Manifest

$ rpki-client -vvf repo.rpki.space/repo/Pfcloud/2/CAE8150E9595DBE9A74A289BFD0E8D2B1CE6B38D.mft
File:                     CAE8150E9595DBE9A74A289BFD0E8D2B1CE6B38D.mft (raw, json)
Hash identifier:          OSKENPo4hkPMCyvVaJ56+Lu58nn8CPhqv91m6t9cXMQ=
Subject key identifier:   4F:9A:DE:90:85:0A:60:95:18:2E:29:A5:94:6C:21:70:94:B1:6F:BB
Authority key identifier: CA:E8:15:0E:95:95:DB:E9:A7:4A:28:9B:FD:0E:8D:2B:1C:E6:B3:8D
Certificate issuer:       /CN=cae8150e9595dbe9a74a289bfd0e8d2b1ce6b38d
Certificate serial:       4D1B407B11D39C323A9DC099B5316CFD0683BD89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yugVDpWV2-mnSiib_Q6NKxzms40.cer
Subject info access:      rsync://repo.rpki.space/repo/Pfcloud/2/CAE8150E9595DBE9A74A289BFD0E8D2B1CE6B38D.mft
Manifest number:          0114
Signing time:             Tue 28 Jul 2026 06:01:02 +0000
Manifest this update:     Tue 28 Jul 2026 05:56:02 +0000
Manifest next update:     Wed 29 Jul 2026 07:28:02 +0000
Files and hashes:         1: CAE8150E9595DBE9A74A289BFD0E8D2B1CE6B38D.crl (hash: ujHAa+ae9J6P5ewvBlcsR+Yjzb5ENQ8AEn91aXQZ89s=)
                          2: AS51396.asa (hash: 0Cf/c6X9d+VxTP+HrophqXvXroNtNkC+Elk5uS8LluE=)
                          3: 326131343a383030303a3a2f32392d3239203d3e203531333936.roa (hash: 954ovZyNTCdFRHquG/fM/KMahRQBOehVwNmvvADjdxQ=)
Validation:               OK
Signature path:           rsync://repo.rpki.space/repo/Pfcloud/2/CAE8150E9595DBE9A74A289BFD0E8D2B1CE6B38D.crl
                          rsync://repo.rpki.space/repo/Pfcloud/2/CAE8150E9595DBE9A74A289BFD0E8D2B1CE6B38D.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yugVDpWV2-mnSiib_Q6NKxzms40.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 07:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:1b:40:7b:11:d3:9c:32:3a:9d:c0:99:b5:31:6c:fd:06:83:bd:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cae8150e9595dbe9a74a289bfd0e8d2b1ce6b38d
        Validity
            Not Before: Jul 28 05:56:02 2026 GMT
            Not After : Jul 29 07:28:02 2026 GMT
        Subject: CN=4F9ADE90850A6095182E29A5946C217094B16FBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:64:b8:a1:ac:2d:e7:0b:b3:32:cb:f0:a1:c4:
                    7b:f8:2c:62:bc:0e:d5:fb:c8:8e:fb:77:5f:e2:61:
                    ef:cd:5b:52:eb:85:b4:85:ff:0c:c4:f6:72:f7:4e:
                    7b:b9:c7:89:f2:8a:e8:e0:d6:fd:56:b7:30:9f:bb:
                    0f:23:f5:5c:09:90:5d:01:61:ed:a7:e7:3e:f0:fa:
                    6f:a0:e4:71:87:66:6f:56:08:0e:74:7d:df:a2:4d:
                    d1:6b:57:28:a7:ea:8e:3e:bc:e5:63:6e:a8:42:c2:
                    ad:5c:8b:73:46:a8:77:35:79:29:14:cf:85:21:28:
                    61:5a:7e:80:33:74:7c:3f:25:53:86:b0:da:c2:e7:
                    27:33:27:94:a8:c5:02:6f:31:61:9f:37:c8:75:6e:
                    34:12:82:a8:fc:9d:29:e1:11:93:e3:b9:89:a5:65:
                    93:e2:9d:c5:d0:da:d7:09:20:90:87:43:67:1b:d9:
                    21:50:0d:c8:b4:01:8c:bb:ad:86:a4:e5:fb:66:eb:
                    67:c6:87:54:c6:9b:2f:2e:bc:58:c4:cb:c1:19:ee:
                    37:88:92:0d:04:02:4f:db:35:73:07:76:b5:54:f0:
                    45:b7:a1:ef:34:e2:02:c5:4a:0d:94:fe:35:15:7d:
                    b7:8c:8c:c9:6e:97:d0:48:46:99:3b:44:b5:cf:95:
                    8f:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:9A:DE:90:85:0A:60:95:18:2E:29:A5:94:6C:21:70:94:B1:6F:BB
            X509v3 Authority Key Identifier:
                keyid:CA:E8:15:0E:95:95:DB:E9:A7:4A:28:9B:FD:0E:8D:2B:1C:E6:B3:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo.rpki.space/repo/Pfcloud/2/CAE8150E9595DBE9A74A289BFD0E8D2B1CE6B38D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yugVDpWV2-mnSiib_Q6NKxzms40.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo.rpki.space/repo/Pfcloud/2/CAE8150E9595DBE9A74A289BFD0E8D2B1CE6B38D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:77:7d:32:0f:74:31:0e:0d:3a:2f:1a:f7:9a:47:19:47:7a:
         74:0a:bf:d2:06:2c:33:70:fc:b9:35:5f:10:3f:61:ae:28:fd:
         98:56:34:6e:dd:bb:d8:e1:82:ac:49:68:e4:dc:89:46:6e:f1:
         3d:a3:3a:da:49:57:28:38:c0:30:40:b1:66:ca:ad:a4:23:32:
         75:2d:15:8f:2a:9f:4d:f4:96:39:00:10:61:d2:95:11:61:36:
         56:f0:03:b9:c7:f7:0a:13:fe:ee:33:55:06:7f:2e:40:cc:38:
         65:f7:2c:6c:b6:6d:c7:64:ed:aa:b4:8c:e6:74:2b:7d:a7:7b:
         82:54:0d:60:c9:fd:be:6e:f7:c3:79:91:3d:d0:60:b3:79:aa:
         4e:7c:f2:f9:8e:0e:48:6b:28:66:14:07:65:09:8a:2a:4f:cf:
         71:80:f5:d7:6e:ad:0b:54:30:60:02:fb:6a:ec:89:5b:4b:0e:
         0e:0b:21:27:0b:b1:41:0b:ee:74:49:d6:12:59:42:8f:6a:75:
         4b:89:1f:09:c2:f3:c2:c9:5d:20:cc:6f:a9:4e:48:d3:cb:48:
         c2:7c:8b:78:ee:37:55:fd:1a:26:dc:b7:41:6b:0f:cb:34:5d:
         dc:27:95:81:59:f5:57:59:7a:49:30:57:e2:27:02:53:df:c5:
         c9:91:6b:f8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jul 28 13:36:28 2026 by rpki-client