Manifest

$ rpki-client -vvvf repo.rpki.space/repo/Pfcloud/2/CAE8150E9595DBE9A74A289BFD0E8D2B1CE6B38D.mft
File:                     CAE8150E9595DBE9A74A289BFD0E8D2B1CE6B38D.mft (raw, json)
Hash identifier:          IeVWJ8QrWxR0OQadhIbXMBuyb+Gpf7+3//00BGfNWRo=
Subject key identifier:   31:4F:15:77:32:F8:4C:D9:96:1A:24:64:7B:6C:A5:F9:59:B1:97:71
Authority key identifier: CA:E8:15:0E:95:95:DB:E9:A7:4A:28:9B:FD:0E:8D:2B:1C:E6:B3:8D
Certificate issuer:       /CN=cae8150e9595dbe9a74a289bfd0e8d2b1ce6b38d
Certificate serial:       7EBA0CC2CFC108A9B13143284D3B924A189520ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yugVDpWV2-mnSiib_Q6NKxzms40.cer
Subject info access:      rsync://repo.rpki.space/repo/Pfcloud/2/CAE8150E9595DBE9A74A289BFD0E8D2B1CE6B38D.mft
Manifest number:          015C
Signing time:             Sun 20 Sep 2026 02:20:38 +0000
Manifest this update:     Sun 20 Sep 2026 02:15:38 +0000
Manifest next update:     Mon 21 Sep 2026 05:04:38 +0000
Files and hashes:         1: 326131343a383030303a3a2f32392d3239203d3e203531333936.roa (hash: 954ovZyNTCdFRHquG/fM/KMahRQBOehVwNmvvADjdxQ=)
                          2: AS51396.asa (hash: 0Cf/c6X9d+VxTP+HrophqXvXroNtNkC+Elk5uS8LluE=)
                          3: CAE8150E9595DBE9A74A289BFD0E8D2B1CE6B38D.crl (hash: BuflkkLL3Rims5wXo5Jp0Z+kH89SxtkhQWEDRggCv0I=)
Validation:               OK
Signature path:           rsync://repo.rpki.space/repo/Pfcloud/2/CAE8150E9595DBE9A74A289BFD0E8D2B1CE6B38D.crl
                          rsync://repo.rpki.space/repo/Pfcloud/2/CAE8150E9595DBE9A74A289BFD0E8D2B1CE6B38D.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yugVDpWV2-mnSiib_Q6NKxzms40.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 05:04:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:ba:0c:c2:cf:c1:08:a9:b1:31:43:28:4d:3b:92:4a:18:95:20:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cae8150e9595dbe9a74a289bfd0e8d2b1ce6b38d
        Validity
            Not Before: Sep 20 02:15:38 2026 GMT
            Not After : Sep 21 05:04:38 2026 GMT
        Subject: CN=314F157732F84CD9961A24647B6CA5F959B19771
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:42:99:d6:9c:8b:58:d9:81:dd:f4:ac:d3:e3:
                    18:15:d0:e6:60:fd:03:05:ff:67:21:ce:24:df:97:
                    1c:3f:78:2d:23:ba:14:13:38:47:74:a6:8d:d6:5c:
                    af:50:74:50:f1:57:01:c2:6f:0a:14:46:7c:11:5a:
                    07:86:73:e6:d6:d2:da:4a:a2:13:9d:1f:82:23:f4:
                    0b:13:7c:d1:86:df:0d:01:6b:e9:e3:d8:c2:b2:25:
                    38:4d:ab:1c:aa:57:47:ac:72:bb:58:dc:6e:e2:53:
                    a0:84:23:45:f6:ed:a0:e3:d1:90:c2:e6:4e:c4:bf:
                    a2:9d:60:01:b3:69:5e:20:f0:d3:02:f8:4a:4e:e4:
                    d9:17:fa:1b:d9:c2:d8:28:00:94:3b:2a:94:d6:4f:
                    bc:26:05:03:1e:25:9b:ee:a2:66:2d:64:73:ed:ea:
                    56:75:b4:1a:da:b3:72:80:e5:39:19:0d:8c:11:57:
                    20:7f:56:75:f2:aa:0c:4f:84:a5:14:ef:9a:a7:24:
                    0a:8b:5c:72:30:e0:12:28:4e:eb:0a:aa:64:c0:21:
                    02:97:36:e4:13:3b:0f:e0:20:2f:4e:b1:61:39:39:
                    1d:10:95:a5:22:f8:d2:b5:03:a3:ac:f2:73:98:95:
                    b8:d9:33:58:37:12:ca:20:67:75:03:79:3a:44:61:
                    9f:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:4F:15:77:32:F8:4C:D9:96:1A:24:64:7B:6C:A5:F9:59:B1:97:71
            X509v3 Authority Key Identifier:
                keyid:CA:E8:15:0E:95:95:DB:E9:A7:4A:28:9B:FD:0E:8D:2B:1C:E6:B3:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo.rpki.space/repo/Pfcloud/2/CAE8150E9595DBE9A74A289BFD0E8D2B1CE6B38D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yugVDpWV2-mnSiib_Q6NKxzms40.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo.rpki.space/repo/Pfcloud/2/CAE8150E9595DBE9A74A289BFD0E8D2B1CE6B38D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:e4:d7:c4:6e:ec:cd:ed:94:f0:2b:be:ba:81:d6:31:dc:1f:
         8b:de:e9:d9:d6:3f:0d:37:e4:ca:23:91:72:0d:9b:a2:6e:6a:
         00:a6:28:76:a2:dd:df:2b:38:a6:09:9c:c2:69:a0:cb:56:d6:
         f4:18:32:1a:b9:98:af:1b:a1:10:67:52:24:2e:db:93:fb:17:
         f1:92:fb:0b:05:6e:d7:19:d1:a0:43:6b:2c:0b:3c:18:2a:2e:
         79:27:0c:d9:cd:4b:09:6c:ca:10:4a:25:a6:69:28:3a:27:5e:
         ca:93:60:0a:fe:db:7a:a5:fc:50:c6:8a:ab:03:02:3d:32:91:
         41:78:ca:be:04:1e:cc:19:72:19:3f:cd:72:7f:74:51:c5:c5:
         3b:ef:c2:38:93:7c:ba:8e:9b:5b:80:b6:66:d0:8a:98:75:0f:
         d1:b5:bb:12:e9:a3:3c:cc:8c:40:8b:c1:49:29:87:3e:e3:42:
         ca:c6:86:00:62:3e:7f:5f:24:36:ea:ee:5e:e6:91:f6:8e:bb:
         09:60:81:c6:23:b6:9c:8b:1b:23:a7:05:e1:77:73:fe:e6:f7:
         3b:be:1f:0b:b8:15:41:cf:6d:cd:37:9e:3d:e1:93:b2:e5:9a:
         e7:0d:bb:a6:d5:dd:9a:c0:3e:a7:be:51:9f:c2:15:01:0e:5c:
         7f:ee:62:c9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Sep 20 19:34:44 2026 by rpki-client