b:4a:bc:39:9d:32:c4:1b:76:38:b1:
21:54:ff:46:c8:99:7e:6e:f6:52:ae:b9:78:e8:90:31:43:f0:
30:81:f7:7e:10:23:21:a3:29:99:52:d9:54:f6:75:be:ac:91:
5e:f7:f4:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 09:23:07 2026 by rpki-client