
$ rpki-client -vvvf repo.rpki.space/repo/pfcloud-tgewiese/0/CABF373EADCD9376E524CE313AB868C03EEB1088.mft
File: CABF373EADCD9376E524CE313AB868C03EEB1088.mft (raw, json)
Hash identifier: hPahVFNDitRhGGeHjt1Tl37cCojd4FMwehxfRWozvN0=
Subject key identifier: C1:96:DD:74:41:F2:0B:CD:34:40:9E:76:9C:02:58:E8:3E:CC:7D:F2
Authority key identifier: CA:BF:37:3E:AD:CD:93:76:E5:24:CE:31:3A:B8:68:C0:3E:EB:10:88
Certificate issuer: /CN=CABF373EADCD9376E524CE313AB868C03EEB1088
Certificate serial: 4CB53D16105F99E52D754E18001893EA7FEA777B
Authority info access: rsync://repo.rpki.space/repo/Infiniroute/1/CABF373EADCD9376E524CE313AB868C03EEB1088.cer
Subject info access: rsync://repo.rpki.space/repo/pfcloud-tgewiese/0/CABF373EADCD9376E524CE313AB868C03EEB1088.mft
Manifest number: 03AF
Signing time: Fri 04 Sep 2026 09:38:03 +0000
Manifest this update: Fri 04 Sep 2026 09:33:03 +0000
Manifest next update: Sat 05 Sep 2026 10:48:03 +0000
Files and hashes: 1: CABF373EADCD9376E524CE313AB868C03EEB1088.crl (hash: IY7kO03oPdFRfc6sr3NdjxM+8Y9GZcgcita5gZ2KINY=)
2: 326131343a3763303a313330303a3a2f34302d3430203d3e20323133383530.roa (hash: ghrsyOsNjV1vJxVSpYhOwOHrESe1ZdqgfbMmoLsZ/wQ=)
3: 326131343a3763303a313030303a3a2f33382d3338203d3e20323135333635.roa (hash: nucu8YeXyAJ1d1cM0WF7236LM50tPwAEitl5+zxIpfo=)
4: 326131343a3763303a313230303a3a2f34302d3430203d3e20323031363837.roa (hash: f/cdjCfjhlySyNuo0kgMIF/CdapB1t3ceS2H+YsmCRc=)
Validation: OK
Signature path: rsync://repo.rpki.space/repo/pfcloud-tgewiese/0/CABF373EADCD9376E524CE313AB868C03EEB1088.crl
rsync://repo.rpki.space/repo/pfcloud-tgewiese/0/CABF373EADCD9376E524CE313AB868C03EEB1088.mft
rsync://repo.rpki.space/repo/Infiniroute/1/CABF373EADCD9376E524CE313AB868C03EEB1088.cer
rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.mft
rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 10:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:b5:3d:16:10:5f:99:e5:2d:75:4e:18:00:18:93:ea:7f:ea:77:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CABF373EADCD9376E524CE313AB868C03EEB1088
Validity
Not Before: Sep 4 09:33:03 2026 GMT
Not After : Sep 5 10:48:03 2026 GMT
Subject: CN=C196DD7441F20BCD34409E769C0258E83ECC7DF2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3b:4c:5c:5b:38:5a:b2:f1:fd:21:09:62:2a:
a7:18:6d:14:0a:91:95:2e:fd:23:b4:1a:40:d8:82:
57:5e:98:88:3a:c9:10:28:fc:db:cf:d5:88:9b:af:
59:3b:92:1a:b9:25:37:b4:bd:e3:d0:c5:e0:e7:28:
a6:83:f0:93:5a:39:ff:f2:2f:19:1a:38:75:33:c3:
e5:7b:ec:1f:97:14:6c:d9:03:a8:6b:11:49:ec:ee:
f4:d4:c2:29:38:da:6f:05:9c:a9:70:f1:cb:3d:c5:
b7:3a:b2:e0:36:00:97:1a:35:a1:35:60:86:c1:7b:
0a:27:76:7e:a0:6a:66:08:98:10:62:9a:0b:0c:9c:
51:04:ec:ad:72:5a:77:d2:c7:f1:a2:e1:10:31:b4:
8c:17:34:e4:78:35:33:6d:72:4c:69:a3:f8:5f:59:
51:57:f6:05:59:ef:2c:7c:81:a7:e3:d0:fd:85:27:
b0:a9:01:9c:85:db:1f:fa:0b:e9:70:f9:b5:bc:8e:
de:3c:b0:6b:49:d3:c7:0d:50:aa:93:4c:a1:0c:e8:
96:39:6b:c2:85:f3:96:f2:13:07:1b:72:20:c3:15:
b9:8b:f9:5e:26:88:21:80:f2:59:c0:3a:85:9e:ef:
d5:18:99:29:8b:88:2e:85:d3:3b:0f:35:9c:32:dd:
d7:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:96:DD:74:41:F2:0B:CD:34:40:9E:76:9C:02:58:E8:3E:CC:7D:F2
X509v3 Authority Key Identifier:
keyid:CA:BF:37:3E:AD:CD:93:76:E5:24:CE:31:3A:B8:68:C0:3E:EB:10:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo.rpki.space/repo/pfcloud-tgewiese/0/CABF373EADCD9376E524CE313AB868C03EEB1088.crl
Authority Information Access:
CA Issuers - URI:rsync://repo.rpki.space/repo/Infiniroute/1/CABF373EADCD9376E524CE313AB868C03EEB1088.cer
Subject Information Access:
Signed Object - URI:rsync://repo.rpki.space/repo/pfcloud-tgewiese/0/CABF373EADCD9376E524CE313AB868C03EEB1088.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:d3:b3:19:b9:95:53:69:ab:27:61:40:3a:ca:0a:bb:fe:92:
75:1c:57:fe:bf:18:b9:7d:01:5f:9f:f0:b0:82:ab:99:89:7b:
84:6d:c7:4e:71:49:17:4f:14:19:5d:e4:9d:7d:ca:d7:02:d7:
2d:c5:0a:22:18:0a:9f:25:6c:72:32:49:a6:76:86:fc:6c:66:
8a:49:df:b2:38:3f:f4:eb:f8:5c:fa:67:40:d6:5a:68:58:d4:
bb:29:66:06:fa:93:21:0a:f7:6e:fb:50:1c:f7:9e:f0:a4:c9:
dd:a3:34:3f:18:6b:4c:cf:f0:25:46:0c:96:79:c9:35:e1:06:
5b:b1:93:92:7a:df:a4:d5:46:e2:ac:0d:58:9e:52:51:5e:4b:
66:cc:66:6c:2d:ef:ac:39:78:ca:b6:32:a6:11:08:0c:17:2a:
e1:bc:92:f9:e3:37:2b:65:51:f8:23:2f:42:08:45:38:8f:b3:
9f:f5:b2:0d:93:aa:e5:b0:31:cd:aa:80:b1:00:df:8c:25:97:
29:fa:1b:b0:6f:ec:51:4d:b6:54:41:93:a5:6f:22:67:d8:d3:
ec:98:48:20:97:36:4a:66:0e:53:11:ff:17:be:be:0e:a4:15:
73:21:d5:9a:57:da:a2:0f:86:c9:a8:6d:d3:84:45:5a:17:eb:
c2:00:5e:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:40:38 2026 by rpki-client