Manifest

$ rpki-client -vvvf repo.rpki.space/repo/Pfcloud/2/CAE8150E9595DBE9A74A289BFD0E8D2B1CE6B38D.mft
File:                     CAE8150E9595DBE9A74A289BFD0E8D2B1CE6B38D.mft (raw, json)
Hash identifier:          7D6y1OmA5Po9hX2EEz9zB7yHrNb+g2nHD1OaIv+s1y8=
Subject key identifier:   D2:CF:3D:4B:F5:19:17:C2:CD:53:BC:04:00:62:5B:75:72:15:7E:59
Authority key identifier: CA:E8:15:0E:95:95:DB:E9:A7:4A:28:9B:FD:0E:8D:2B:1C:E6:B3:8D
Certificate issuer:       /CN=cae8150e9595dbe9a74a289bfd0e8d2b1ce6b38d
Certificate serial:       27B4FCD3C0714EEC97847F68BF18BA3FDFEE9A7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yugVDpWV2-mnSiib_Q6NKxzms40.cer
Subject info access:      rsync://repo.rpki.space/repo/Pfcloud/2/CAE8150E9595DBE9A74A289BFD0E8D2B1CE6B38D.mft
Manifest number:          0161
Signing time:             Wed 23 Sep 2026 22:35:42 +0000
Manifest this update:     Wed 23 Sep 2026 22:30:42 +0000
Manifest next update:     Fri 25 Sep 2026 02:12:42 +0000
Files and hashes:         1: AS51396.asa (hash: 0Cf/c6X9d+VxTP+HrophqXvXroNtNkC+Elk5uS8LluE=)
                          2: CAE8150E9595DBE9A74A289BFD0E8D2B1CE6B38D.crl (hash: 3KL0sRdUROMXwUJ6S3uZJqp1dtrxRdbILAIxR2dLGhE=)
                          3: 326131343a383030303a3a2f32392d3239203d3e203531333936.roa (hash: 954ovZyNTCdFRHquG/fM/KMahRQBOehVwNmvvADjdxQ=)
Validation:               OK
Signature path:           rsync://repo.rpki.space/repo/Pfcloud/2/CAE8150E9595DBE9A74A289BFD0E8D2B1CE6B38D.crl
                          rsync://repo.rpki.space/repo/Pfcloud/2/CAE8150E9595DBE9A74A289BFD0E8D2B1CE6B38D.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yugVDpWV2-mnSiib_Q6NKxzms40.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 18:27:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:b4:fc:d3:c0:71:4e:ec:97:84:7f:68:bf:18:ba:3f:df:ee:9a:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cae8150e9595dbe9a74a289bfd0e8d2b1ce6b38d
        Validity
            Not Before: Sep 23 22:30:42 2026 GMT
            Not After : Sep 25 02:12:42 2026 GMT
        Subject: CN=D2CF3D4BF51917C2CD53BC0400625B7572157E59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:53:d7:da:47:7e:d0:c2:25:db:f8:82:ac:6c:
                    57:6d:9a:fa:19:f2:60:ea:74:37:d3:76:ba:31:a9:
                    f6:e0:97:2b:d8:44:bf:5e:d4:dd:53:9c:e8:05:7d:
                    78:1e:c8:52:94:b6:cb:dd:3a:e1:64:a8:a5:51:b7:
                    cd:df:8a:ea:5b:68:46:14:09:bb:ba:0b:9e:10:b0:
                    41:03:6b:c1:f8:14:67:17:da:c1:d8:fa:7f:49:bb:
                    18:b9:5c:db:bb:cc:ff:0c:a6:fe:87:54:8c:56:b3:
                    1b:30:17:62:b2:b4:b8:98:89:43:dd:62:06:d8:1f:
                    40:ca:46:a3:f1:a4:1f:e3:d9:e8:10:a1:8c:9b:ea:
                    15:dc:03:dd:67:b0:04:9d:d4:db:ec:27:d5:67:9c:
                    f4:cf:da:ad:16:e7:be:df:92:64:2e:48:7a:bd:7d:
                    6c:9a:41:fa:78:6f:79:f2:2d:eb:78:79:d1:69:62:
                    7c:50:24:3a:f1:ea:13:6e:5a:77:0f:84:de:26:b9:
                    6e:99:ab:92:6e:83:74:6c:2a:27:fb:2e:04:bc:33:
                    f3:ed:83:80:69:65:32:70:43:20:4d:02:e4:3f:1c:
                    17:d5:38:d2:bc:1a:4e:6d:00:b5:ee:91:d9:aa:2b:
                    19:59:53:b5:f2:59:11:90:e9:9e:b1:c9:7c:4c:7e:
                    78:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:CF:3D:4B:F5:19:17:C2:CD:53:BC:04:00:62:5B:75:72:15:7E:59
            X509v3 Authority Key Identifier:
                keyid:CA:E8:15:0E:95:95:DB:E9:A7:4A:28:9B:FD:0E:8D:2B:1C:E6:B3:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo.rpki.space/repo/Pfcloud/2/CAE8150E9595DBE9A74A289BFD0E8D2B1CE6B38D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yugVDpWV2-mnSiib_Q6NKxzms40.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo.rpki.space/repo/Pfcloud/2/CAE8150E9595DBE9A74A289BFD0E8D2B1CE6B38D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:01:ad:08:d7:58:a9:0a:e8:86:a3:9a:dc:1f:83:56:ad:74:
         17:ba:40:57:ac:3a:1f:fb:2e:7c:6b:97:d5:5a:0c:fc:8b:86:
         09:7c:d1:72:4c:62:d0:fe:ba:7e:38:dd:8b:f3:08:7a:9b:88:
         57:8f:ca:d8:7c:06:c6:e6:6a:ed:30:ae:e9:63:77:ef:6e:f5:
         d7:f1:0c:1f:c0:90:0c:9b:ea:1a:b6:72:d5:4d:96:45:72:b0:
         c3:70:6c:de:36:e4:cb:20:3c:a5:8a:e7:bc:2a:9b:6c:f5:f5:
         c2:fa:55:01:33:3b:a9:83:39:b4:04:be:a3:96:2a:52:28:35:
         ef:55:dd:23:70:22:16:69:f4:3e:ab:75:ac:b4:68:96:3a:17:
         07:42:fc:79:27:d9:20:f8:4e:40:1d:63:c6:ca:62:d7:87:01:
         0b:35:cd:49:a1:d1:1c:fb:d3:f1:7f:66:18:d7:d0:2c:50:98:
         27:79:87:db:5e:fc:09:1a:73:58:da:5f:d2:fa:d3:22:3e:22:
         fe:c8:07:cf:ad:48:00:f1:e0:6e:bc:01:0b:04:5a:64:4a:f5:
         55:9a:3f:22:15:b3:00:1a:e8:86:55:69:d3:1f:a4:e0:17:88:
         ee:a9:aa:1f:86:7c:da:14:2d:01:7d:fd:1e:b7:ec:2e:bb:b9:
         1d:85:21:da
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Sep 24 03:39:58 2026 by rpki-client