$ rpki-client -vvf repo.rpki.space/repo/pfcloud-tgewiese/0/CABF373EADCD9376E524CE313AB868C03EEB1088.mft File: CABF373EADCD9376E524CE313AB868C03EEB1088.mft (raw, json) Hash identifier: PXPCn5+yDCQccvfj2wQ0e3xxbx+FjtWxQzbwvL1Ut38= Subject key identifier: 72:33:72:73:F5:91:CF:78:20:CB:80:EA:BF:C7:68:F7:3B:BE:2A:4D Authority key identifier: CA:BF:37:3E:AD:CD:93:76:E5:24:CE:31:3A:B8:68:C0:3E:EB:10:88 Certificate issuer: /CN=CABF373EADCD9376E524CE313AB868C03EEB1088 Certificate serial: 1D624ED2BE04A9DF8AADB202C62A83093C2D8F0B Authority info access: rsync://repo.rpki.space/repo/Infiniroute/1/CABF373EADCD9376E524CE313AB868C03EEB1088.cer Subject info access: rsync://repo.rpki.space/repo/pfcloud-tgewiese/0/CABF373EADCD9376E524CE313AB868C03EEB1088.mft Manifest number: 0224 Signing time: Thu 23 Oct 2025 21:10:50 +0000 Manifest this update: Thu 23 Oct 2025 21:05:50 +0000 Manifest next update: Fri 24 Oct 2025 23:48:50 +0000 Files and hashes: 1: CABF373EADCD9376E524CE313AB868C03EEB1088.crl (hash: g1vtUDx148+C846iiIPo4I2EY/VJFrOMTNB/mFIrM/U=) 2: 326131343a3763303a313030653a3a2f34382d3438203d3e20323134393731.roa (hash: ZmKHZ7KEQafLXrIoVvHThURpv+m5bnP7aMQpikOEGiA=) 3: 326131343a3763303a313330303a3a2f34302d3430203d3e20323133383530.roa (hash: Qlgg5XfJnvwJOV0Cqc76R2Neze23lYyJeqwZCA5oSA0=) 4: 326131343a3763303a313030333a3a2f34382d3438203d3e20323038323038.roa (hash: uvRTeITzG5dnGGKWlNSbP1RgjIMdhit9i0H0cABSxCE=) 5: 326131343a3763303a313230303a3a2f34302d3430203d3e203538323132.roa (hash: B9fjxhBETDxMPuBEk4eX4HMycaaFKdpcguPNMhcUOpI=) 6: 326131343a3763303a313030613a3a2f34382d3438203d3e203437323633.roa (hash: SeNu4h+0l9b9bc1jP2dpEQxwlRATBtTZWHxihx7c61Y=) 7: 326131343a3763303a313030303a3a2f33382d3338203d3e20323135333635.roa (hash: sgRTwSyhVCQpHRZOTXhgdGYd5BzW5V4pFBW18sNeqlE=) Validation: OK Signature path: rsync://repo.rpki.space/repo/pfcloud-tgewiese/0/CABF373EADCD9376E524CE313AB868C03EEB1088.crl rsync://repo.rpki.space/repo/pfcloud-tgewiese/0/CABF373EADCD9376E524CE313AB868C03EEB1088.mft rsync://repo.rpki.space/repo/Infiniroute/1/CABF373EADCD9376E524CE313AB868C03EEB1088.cer rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.mft rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Oct 2025 16:55:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:62:4e:d2:be:04:a9:df:8a:ad:b2:02:c6:2a:83:09:3c:2d:8f:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CABF373EADCD9376E524CE313AB868C03EEB1088 Validity Not Before: Oct 23 21:05:50 2025 GMT Not After : Oct 24 23:48:50 2025 GMT Subject: CN=72337273F591CF7820CB80EABFC768F73BBE2A4D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:78:6d:70:73:7c:46:2c:7f:e8:86:6c:d0:5c: 3d:c3:47:eb:1e:f8:56:24:3d:98:ee:9b:b0:93:76: a2:9b:e8:9c:37:6a:dc:71:f7:c5:ad:4e:ff:e2:04: 80:17:37:9b:f0:f9:99:d3:bb:bd:d9:1c:ed:a6:fa: bf:39:95:7f:dd:26:eb:d9:26:f8:5b:bd:cd:cd:13: ea:a4:fe:87:14:22:e7:41:c1:12:ba:22:22:59:58: 84:5c:03:f4:8b:b4:d0:69:f0:1e:1e:d0:ce:84:35: b6:89:bf:41:a3:f0:b3:47:ef:99:c0:d5:4f:3f:5d: 14:0f:28:98:ac:ed:34:0d:8e:f5:e4:7f:65:c9:76: b0:a3:f6:3a:81:37:97:cc:6e:ce:e8:cc:00:dd:10: 14:92:66:d6:05:2c:75:28:99:bb:45:fc:85:4a:77: eb:96:be:10:25:ef:80:32:a6:78:d7:e0:86:65:bb: b1:c8:69:f7:15:83:78:c4:52:e8:56:c8:97:a2:94: 10:c0:35:e0:44:a6:a8:fb:3d:9c:ea:35:d4:dc:04: c9:f3:21:33:e6:f4:ae:24:e9:b5:30:69:68:b9:83: bc:4f:57:d5:f6:de:60:18:b9:33:8b:23:c7:d4:60: 89:8f:1b:56:a2:f9:8a:d2:da:7e:d9:7e:1d:09:50: e0:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:33:72:73:F5:91:CF:78:20:CB:80:EA:BF:C7:68:F7:3B:BE:2A:4D X509v3 Authority Key Identifier: keyid:CA:BF:37:3E:AD:CD:93:76:E5:24:CE:31:3A:B8:68:C0:3E:EB:10:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo.rpki.space/repo/pfcloud-tgewiese/0/CABF373EADCD9376E524CE313AB868C03EEB1088.crl Authority Information Access: CA Issuers - URI:rsync://repo.rpki.space/repo/Infiniroute/1/CABF373EADCD9376E524CE313AB868C03EEB1088.cer Subject Information Access: Signed Object - URI:rsync://repo.rpki.space/repo/pfcloud-tgewiese/0/CABF373EADCD9376E524CE313AB868C03EEB1088.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:56:b9:60:e8:57:92:60:89:97:da:65:a5:de:8b:eb:7c:46: b5:bc:50:df:24:ad:75:bb:4b:67:7c:ba:91:6a:1f:24:c4:cd: 99:47:a6:16:d3:6b:2e:48:48:44:4b:a8:bc:e6:bf:e4:02:0a: 6e:c9:c4:5d:a6:d5:b5:f9:96:6a:35:68:a7:a4:00:bc:f7:17: f4:12:1f:7c:13:a7:f6:aa:6e:57:c2:40:3d:ea:d6:95:72:44: 11:5c:12:83:29:37:ad:fc:06:8b:2e:9a:3e:f2:cb:ad:f0:b7: 1c:8c:94:6c:f8:2e:bb:64:19:7d:4e:8d:a2:f9:a3:95:71:da: 22:18:49:e8:c7:fa:8d:f7:4e:47:16:fd:eb:18:ba:f4:6c:d1: 14:92:51:55:9b:05:b7:b9:cb:e0:3f:2d:d4:1f:88:41:45:6f: 2d:02:35:4e:10:ef:1b:58:89:ee:e5:f4:dc:5f:79:64:66:59: 80:b4:be:76:77:bd:21:39:67:95:db:b1:56:03:4e:a9:cb:be: eb:27:1c:c8:0a:e4:d6:ab:81:81:57:7f:2d:6c:af:83:26:e2: 4b:6a:ef:e5:35:98:60:9c:4a:ab:c5:89:d3:6a:b1:65:1d:d6: dc:4b:0c:c0:9d:be:36:23:ec:61:ed:72:c4:bd:2f:d8:50:4f: ee:55:5c:99 -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgIUHWJO0r4Eqd+KrbICxiqDCTwtjwswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0FCRjM3M0VBRENEOTM3NkU1MjRDRTMxM0FCODY4QzAz RUVCMTA4ODAeFw0yNTEwMjMyMTA1NTBaFw0yNTEwMjQyMzQ4NTBaMDMxMTAvBgNV BAMTKDcyMzM3MjczRjU5MUNGNzgyMENCODBFQUJGQzc2OEY3M0JCRTJBNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7eG1wc3xGLH/ohmzQXD3DR+se +FYkPZjum7CTdqKb6Jw3atxx98WtTv/iBIAXN5vw+ZnTu73ZHO2m+r85lX/dJuvZ Jvhbvc3NE+qk/ocUIudBwRK6IiJZWIRcA/SLtNBp8B4e0M6ENbaJv0Gj8LNH75nA 1U8/XRQPKJis7TQNjvXkf2XJdrCj9jqBN5fMbs7ozADdEBSSZtYFLHUombtF/IVK d+uWvhAl74AypnjX4IZlu7HIafcVg3jEUuhWyJeilBDANeBEpqj7PZzqNdTcBMnz ITPm9K4k6bUwaWi5g7xPV9X23mAYuTOLI8fUYImPG1ai+YrS2n7Zfh0JUODXAgMB AAGjggIGMIICAjAdBgNVHQ4EFgQUcjNyc/WRz3ggy4Dqv8do9zu+Kk0wHwYDVR0j BBgwFoAUyr83Pq3Nk3blJM4xOrhowD7rEIgwDgYDVR0PAQH/BAQDAgeAMG0GA1Ud HwRmMGQwYqBgoF6GXHJzeW5jOi8vcmVwby5ycGtpLnNwYWNlL3JlcG8vcGZjbG91 ZC10Z2V3aWVzZS8wL0NBQkYzNzNFQURDRDkzNzZFNTI0Q0UzMTNBQjg2OEMwM0VF QjEwODguY3JsMHMGCCsGAQUFBwEBBGcwZTBjBggrBgEFBQcwAoZXcnN5bmM6Ly9y ZXBvLnJwa2kuc3BhY2UvcmVwby9JbmZpbmlyb3V0ZS8xL0NBQkYzNzNFQURDRDkz NzZFNTI0Q0UzMTNBQjg2OEMwM0VFQjEwODguY2VyMHgGCCsGAQUFBwELBGwwajBo BggrBgEFBQcwC4ZccnN5bmM6Ly9yZXBvLnJwa2kuc3BhY2UvcmVwby9wZmNsb3Vk LXRnZXdpZXNlLzAvQ0FCRjM3M0VBRENEOTM3NkU1MjRDRTMxM0FCODY4QzAzRUVC MTA4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB /wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJ KoZIhvcNAQELBQADggEBALtWuWDoV5JgiZfaZaXei+t8RrW8UN8krXW7S2d8upFq HyTEzZlHphbTay5ISERLqLzmv+QCCm7JxF2m1bX5lmo1aKekALz3F/QSH3wTp/aq blfCQD3q1pVyRBFcEoMpN638Bosumj7yy63wtxyMlGz4LrtkGX1OjaL5o5Vx2iIY SejH+o33TkcW/esYuvRs0RSSUVWbBbe5y+A/LdQfiEFFby0CNU4Q7xtYie7l9Nxf eWRmWYC0vnZ3vSE5Z5XbsVYDTqnLvusnHMgK5NargYFXfy1sr4Mm4ktq7+U1mGCc SqvFidNqsWUd1txLDMCdvjYj7GHtcsS9L9hQT+5VXJk= -----END CERTIFICATE-----Generated at Fri Oct 24 08:28:28 2025 by rpki-client