Manifest

$ rpki-client -vvf repo.rpki.space/repo/Pfcloud/2/CAE8150E9595DBE9A74A289BFD0E8D2B1CE6B38D.mft
File:                     CAE8150E9595DBE9A74A289BFD0E8D2B1CE6B38D.mft (raw, json)
Hash identifier:          /KQeKYQhMt3/PHs2nBZAVTnaa64+75YBsuT1tWD7HEM=
Subject key identifier:   1C:59:16:A5:83:E9:63:A2:29:35:32:E5:5D:D4:E3:0A:5C:4C:87:E7
Authority key identifier: CA:E8:15:0E:95:95:DB:E9:A7:4A:28:9B:FD:0E:8D:2B:1C:E6:B3:8D
Certificate issuer:       /CN=cae8150e9595dbe9a74a289bfd0e8d2b1ce6b38d
Certificate serial:       34A81B575CF03148DB48617493346AE2F8989046
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yugVDpWV2-mnSiib_Q6NKxzms40.cer
Subject info access:      rsync://repo.rpki.space/repo/Pfcloud/2/CAE8150E9595DBE9A74A289BFD0E8D2B1CE6B38D.mft
Manifest number:          AE
Signing time:             Tue 12 May 2026 18:22:28 +0000
Manifest this update:     Tue 12 May 2026 18:17:28 +0000
Manifest next update:     Wed 13 May 2026 20:57:28 +0000
Files and hashes:         1: CAE8150E9595DBE9A74A289BFD0E8D2B1CE6B38D.crl (hash: qBmG9E9nzsCR8oS3iQT50RhB+FcXzjkRnlpdsjITVZ8=)
                          2: 326131343a383030303a3a2f32392d3239203d3e203531333936.roa (hash: 954ovZyNTCdFRHquG/fM/KMahRQBOehVwNmvvADjdxQ=)
                          3: AS51396.asa (hash: 0Cf/c6X9d+VxTP+HrophqXvXroNtNkC+Elk5uS8LluE=)
Validation:               OK
Signature path:           rsync://repo.rpki.space/repo/Pfcloud/2/CAE8150E9595DBE9A74A289BFD0E8D2B1CE6B38D.crl
                          rsync://repo.rpki.space/repo/Pfcloud/2/CAE8150E9595DBE9A74A289BFD0E8D2B1CE6B38D.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yugVDpWV2-mnSiib_Q6NKxzms40.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:a8:1b:57:5c:f0:31:48:db:48:61:74:93:34:6a:e2:f8:98:90:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cae8150e9595dbe9a74a289bfd0e8d2b1ce6b38d
        Validity
            Not Before: May 12 18:17:28 2026 GMT
            Not After : May 13 20:57:28 2026 GMT
        Subject: CN=1C5916A583E963A2293532E55DD4E30A5C4C87E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:6a:c8:2f:b0:b3:a4:2e:e2:b1:12:bd:46:12:
                    6b:0a:bc:eb:37:68:4f:3d:32:1d:1f:d4:bd:24:5d:
                    52:d3:5f:1a:4d:16:63:46:3f:ac:d6:85:74:a3:f1:
                    87:2e:24:c0:13:67:1c:70:d6:c5:0b:f8:f4:fd:f6:
                    57:d3:c1:d3:34:b6:13:53:07:95:f1:6c:9f:28:85:
                    de:b0:56:46:c9:22:3a:7d:72:97:75:5e:d6:d6:31:
                    2b:d2:aa:55:84:d0:50:70:27:21:56:bd:2c:19:7f:
                    2e:d8:19:98:11:5c:3f:22:21:73:b5:a0:f5:e7:8b:
                    ca:0f:f2:11:f3:85:be:87:3d:5d:44:c2:25:c4:a5:
                    f5:b9:09:46:b0:2c:09:63:19:d2:ce:61:34:24:b6:
                    40:48:0c:10:47:4b:76:22:c0:37:15:aa:28:f7:18:
                    09:fa:40:17:23:bd:24:95:b8:9b:09:1f:e8:17:6b:
                    b6:10:7a:2f:27:1c:6a:1f:b0:e1:f3:85:bd:d7:8c:
                    95:93:35:aa:95:4d:5f:a5:65:e0:44:b6:2b:71:d9:
                    4a:ec:c2:b6:3f:12:48:60:44:7e:5a:ab:96:e5:95:
                    b2:9a:e5:2c:5d:b8:de:63:86:12:8d:dd:fd:42:cd:
                    8e:13:08:58:44:30:0d:62:04:10:bc:7f:58:0d:c8:
                    03:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:59:16:A5:83:E9:63:A2:29:35:32:E5:5D:D4:E3:0A:5C:4C:87:E7
            X509v3 Authority Key Identifier:
                keyid:CA:E8:15:0E:95:95:DB:E9:A7:4A:28:9B:FD:0E:8D:2B:1C:E6:B3:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo.rpki.space/repo/Pfcloud/2/CAE8150E9595DBE9A74A289BFD0E8D2B1CE6B38D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yugVDpWV2-mnSiib_Q6NKxzms40.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo.rpki.space/repo/Pfcloud/2/CAE8150E9595DBE9A74A289BFD0E8D2B1CE6B38D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:e2:8c:01:8d:b2:54:4d:e0:d1:33:e6:73:48:71:90:82:cf:
         0a:b0:38:a7:60:7c:b5:c6:14:bc:a5:de:76:e7:f8:19:27:92:
         49:f1:1f:32:39:34:75:fb:76:1c:75:07:92:79:de:a8:bb:d1:
         55:96:46:4b:3b:ce:71:80:9a:20:2b:64:68:eb:65:b9:65:5d:
         ac:06:5b:1a:9b:26:36:ec:86:3b:36:19:54:3b:77:fb:65:cb:
         ea:57:dc:50:dd:3f:af:70:8e:14:d7:43:02:fc:32:dc:52:d2:
         dd:6a:54:c6:8f:7e:7a:6a:8b:a8:f1:45:53:71:fc:5b:b9:61:
         53:7c:ae:41:e0:08:19:3d:4b:bf:91:cb:f1:a1:49:b8:4a:b9:
         ef:d6:c6:e1:05:4a:15:97:41:90:54:52:1f:e6:83:5b:67:15:
         d5:54:0a:28:6f:3f:25:ba:19:3d:70:df:b5:4d:df:49:07:6f:
         cb:d2:d2:0a:de:16:5f:26:fb:5b:79:34:1c:a3:1e:61:30:16:
         7f:6f:5e:2e:9c:0f:33:91:58:f9:45:14:c0:1b:1c:fa:f8:9a:
         8b:d0:80:41:92:20:3c:ce:d8:d4:42:8c:33:98:bc:e2:e2:11:
         22:1c:64:c2:1a:6f:20:cd:39:28:fc:9d:41:9f:2e:6b:65:9b:
         3e:f9:89:5b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue May 12 21:46:15 2026 by rpki-client