Manifest

$ rpki-client -vvvf repo.rpki.space/repo/pfcloud-tgewiese/0/CABF373EADCD9376E524CE313AB868C03EEB1088.mft
File:                     CABF373EADCD9376E524CE313AB868C03EEB1088.mft (raw, json)
Hash identifier:          hPahVFNDitRhGGeHjt1Tl37cCojd4FMwehxfRWozvN0=
Subject key identifier:   C1:96:DD:74:41:F2:0B:CD:34:40:9E:76:9C:02:58:E8:3E:CC:7D:F2
Authority key identifier: CA:BF:37:3E:AD:CD:93:76:E5:24:CE:31:3A:B8:68:C0:3E:EB:10:88
Certificate issuer:       /CN=CABF373EADCD9376E524CE313AB868C03EEB1088
Certificate serial:       4CB53D16105F99E52D754E18001893EA7FEA777B
Authority info access:    rsync://repo.rpki.space/repo/Infiniroute/1/CABF373EADCD9376E524CE313AB868C03EEB1088.cer
Subject info access:      rsync://repo.rpki.space/repo/pfcloud-tgewiese/0/CABF373EADCD9376E524CE313AB868C03EEB1088.mft
Manifest number:          03AF
Signing time:             Fri 04 Sep 2026 09:38:03 +0000
Manifest this update:     Fri 04 Sep 2026 09:33:03 +0000
Manifest next update:     Sat 05 Sep 2026 10:48:03 +0000
Files and hashes:         1: CABF373EADCD9376E524CE313AB868C03EEB1088.crl (hash: IY7kO03oPdFRfc6sr3NdjxM+8Y9GZcgcita5gZ2KINY=)
                          2: 326131343a3763303a313330303a3a2f34302d3430203d3e20323133383530.roa (hash: ghrsyOsNjV1vJxVSpYhOwOHrESe1ZdqgfbMmoLsZ/wQ=)
                          3: 326131343a3763303a313030303a3a2f33382d3338203d3e20323135333635.roa (hash: nucu8YeXyAJ1d1cM0WF7236LM50tPwAEitl5+zxIpfo=)
                          4: 326131343a3763303a313230303a3a2f34302d3430203d3e20323031363837.roa (hash: f/cdjCfjhlySyNuo0kgMIF/CdapB1t3ceS2H+YsmCRc=)
Validation:               OK
Signature path:           rsync://repo.rpki.space/repo/pfcloud-tgewiese/0/CABF373EADCD9376E524CE313AB868C03EEB1088.crl
                          rsync://repo.rpki.space/repo/pfcloud-tgewiese/0/CABF373EADCD9376E524CE313AB868C03EEB1088.mft
                          rsync://repo.rpki.space/repo/Infiniroute/1/CABF373EADCD9376E524CE313AB868C03EEB1088.cer
                          rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
                          rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 10:48:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:b5:3d:16:10:5f:99:e5:2d:75:4e:18:00:18:93:ea:7f:ea:77:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CABF373EADCD9376E524CE313AB868C03EEB1088
        Validity
            Not Before: Sep  4 09:33:03 2026 GMT
            Not After : Sep  5 10:48:03 2026 GMT
        Subject: CN=C196DD7441F20BCD34409E769C0258E83ECC7DF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:3b:4c:5c:5b:38:5a:b2:f1:fd:21:09:62:2a:
                    a7:18:6d:14:0a:91:95:2e:fd:23:b4:1a:40:d8:82:
                    57:5e:98:88:3a:c9:10:28:fc:db:cf:d5:88:9b:af:
                    59:3b:92:1a:b9:25:37:b4:bd:e3:d0:c5:e0:e7:28:
                    a6:83:f0:93:5a:39:ff:f2:2f:19:1a:38:75:33:c3:
                    e5:7b:ec:1f:97:14:6c:d9:03:a8:6b:11:49:ec:ee:
                    f4:d4:c2:29:38:da:6f:05:9c:a9:70:f1:cb:3d:c5:
                    b7:3a:b2:e0:36:00:97:1a:35:a1:35:60:86:c1:7b:
                    0a:27:76:7e:a0:6a:66:08:98:10:62:9a:0b:0c:9c:
                    51:04:ec:ad:72:5a:77:d2:c7:f1:a2:e1:10:31:b4:
                    8c:17:34:e4:78:35:33:6d:72:4c:69:a3:f8:5f:59:
                    51:57:f6:05:59:ef:2c:7c:81:a7:e3:d0:fd:85:27:
                    b0:a9:01:9c:85:db:1f:fa:0b:e9:70:f9:b5:bc:8e:
                    de:3c:b0:6b:49:d3:c7:0d:50:aa:93:4c:a1:0c:e8:
                    96:39:6b:c2:85:f3:96:f2:13:07:1b:72:20:c3:15:
                    b9:8b:f9:5e:26:88:21:80:f2:59:c0:3a:85:9e:ef:
                    d5:18:99:29:8b:88:2e:85:d3:3b:0f:35:9c:32:dd:
                    d7:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:96:DD:74:41:F2:0B:CD:34:40:9E:76:9C:02:58:E8:3E:CC:7D:F2
            X509v3 Authority Key Identifier:
                keyid:CA:BF:37:3E:AD:CD:93:76:E5:24:CE:31:3A:B8:68:C0:3E:EB:10:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo.rpki.space/repo/pfcloud-tgewiese/0/CABF373EADCD9376E524CE313AB868C03EEB1088.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo.rpki.space/repo/Infiniroute/1/CABF373EADCD9376E524CE313AB868C03EEB1088.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo.rpki.space/repo/pfcloud-tgewiese/0/CABF373EADCD9376E524CE313AB868C03EEB1088.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:d3:b3:19:b9:95:53:69:ab:27:61:40:3a:ca:0a:bb:fe:92:
         75:1c:57:fe:bf:18:b9:7d:01:5f:9f:f0:b0:82:ab:99:89:7b:
         84:6d:c7:4e:71:49:17:4f:14:19:5d:e4:9d:7d:ca:d7:02:d7:
         2d:c5:0a:22:18:0a:9f:25:6c:72:32:49:a6:76:86:fc:6c:66:
         8a:49:df:b2:38:3f:f4:eb:f8:5c:fa:67:40:d6:5a:68:58:d4:
         bb:29:66:06:fa:93:21:0a:f7:6e:fb:50:1c:f7:9e:f0:a4:c9:
         dd:a3:34:3f:18:6b:4c:cf:f0:25:46:0c:96:79:c9:35:e1:06:
         5b:b1:93:92:7a:df:a4:d5:46:e2:ac:0d:58:9e:52:51:5e:4b:
         66:cc:66:6c:2d:ef:ac:39:78:ca:b6:32:a6:11:08:0c:17:2a:
         e1:bc:92:f9:e3:37:2b:65:51:f8:23:2f:42:08:45:38:8f:b3:
         9f:f5:b2:0d:93:aa:e5:b0:31:cd:aa:80:b1:00:df:8c:25:97:
         29:fa:1b:b0:6f:ec:51:4d:b6:54:41:93:a5:6f:22:67:d8:d3:
         ec:98:48:20:97:36:4a:66:0e:53:11:ff:17:be:be:0e:a4:15:
         73:21:d5:9a:57:da:a2:0f:86:c9:a8:6d:d3:84:45:5a:17:eb:
         c2:00:5e:33
-----BEGIN CERTIFICATE-----
MIIE/DCCA+SgAwIBAgIUTLU9FhBfmeUtdU4YABiT6n/qd3swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0FCRjM3M0VBRENEOTM3NkU1MjRDRTMxM0FCODY4QzAz
RUVCMTA4ODAeFw0yNjA5MDQwOTMzMDNaFw0yNjA5MDUxMDQ4MDNaMDMxMTAvBgNV
BAMTKEMxOTZERDc0NDFGMjBCQ0QzNDQwOUU3NjlDMDI1OEU4M0VDQzdERjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzO0xcWzhasvH9IQliKqcYbRQK
kZUu/SO0GkDYgldemIg6yRAo/NvP1Yibr1k7khq5JTe0vePQxeDnKKaD8JNaOf/y
LxkaOHUzw+V77B+XFGzZA6hrEUns7vTUwik42m8FnKlw8cs9xbc6suA2AJcaNaE1
YIbBewondn6gamYImBBimgsMnFEE7K1yWnfSx/Gi4RAxtIwXNOR4NTNtckxpo/hf
WVFX9gVZ7yx8gafj0P2FJ7CpAZyF2x/6C+lw+bW8jt48sGtJ08cNUKqTTKEM6JY5
a8KF85byEwcbciDDFbmL+V4miCGA8lnAOoWe79UYmSmLiC6F0zsPNZwy3ddbAgMB
AAGjggIGMIICAjAdBgNVHQ4EFgQUwZbddEHyC800QJ52nAJY6D7MffIwHwYDVR0j
BBgwFoAUyr83Pq3Nk3blJM4xOrhowD7rEIgwDgYDVR0PAQH/BAQDAgeAMG0GA1Ud
HwRmMGQwYqBgoF6GXHJzeW5jOi8vcmVwby5ycGtpLnNwYWNlL3JlcG8vcGZjbG91
ZC10Z2V3aWVzZS8wL0NBQkYzNzNFQURDRDkzNzZFNTI0Q0UzMTNBQjg2OEMwM0VF
QjEwODguY3JsMHMGCCsGAQUFBwEBBGcwZTBjBggrBgEFBQcwAoZXcnN5bmM6Ly9y
ZXBvLnJwa2kuc3BhY2UvcmVwby9JbmZpbmlyb3V0ZS8xL0NBQkYzNzNFQURDRDkz
NzZFNTI0Q0UzMTNBQjg2OEMwM0VFQjEwODguY2VyMHgGCCsGAQUFBwELBGwwajBo
BggrBgEFBQcwC4ZccnN5bmM6Ly9yZXBvLnJwa2kuc3BhY2UvcmVwby9wZmNsb3Vk
LXRnZXdpZXNlLzAvQ0FCRjM3M0VBRENEOTM3NkU1MjRDRTMxM0FCODY4QzAzRUVC
MTA4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB
/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJ
KoZIhvcNAQELBQADggEBAJTTsxm5lVNpqydhQDrKCrv+knUcV/6/GLl9AV+f8LCC
q5mJe4Rtx05xSRdPFBld5J19ytcC1y3FCiIYCp8lbHIySaZ2hvxsZopJ37I4P/Tr
+Fz6Z0DWWmhY1LspZgb6kyEK9277UBz3nvCkyd2jND8Ya0zP8CVGDJZ5yTXhBlux
k5J636TVRuKsDVieUlFeS2bMZmwt76w5eMq2MqYRCAwXKuG8kvnjNytlUfgjL0II
RTiPs5/1sg2TquWwMc2qgLEA34wllyn6G7Bv7FFNtlRBk6VvImfY0+yYSCCXNkpm
DlMR/xe+vg6kFXMh1ZpX2qIPhsmobdOERVoX68IAXjM=
-----END CERTIFICATE-----
Generated at Fri Sep 4 23:40:38 2026 by rpki-client