Manifest

$ rpki-client -vvf repo.rpki.space/repo/Pfcloud/0/43FB377824B048048B8756B6C65C599B82AEB5B9.mft
File:                     43FB377824B048048B8756B6C65C599B82AEB5B9.mft (raw, json)
Hash identifier:          wEv1qspo4EgECjasmIQPdImyl3EE7CeUUKuH+8oL51I=
Subject key identifier:   53:69:AE:41:68:F6:8C:93:A5:29:0F:85:10:C4:9F:70:9E:73:F1:7D
Authority key identifier: 43:FB:37:78:24:B0:48:04:8B:87:56:B6:C6:5C:59:9B:82:AE:B5:B9
Certificate issuer:       /CN=43FB377824B048048B8756B6C65C599B82AEB5B9
Certificate serial:       789DF57CBD346C3E3F69367BF12808A2E8278A3E
Authority info access:    rsync://repo.rpki.space/repo/Infiniroute/1/43FB377824B048048B8756B6C65C599B82AEB5B9.cer
Subject info access:      rsync://repo.rpki.space/repo/Pfcloud/0/43FB377824B048048B8756B6C65C599B82AEB5B9.mft
Manifest number:          0257
Signing time:             Mon 20 Oct 2025 02:10:44 +0000
Manifest this update:     Mon 20 Oct 2025 02:05:44 +0000
Manifest next update:     Tue 21 Oct 2025 02:15:44 +0000
Files and hashes:         1: 326131343a3763323a3a2f33322d3438203d3e203531333936.roa (hash: Q4TanDo/03WlMBqXG5NZRk00E+9yiRjEKl9vjFnMALs=)
                          2: 326131343a3763323a313032323a3a2f34382d3438203d3e203230343733.roa (hash: lmsU4Ru6WU6LD+Trpra0hPmekL3FYErdA4kEIEpXNJY=)
                          3: 6F08383FF15292BFB6A427602811D5E225F0853C.cer (hash: DwPyhoPAg32N+V7bitfMVwCIUjikjYCTsp7qjFCQVio=)
                          4: 43FB377824B048048B8756B6C65C599B82AEB5B9.crl (hash: 3r/bVIJx18gkFEKUkoTFmi+V2vNMUteWJKARO2KcYaE=)
                          5: 326131343a3763323a313030343a3a2f34382d3438203d3e20323135383635.roa (hash: wdy7zhj9prGo6bSgGDkTv3nBiTLVF8B2Xn97a7b8uwM=)
                          6: 326131343a3763323a3a2f33312d3332203d3e203531333936.roa (hash: BnqGqWCqFbZRAQvqh2fuARYnYagyLSJRBck3hTgawF8=)
Validation:               OK
Signature path:           rsync://repo.rpki.space/repo/Pfcloud/0/43FB377824B048048B8756B6C65C599B82AEB5B9.crl
                          rsync://repo.rpki.space/repo/Pfcloud/0/43FB377824B048048B8756B6C65C599B82AEB5B9.mft
                          rsync://repo.rpki.space/repo/Infiniroute/1/43FB377824B048048B8756B6C65C599B82AEB5B9.cer
                          rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
                          rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 22:10:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:9d:f5:7c:bd:34:6c:3e:3f:69:36:7b:f1:28:08:a2:e8:27:8a:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43FB377824B048048B8756B6C65C599B82AEB5B9
        Validity
            Not Before: Oct 20 02:05:44 2025 GMT
            Not After : Oct 21 02:15:44 2025 GMT
        Subject: CN=5369AE4168F68C93A5290F8510C49F709E73F17D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:84:6a:d8:25:da:02:72:09:77:c9:39:6e:99:
                    33:31:0d:1a:8e:61:ba:3e:1d:0e:2f:80:fe:aa:14:
                    00:1f:a7:a5:80:5d:72:f9:18:d8:64:45:d1:0c:2c:
                    bb:aa:97:a0:d4:7b:70:e7:66:f8:cf:3e:ae:4c:ea:
                    31:d0:79:d5:da:c2:19:a2:74:6f:72:71:44:99:0d:
                    a3:f1:1c:79:87:00:02:5e:5d:11:0d:12:6a:7a:8f:
                    6b:a7:c5:e0:8a:91:d9:e0:ca:7f:00:84:df:d4:f0:
                    8d:29:f2:0f:6d:6b:82:46:53:4c:b8:86:45:08:fd:
                    d7:da:f8:1c:2b:c5:ae:e7:85:70:9c:46:b3:3f:8e:
                    c4:ce:84:4c:be:05:eb:d7:60:5d:3a:b8:b3:54:63:
                    2f:76:02:97:f1:ab:fc:7f:55:28:9f:65:93:cf:c9:
                    ea:88:8c:91:35:44:01:df:eb:4c:96:b5:58:f3:fc:
                    b0:59:ee:c0:ad:8e:9e:e1:7c:0e:6f:a9:20:33:39:
                    9c:97:8a:b0:39:11:b1:6f:30:18:8e:6b:c5:e8:df:
                    48:84:cf:ee:35:5f:6e:25:a9:0c:7e:39:80:68:39:
                    76:10:a4:23:9b:98:af:fe:6f:63:c3:7f:15:aa:82:
                    a4:75:d8:86:5d:7b:e7:4e:73:41:81:b1:14:d2:1a:
                    b0:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:69:AE:41:68:F6:8C:93:A5:29:0F:85:10:C4:9F:70:9E:73:F1:7D
            X509v3 Authority Key Identifier:
                keyid:43:FB:37:78:24:B0:48:04:8B:87:56:B6:C6:5C:59:9B:82:AE:B5:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo.rpki.space/repo/Pfcloud/0/43FB377824B048048B8756B6C65C599B82AEB5B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo.rpki.space/repo/Infiniroute/1/43FB377824B048048B8756B6C65C599B82AEB5B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo.rpki.space/repo/Pfcloud/0/43FB377824B048048B8756B6C65C599B82AEB5B9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:98:d9:5c:a5:ce:7a:a7:d2:73:0a:e7:c6:26:55:8a:e1:21:
         48:87:95:fa:72:f7:69:97:c4:9f:c3:20:1c:52:a2:d0:84:1d:
         42:b9:1d:3e:f9:18:a5:c1:21:a8:fa:f7:0b:da:c7:9b:1d:0a:
         4e:dc:36:8c:8b:e7:95:2a:c8:85:91:98:c8:df:a8:75:54:84:
         b8:28:4a:f8:17:f0:fc:a1:0e:d4:e3:25:0b:3e:4d:3d:db:60:
         22:9c:b2:7f:72:7f:c6:3a:26:5d:b2:ea:2c:d4:60:36:53:ef:
         c7:f8:b1:e9:1e:24:70:32:a2:df:20:2b:1a:7f:8e:69:70:35:
         03:3d:ca:23:d5:d1:c0:8c:af:e2:a7:a2:59:fc:41:ba:e2:43:
         e9:a0:27:15:51:a7:0b:74:b8:7f:b3:26:db:c0:4b:02:1a:e2:
         e6:aa:f3:86:38:4f:27:53:7f:b8:f4:25:aa:c3:6f:c9:2c:9a:
         bc:68:6d:19:5a:6a:3e:d2:82:4f:4d:27:2f:97:4a:67:ed:47:
         d1:cb:5d:55:38:ad:db:75:51:3b:5f:ab:62:ad:b1:05:39:07:
         7d:e7:af:3d:c0:06:11:d2:9c:e8:d2:0b:a0:24:49:9a:4e:74:
         ac:46:1f:4f:62:a6:4a:39:01:32:97:b1:d8:37:53:fa:4c:2d:
         e1:99:a4:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:16:26 2025 by rpki-client