$ rpki-client -vvf repo.rpki.space/repo/pfcloud-tgewiese/0/CABF373EADCD9376E524CE313AB868C03EEB1088.mft File: CABF373EADCD9376E524CE313AB868C03EEB1088.mft (raw, json) Hash identifier: VroHc/82n7f+kBtD3TbUyiMVtWCebbt3X81ECW9+bpU= Subject key identifier: D8:85:ED:17:4A:A1:B4:F5:DB:3C:05:AE:42:2C:48:A5:BE:67:7A:40 Authority key identifier: CA:BF:37:3E:AD:CD:93:76:E5:24:CE:31:3A:B8:68:C0:3E:EB:10:88 Certificate issuer: /CN=CABF373EADCD9376E524CE313AB868C03EEB1088 Certificate serial: 1A247B28921595423F371473321C8497C24D4DB2 Authority info access: rsync://repo.rpki.space/repo/Infiniroute/1/CABF373EADCD9376E524CE313AB868C03EEB1088.cer Subject info access: rsync://repo.rpki.space/repo/pfcloud-tgewiese/0/CABF373EADCD9376E524CE313AB868C03EEB1088.mft Manifest number: 0372 Signing time: Tue 21 Jul 2026 08:46:00 +0000 Manifest this update: Tue 21 Jul 2026 08:41:00 +0000 Manifest next update: Wed 22 Jul 2026 09:55:00 +0000 Files and hashes: 1: 326131343a3763303a313330303a3a2f34302d3430203d3e20323133383530.roa (hash: ghrsyOsNjV1vJxVSpYhOwOHrESe1ZdqgfbMmoLsZ/wQ=) 2: 326131343a3763303a313230303a3a2f34302d3430203d3e20323031363837.roa (hash: f/cdjCfjhlySyNuo0kgMIF/CdapB1t3ceS2H+YsmCRc=) 3: 326131343a3763303a313030303a3a2f33382d3338203d3e20323135333635.roa (hash: nucu8YeXyAJ1d1cM0WF7236LM50tPwAEitl5+zxIpfo=) 4: CABF373EADCD9376E524CE313AB868C03EEB1088.crl (hash: Y37g6yt8Vk/twrTUh8nVqasa6aPaJdz5/fJ+LumrEOw=) Validation: OK Signature path: rsync://repo.rpki.space/repo/pfcloud-tgewiese/0/CABF373EADCD9376E524CE313AB868C03EEB1088.crl rsync://repo.rpki.space/repo/pfcloud-tgewiese/0/CABF373EADCD9376E524CE313AB868C03EEB1088.mft rsync://repo.rpki.space/repo/Infiniroute/1/CABF373EADCD9376E524CE313AB868C03EEB1088.cer rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.mft rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Jul 2026 09:55:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:24:7b:28:92:15:95:42:3f:37:14:73:32:1c:84:97:c2:4d:4d:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CABF373EADCD9376E524CE313AB868C03EEB1088 Validity Not Before: Jul 21 08:41:00 2026 GMT Not After : Jul 22 09:55:00 2026 GMT Subject: CN=D885ED174AA1B4F5DB3C05AE422C48A5BE677A40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:70:5e:6c:ec:f3:b6:8f:31:96:57:15:2b:de: c5:c1:2a:8e:f7:75:30:d7:2f:8e:40:e4:01:16:5e: ec:7a:d5:1f:53:95:08:c4:c0:97:24:79:15:74:cd: d0:a0:a8:63:a2:15:be:dc:fb:14:43:6c:59:ea:36: ea:89:74:ef:18:14:7e:93:92:22:8d:8a:6f:68:50: 90:aa:13:53:5d:68:19:fe:ca:f0:d7:49:16:4a:b3: 4f:82:49:be:72:65:b6:0f:a7:5d:f1:60:4e:31:ef: f6:a9:f1:3e:27:bb:9b:a0:1e:05:20:62:3b:75:ff: 18:53:cc:ed:84:de:0c:af:83:64:02:e6:ea:c5:ba: dc:4e:96:97:bf:02:a4:3d:ee:dc:c7:f5:dd:0c:4d: 80:dd:eb:60:ec:21:6d:3f:28:3b:a9:65:ee:d7:35: d9:b1:7d:2c:9d:32:f9:48:0e:21:be:36:0f:5d:c8: e8:ca:d2:84:3c:18:c3:25:ef:0f:5d:56:28:bd:27: 02:31:34:b3:35:f8:40:af:ae:92:ca:61:ad:b2:49: 36:86:2d:ed:4b:62:a0:84:5d:6d:f1:c4:76:81:5f: 29:0c:50:20:d5:14:05:97:5f:ec:f9:e6:ca:5f:e3: a3:8b:38:5f:82:fd:60:5a:c5:85:8f:68:1d:78:3f: 12:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:85:ED:17:4A:A1:B4:F5:DB:3C:05:AE:42:2C:48:A5:BE:67:7A:40 X509v3 Authority Key Identifier: keyid:CA:BF:37:3E:AD:CD:93:76:E5:24:CE:31:3A:B8:68:C0:3E:EB:10:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo.rpki.space/repo/pfcloud-tgewiese/0/CABF373EADCD9376E524CE313AB868C03EEB1088.crl Authority Information Access: CA Issuers - URI:rsync://repo.rpki.space/repo/Infiniroute/1/CABF373EADCD9376E524CE313AB868C03EEB1088.cer Subject Information Access: Signed Object - URI:rsync://repo.rpki.space/repo/pfcloud-tgewiese/0/CABF373EADCD9376E524CE313AB868C03EEB1088.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d0:b9:3f:64:21:b8:8f:2a:54:ff:af:e3:b2:02:f8:be:54:ec: 9e:7c:5c:7b:21:23:7e:dc:dc:1f:de:1f:14:43:bb:3b:63:df: 58:29:ad:3a:dc:a9:8e:a2:8d:ce:05:10:83:0c:5c:c4:e6:a9: 96:7d:93:c8:70:de:db:c8:21:4b:07:2f:bf:43:0b:2e:6d:a3: b8:07:44:37:ec:d0:5a:15:33:82:6d:00:f1:55:4b:c7:ca:88: cb:ad:1b:bf:92:49:d1:ff:e9:89:e1:b7:88:12:53:4e:f3:af: 13:0a:30:9e:61:9a:13:f7:58:fe:ae:b9:b4:3f:0b:52:2f:da: fe:db:5d:18:69:df:e6:18:0b:4e:44:1b:63:08:fa:f1:96:cf: e1:6a:28:22:4e:2f:bf:03:eb:e5:f5:a3:e3:6b:5c:d1:00:8e: 5a:d1:c1:03:a9:86:d4:1a:9e:a4:ae:fb:cf:c6:e5:25:0f:91: 85:81:af:7f:7d:36:e0:72:68:5e:e4:b7:2d:fc:ef:34:7d:ce: e1:8e:db:fd:b4:32:b8:7d:0b:50:9d:7c:5f:90:54:64:86:3f: f4:ff:1e:3f:4d:44:f4:0a:8f:8c:5f:39:32:67:a5:37:82:af: a6:7b:d5:c8:ef:9b:73:af:0a:8e:9b:e8:52:c5:f0:c6:46:6d: 5b:05:6e:a1 -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgIUGiR7KJIVlUI/NxRzMhyEl8JNTbIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0FCRjM3M0VBRENEOTM3NkU1MjRDRTMxM0FCODY4QzAz RUVCMTA4ODAeFw0yNjA3MjEwODQxMDBaFw0yNjA3MjIwOTU1MDBaMDMxMTAvBgNV BAMTKEQ4ODVFRDE3NEFBMUI0RjVEQjNDMDVBRTQyMkM0OEE1QkU2NzdBNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWcF5s7PO2jzGWVxUr3sXBKo73 dTDXL45A5AEWXux61R9TlQjEwJckeRV0zdCgqGOiFb7c+xRDbFnqNuqJdO8YFH6T kiKNim9oUJCqE1NdaBn+yvDXSRZKs0+CSb5yZbYPp13xYE4x7/ap8T4nu5ugHgUg Yjt1/xhTzO2E3gyvg2QC5urFutxOlpe/AqQ97tzH9d0MTYDd62DsIW0/KDupZe7X NdmxfSydMvlIDiG+Ng9dyOjK0oQ8GMMl7w9dVii9JwIxNLM1+ECvrpLKYa2ySTaG Le1LYqCEXW3xxHaBXykMUCDVFAWXX+z55spf46OLOF+C/WBaxYWPaB14PxKtAgMB AAGjggIGMIICAjAdBgNVHQ4EFgQU2IXtF0qhtPXbPAWuQixIpb5nekAwHwYDVR0j BBgwFoAUyr83Pq3Nk3blJM4xOrhowD7rEIgwDgYDVR0PAQH/BAQDAgeAMG0GA1Ud HwRmMGQwYqBgoF6GXHJzeW5jOi8vcmVwby5ycGtpLnNwYWNlL3JlcG8vcGZjbG91 ZC10Z2V3aWVzZS8wL0NBQkYzNzNFQURDRDkzNzZFNTI0Q0UzMTNBQjg2OEMwM0VF QjEwODguY3JsMHMGCCsGAQUFBwEBBGcwZTBjBggrBgEFBQcwAoZXcnN5bmM6Ly9y ZXBvLnJwa2kuc3BhY2UvcmVwby9JbmZpbmlyb3V0ZS8xL0NBQkYzNzNFQURDRDkz NzZFNTI0Q0UzMTNBQjg2OEMwM0VFQjEwODguY2VyMHgGCCsGAQUFBwELBGwwajBo BggrBgEFBQcwC4ZccnN5bmM6Ly9yZXBvLnJwa2kuc3BhY2UvcmVwby9wZmNsb3Vk LXRnZXdpZXNlLzAvQ0FCRjM3M0VBRENEOTM3NkU1MjRDRTMxM0FCODY4QzAzRUVC MTA4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB /wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJ KoZIhvcNAQELBQADggEBANC5P2QhuI8qVP+v47IC+L5U7J58XHshI37c3B/eHxRD uztj31gprTrcqY6ijc4FEIMMXMTmqZZ9k8hw3tvIIUsHL79DCy5to7gHRDfs0FoV M4JtAPFVS8fKiMutG7+SSdH/6Ynht4gSU07zrxMKMJ5hmhP3WP6uubQ/C1Iv2v7b XRhp3+YYC05EG2MI+vGWz+FqKCJOL78D6+X1o+NrXNEAjlrRwQOphtQanqSu+8/G 5SUPkYWBr399NuByaF7kty387zR9zuGO2/20Mrh9C1CdfF+QVGSGP/T/Hj9NRPQK j4xfOTJnpTeCr6Z71cjvm3OvCo6b6FLF8MZGbVsFbqE= -----END CERTIFICATE-----Generated at Tue Jul 21 20:31:37 2026 by rpki-client