
$ rpki-client -vvf repo.rpki.space/repo/pfcloud-tgewiese/0/CABF373EADCD9376E524CE313AB868C03EEB1088.mft
File: CABF373EADCD9376E524CE313AB868C03EEB1088.mft (raw, json)
Hash identifier: cRFN6iSbGsoejHZOA6ooxc2Z3v2xScxEynf2cn2TTUU=
Subject key identifier: 5D:63:57:B1:20:98:6B:75:6A:67:B0:BD:72:7C:87:9E:CC:9B:87:F9
Authority key identifier: CA:BF:37:3E:AD:CD:93:76:E5:24:CE:31:3A:B8:68:C0:3E:EB:10:88
Certificate issuer: /CN=CABF373EADCD9376E524CE313AB868C03EEB1088
Certificate serial: 79859D9BA22844AF0ECFD28CD47D5EF40A883235
Authority info access: rsync://repo.rpki.space/repo/Infiniroute/1/CABF373EADCD9376E524CE313AB868C03EEB1088.cer
Subject info access: rsync://repo.rpki.space/repo/pfcloud-tgewiese/0/CABF373EADCD9376E524CE313AB868C03EEB1088.mft
Manifest number: 02D6
Signing time: Wed 25 Mar 2026 21:39:35 +0000
Manifest this update: Wed 25 Mar 2026 21:34:35 +0000
Manifest next update: Fri 27 Mar 2026 00:23:35 +0000
Files and hashes: 1: CABF373EADCD9376E524CE313AB868C03EEB1088.crl (hash: xox8/pf6CEHQeTjkUofiBn6EM6CYpRLgWlEePUmqDus=)
2: 326131343a3763303a313030303a3a2f33382d3338203d3e20323135333635.roa (hash: sgRTwSyhVCQpHRZOTXhgdGYd5BzW5V4pFBW18sNeqlE=)
3: 326131343a3763303a313030333a3a2f34382d3438203d3e20323038323038.roa (hash: uvRTeITzG5dnGGKWlNSbP1RgjIMdhit9i0H0cABSxCE=)
4: 326131343a3763303a313330303a3a2f34302d3430203d3e20323133383530.roa (hash: ghrsyOsNjV1vJxVSpYhOwOHrESe1ZdqgfbMmoLsZ/wQ=)
5: 326131343a3763303a313230303a3a2f34302d3430203d3e20323031363837.roa (hash: f/cdjCfjhlySyNuo0kgMIF/CdapB1t3ceS2H+YsmCRc=)
Validation: OK
Signature path: rsync://repo.rpki.space/repo/pfcloud-tgewiese/0/CABF373EADCD9376E524CE313AB868C03EEB1088.crl
rsync://repo.rpki.space/repo/pfcloud-tgewiese/0/CABF373EADCD9376E524CE313AB868C03EEB1088.mft
rsync://repo.rpki.space/repo/Infiniroute/1/CABF373EADCD9376E524CE313AB868C03EEB1088.cer
rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.mft
rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:23:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:85:9d:9b:a2:28:44:af:0e:cf:d2:8c:d4:7d:5e:f4:0a:88:32:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CABF373EADCD9376E524CE313AB868C03EEB1088
Validity
Not Before: Mar 25 21:34:35 2026 GMT
Not After : Mar 27 00:23:35 2026 GMT
Subject: CN=5D6357B120986B756A67B0BD727C879ECC9B87F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:49:97:e5:64:55:d3:a4:61:b3:64:26:ea:18:
20:26:42:ec:d9:b8:d4:c6:64:c5:5c:f3:0c:bb:88:
45:d1:53:7d:0a:4a:a6:7b:c1:53:be:46:38:19:d3:
36:26:31:c4:4c:ea:30:d7:86:24:b0:f3:6b:ce:77:
5d:67:ef:ac:24:5b:b4:9f:0b:30:22:79:92:cc:00:
70:10:dd:5d:1b:60:58:b8:2c:67:ea:f3:26:33:0f:
20:72:d9:6f:ff:f4:ae:b1:fc:50:89:9a:2d:57:27:
bc:41:98:10:d8:97:0b:30:c6:6f:25:b9:89:20:8e:
db:22:e1:d9:5a:cb:53:9c:a8:71:02:a6:ae:a3:9a:
ad:45:75:eb:63:7f:0b:b6:07:2e:89:89:3c:d3:31:
f9:5d:e7:83:ec:9a:21:9a:ba:ae:86:15:e7:ee:70:
9c:9c:ef:7f:5e:bc:36:86:88:c7:5f:63:1c:95:42:
b0:44:70:bc:77:a2:6e:bf:cd:77:79:71:f3:65:9f:
33:de:75:0a:36:08:5b:6e:2f:ac:75:f7:0f:29:74:
bd:f1:0c:a0:f8:05:44:a5:c3:95:9b:4f:5c:30:b7:
e6:1d:55:b1:2e:0f:b2:4a:2e:dc:61:89:2e:a2:94:
96:1e:c5:f0:da:34:1a:97:53:9f:fb:32:f5:eb:31:
7a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:63:57:B1:20:98:6B:75:6A:67:B0:BD:72:7C:87:9E:CC:9B:87:F9
X509v3 Authority Key Identifier:
keyid:CA:BF:37:3E:AD:CD:93:76:E5:24:CE:31:3A:B8:68:C0:3E:EB:10:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo.rpki.space/repo/pfcloud-tgewiese/0/CABF373EADCD9376E524CE313AB868C03EEB1088.crl
Authority Information Access:
CA Issuers - URI:rsync://repo.rpki.space/repo/Infiniroute/1/CABF373EADCD9376E524CE313AB868C03EEB1088.cer
Subject Information Access:
Signed Object - URI:rsync://repo.rpki.space/repo/pfcloud-tgewiese/0/CABF373EADCD9376E524CE313AB868C03EEB1088.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:60:be:d9:ed:f5:c5:91:34:df:e4:15:61:8f:8c:63:22:c6:
fe:f7:4c:cf:4f:1f:c7:b8:94:fc:cb:da:03:7d:a7:92:db:cb:
80:55:0d:19:f1:5c:f7:e2:42:e6:63:61:75:80:40:5f:23:87:
c2:f4:83:2b:38:52:79:49:95:e0:62:f9:65:ac:88:2c:5a:41:
c4:35:72:c6:c8:21:c3:3a:5a:22:c4:92:84:35:af:71:30:e8:
f6:2c:7a:b7:9c:a2:9d:83:f2:40:14:84:b1:d1:0b:40:81:62:
dc:f1:0e:11:42:b3:2e:f9:db:fc:00:62:62:7f:81:ed:2d:7e:
37:d2:89:a4:23:d5:69:57:ae:37:41:e0:e6:d4:69:80:e5:2a:
a0:d1:84:17:c0:52:8b:10:0d:d1:26:61:e9:83:d1:58:92:1a:
5f:4d:45:7d:e0:3e:70:26:71:3c:d8:9e:5a:af:3a:f0:80:85:
65:22:b3:fb:11:0f:8a:8f:32:82:ec:dc:ef:a4:4c:d7:34:e5:
33:a6:02:70:e6:9b:86:d8:b0:22:1d:be:18:49:f8:d1:bd:e7:
bd:c1:41:75:e1:da:6c:f1:dc:49:7c:1a:73:f4:e6:f8:09:8b:
14:a4:09:61:72:54:80:4d:27:fd:41:79:e5:54:0b:d3:fa:6f:
fb:ba:03:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:28:31 2026 by rpki-client