
$ rpki-client -vvf repo.rpki.space/repo/pfcloud-tgewiese/0/CABF373EADCD9376E524CE313AB868C03EEB1088.mft
File: CABF373EADCD9376E524CE313AB868C03EEB1088.mft (raw, json)
Hash identifier: 5Nn3DjziQtNpW7iovgsVWq5I5gzVg9Tj2mT9JaK0rbw=
Subject key identifier: 20:EC:89:9E:3E:B0:85:E5:1C:78:51:BA:EF:34:CC:6B:8C:A9:E8:6E
Authority key identifier: CA:BF:37:3E:AD:CD:93:76:E5:24:CE:31:3A:B8:68:C0:3E:EB:10:88
Certificate issuer: /CN=CABF373EADCD9376E524CE313AB868C03EEB1088
Certificate serial: 156F651D560C0FCA9DA7767C4306F33242AFA89A
Authority info access: rsync://repo.rpki.space/repo/Infiniroute/1/CABF373EADCD9376E524CE313AB868C03EEB1088.cer
Subject info access: rsync://repo.rpki.space/repo/pfcloud-tgewiese/0/CABF373EADCD9376E524CE313AB868C03EEB1088.mft
Manifest number: 0332
Signing time: Thu 04 Jun 2026 11:17:46 +0000
Manifest this update: Thu 04 Jun 2026 11:12:46 +0000
Manifest next update: Fri 05 Jun 2026 12:21:46 +0000
Files and hashes: 1: 326131343a3763303a313030333a3a2f34382d3438203d3e20313938353536.roa (hash: QMt8lEyTQwe9SFYUxgs8m22kisYpY/qxUFfV471xlpE=)
2: 326131343a3763303a313030303a3a2f33382d3338203d3e20323135333635.roa (hash: nucu8YeXyAJ1d1cM0WF7236LM50tPwAEitl5+zxIpfo=)
3: 326131343a3763303a313230303a3a2f34302d3430203d3e20323031363837.roa (hash: f/cdjCfjhlySyNuo0kgMIF/CdapB1t3ceS2H+YsmCRc=)
4: CABF373EADCD9376E524CE313AB868C03EEB1088.crl (hash: /HlZGWcLN6VvItsI9USkw5te0Ars95US3kKqB0TAsNo=)
5: 326131343a3763303a313330303a3a2f34302d3430203d3e20323133383530.roa (hash: ghrsyOsNjV1vJxVSpYhOwOHrESe1ZdqgfbMmoLsZ/wQ=)
6: 326131343a3763303a313030333a3a2f34382d3438203d3e20323038323038.roa (hash: Q1m8GBF9oFuLdgm3mf/7nAqbDbU5cuywYXav+p5MPSc=)
Validation: OK
Signature path: rsync://repo.rpki.space/repo/pfcloud-tgewiese/0/CABF373EADCD9376E524CE313AB868C03EEB1088.crl
rsync://repo.rpki.space/repo/pfcloud-tgewiese/0/CABF373EADCD9376E524CE313AB868C03EEB1088.mft
rsync://repo.rpki.space/repo/Infiniroute/1/CABF373EADCD9376E524CE313AB868C03EEB1088.cer
rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.mft
rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 05:38:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:6f:65:1d:56:0c:0f:ca:9d:a7:76:7c:43:06:f3:32:42:af:a8:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CABF373EADCD9376E524CE313AB868C03EEB1088
Validity
Not Before: Jun 4 11:12:46 2026 GMT
Not After : Jun 5 12:21:46 2026 GMT
Subject: CN=20EC899E3EB085E51C7851BAEF34CC6B8CA9E86E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a3:2e:97:da:a5:c8:06:3a:6d:d2:e2:55:3c:
fa:5a:ca:30:8b:18:d0:38:ce:1d:01:1a:b2:b1:f1:
60:c5:28:e3:f1:29:5d:e3:aa:23:04:8f:42:00:21:
07:1c:16:fb:08:4e:21:e2:9e:23:17:08:44:51:15:
61:3a:d8:76:30:54:76:8f:20:07:e3:98:06:fc:b0:
6f:47:dd:35:52:53:0b:a8:82:69:96:f8:8c:66:9d:
5a:d6:e3:a6:94:bb:8d:87:61:75:cc:2d:dd:d5:08:
41:9a:31:13:31:de:26:f9:65:ab:2b:b2:7e:56:03:
80:ab:e6:c7:6e:c6:2f:57:fd:91:dd:be:93:81:75:
36:4e:99:7b:23:d6:04:59:ca:83:d2:b1:61:d1:dc:
d4:0f:93:7f:b6:51:64:13:fe:85:f7:4f:5f:aa:9a:
dc:e1:11:d9:8a:68:75:14:f4:78:40:58:1c:84:dc:
1e:09:26:f6:72:47:ba:6d:d3:78:cb:4e:4f:b8:d9:
1f:d9:00:7d:83:22:72:ea:4f:b8:32:93:29:74:60:
fd:9d:84:d3:be:74:1c:75:93:0a:43:85:ef:15:83:
86:95:c4:2d:5c:ff:4c:3e:dc:b4:2c:f2:d2:c8:7b:
82:69:2f:6c:06:a9:a8:a4:8f:e8:39:27:d3:f4:d1:
2e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:EC:89:9E:3E:B0:85:E5:1C:78:51:BA:EF:34:CC:6B:8C:A9:E8:6E
X509v3 Authority Key Identifier:
keyid:CA:BF:37:3E:AD:CD:93:76:E5:24:CE:31:3A:B8:68:C0:3E:EB:10:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo.rpki.space/repo/pfcloud-tgewiese/0/CABF373EADCD9376E524CE313AB868C03EEB1088.crl
Authority Information Access:
CA Issuers - URI:rsync://repo.rpki.space/repo/Infiniroute/1/CABF373EADCD9376E524CE313AB868C03EEB1088.cer
Subject Information Access:
Signed Object - URI:rsync://repo.rpki.space/repo/pfcloud-tgewiese/0/CABF373EADCD9376E524CE313AB868C03EEB1088.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:c0:b7:8a:6f:88:29:ed:9a:c9:29:32:04:de:01:2a:97:e5:
0a:34:0c:2b:46:76:79:7f:0e:35:e9:b8:77:03:97:e9:aa:7f:
76:de:39:38:fb:26:b2:f4:a2:91:36:fb:e4:68:ca:36:9e:39:
97:ad:2a:b5:ea:dc:ac:6e:7e:6c:e8:18:f7:70:8c:1a:d5:24:
dd:d1:79:69:9b:1f:56:f6:4e:fd:72:18:41:64:01:0a:c0:5f:
51:ae:40:73:5e:7c:9c:b7:3e:7c:90:fd:ff:61:78:fd:c4:fb:
74:60:37:36:d1:0b:a4:b4:54:22:2f:28:f4:e9:dd:a1:8d:3e:
a3:37:bd:23:51:5d:3c:2c:4c:b2:6f:ff:20:11:f9:99:5e:44:
1b:bf:28:4f:50:58:db:6e:b0:00:d4:fd:3d:29:6d:50:91:47:
df:9c:fe:3c:fb:c6:e9:1e:db:2e:fc:1e:87:20:e4:ad:72:f2:
73:b2:4a:17:78:97:bb:ad:ef:8a:a2:66:e5:f8:22:7f:34:6e:
61:a5:76:f0:83:67:20:e0:76:10:44:58:19:2c:ea:e9:1f:d7:
a1:3f:38:cd:b4:7f:e2:f5:83:71:80:a8:ee:75:52:3f:30:17:
52:6f:c5:e2:7e:17:60:49:90:7f:84:03:05:b1:d2:11:76:88:
fa:01:87:f5
-----BEGIN CERTIFICATE-----
MIIE/DCCA+SgAwIBAgIUFW9lHVYMD8qdp3Z8QwbzMkKvqJowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0FCRjM3M0VBRENEOTM3NkU1MjRDRTMxM0FCODY4QzAz
RUVCMTA4ODAeFw0yNjA2MDQxMTEyNDZaFw0yNjA2MDUxMjIxNDZaMDMxMTAvBgNV
BAMTKDIwRUM4OTlFM0VCMDg1RTUxQzc4NTFCQUVGMzRDQzZCOENBOUU4NkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFoy6X2qXIBjpt0uJVPPpayjCL
GNA4zh0BGrKx8WDFKOPxKV3jqiMEj0IAIQccFvsITiHiniMXCERRFWE62HYwVHaP
IAfjmAb8sG9H3TVSUwuogmmW+IxmnVrW46aUu42HYXXMLd3VCEGaMRMx3ib5Zasr
sn5WA4Cr5sduxi9X/ZHdvpOBdTZOmXsj1gRZyoPSsWHR3NQPk3+2UWQT/oX3T1+q
mtzhEdmKaHUU9HhAWByE3B4JJvZyR7pt03jLTk+42R/ZAH2DInLqT7gykyl0YP2d
hNO+dBx1kwpDhe8Vg4aVxC1c/0w+3LQs8tLIe4JpL2wGqaikj+g5J9P00S6VAgMB
AAGjggIGMIICAjAdBgNVHQ4EFgQUIOyJnj6wheUceFG67zTMa4yp6G4wHwYDVR0j
BBgwFoAUyr83Pq3Nk3blJM4xOrhowD7rEIgwDgYDVR0PAQH/BAQDAgeAMG0GA1Ud
HwRmMGQwYqBgoF6GXHJzeW5jOi8vcmVwby5ycGtpLnNwYWNlL3JlcG8vcGZjbG91
ZC10Z2V3aWVzZS8wL0NBQkYzNzNFQURDRDkzNzZFNTI0Q0UzMTNBQjg2OEMwM0VF
QjEwODguY3JsMHMGCCsGAQUFBwEBBGcwZTBjBggrBgEFBQcwAoZXcnN5bmM6Ly9y
ZXBvLnJwa2kuc3BhY2UvcmVwby9JbmZpbmlyb3V0ZS8xL0NBQkYzNzNFQURDRDkz
NzZFNTI0Q0UzMTNBQjg2OEMwM0VFQjEwODguY2VyMHgGCCsGAQUFBwELBGwwajBo
BggrBgEFBQcwC4ZccnN5bmM6Ly9yZXBvLnJwa2kuc3BhY2UvcmVwby9wZmNsb3Vk
LXRnZXdpZXNlLzAvQ0FCRjM3M0VBRENEOTM3NkU1MjRDRTMxM0FCODY4QzAzRUVC
MTA4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB
/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJ
KoZIhvcNAQELBQADggEBACPAt4pviCntmskpMgTeASqX5Qo0DCtGdnl/DjXpuHcD
l+mqf3beOTj7JrL0opE2++RoyjaeOZetKrXq3KxufmzoGPdwjBrVJN3ReWmbH1b2
Tv1yGEFkAQrAX1GuQHNefJy3PnyQ/f9heP3E+3RgNzbRC6S0VCIvKPTp3aGNPqM3
vSNRXTwsTLJv/yAR+ZleRBu/KE9QWNtusADU/T0pbVCRR9+c/jz7xuke2y78Hocg
5K1y8nOyShd4l7ut74qiZuX4In80bmGldvCDZyDgdhBEWBks6ukf16E/OM20f+L1
g3GAqO51Uj8wF1JvxeJ+F2BJkH+EAwWx0hF2iPoBh/U=
-----END CERTIFICATE-----
Generated at Thu Jun 4 13:04:48 2026 by rpki-client