Manifest

$ rpki-client -vvf repo.rpki.space/repo/Pfcloud/2/CAE8150E9595DBE9A74A289BFD0E8D2B1CE6B38D.mft
File:                     CAE8150E9595DBE9A74A289BFD0E8D2B1CE6B38D.mft (raw, json)
Hash identifier:          1M/FEJZZXxuZ1YCxEgZOzpHg0Tt8e9dEwGGNxAUObcA=
Subject key identifier:   36:D3:4F:C6:1F:A0:FE:38:D9:CC:CF:B3:CB:83:10:00:1D:CC:5A:F1
Authority key identifier: CA:E8:15:0E:95:95:DB:E9:A7:4A:28:9B:FD:0E:8D:2B:1C:E6:B3:8D
Certificate issuer:       /CN=cae8150e9595dbe9a74a289bfd0e8d2b1ce6b38d
Certificate serial:       30A4E38458AE07B34CA2ADF841E6A3812A79C74C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yugVDpWV2-mnSiib_Q6NKxzms40.cer
Subject info access:      rsync://repo.rpki.space/repo/Pfcloud/2/CAE8150E9595DBE9A74A289BFD0E8D2B1CE6B38D.mft
Manifest number:          4E
Signing time:             Sun 01 Mar 2026 09:58:21 +0000
Manifest this update:     Sun 01 Mar 2026 09:53:21 +0000
Manifest next update:     Mon 02 Mar 2026 10:27:21 +0000
Files and hashes:         1: 326131343a383030303a3a2f32392d3239203d3e203330303538.roa (hash: RmUAy8PzxTU8swfxx9FgRD6DubhFI89+l40cHw3KDtc=)
                          2: CAE8150E9595DBE9A74A289BFD0E8D2B1CE6B38D.crl (hash: lvYXPLnqnkGsAddTb/DjYGC8eVpLTWleoCz0IITFpEY=)
                          3: AS51396.asa (hash: eaEnuDqquMnzN1UxoxjD+6BvzZHcFE8FQDbj+LvxLvY=)
Validation:               OK
Signature path:           rsync://repo.rpki.space/repo/Pfcloud/2/CAE8150E9595DBE9A74A289BFD0E8D2B1CE6B38D.crl
                          rsync://repo.rpki.space/repo/Pfcloud/2/CAE8150E9595DBE9A74A289BFD0E8D2B1CE6B38D.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yugVDpWV2-mnSiib_Q6NKxzms40.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 09:38:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:a4:e3:84:58:ae:07:b3:4c:a2:ad:f8:41:e6:a3:81:2a:79:c7:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cae8150e9595dbe9a74a289bfd0e8d2b1ce6b38d
        Validity
            Not Before: Mar  1 09:53:21 2026 GMT
            Not After : Mar  2 10:27:21 2026 GMT
        Subject: CN=36D34FC61FA0FE38D9CCCFB3CB8310001DCC5AF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:eb:bd:13:fe:52:7b:68:7d:42:88:be:e2:a7:
                    a1:78:67:77:4a:bd:8e:07:b5:77:8b:7c:e4:d6:53:
                    20:1c:52:ef:cd:fe:d8:d6:76:03:5a:f8:a5:e1:2c:
                    1b:d6:02:ec:9c:d4:0d:98:46:72:a9:66:73:c0:8b:
                    aa:68:71:7e:b0:7d:3f:23:de:e4:ec:e6:fc:73:7f:
                    05:b3:2d:22:24:97:eb:89:27:61:e1:b3:30:d2:36:
                    4e:cd:d0:1f:85:4c:45:2d:f8:46:a5:d3:1e:78:df:
                    3e:9b:70:97:6b:b2:a5:80:07:7c:4d:c1:af:4f:01:
                    84:b7:d7:4d:4a:ad:cb:b9:cc:5b:c9:f8:6a:83:9d:
                    3c:17:13:53:60:35:79:d4:3a:9f:c9:5b:cd:4b:cf:
                    29:90:15:fe:2c:68:0f:a5:be:d6:5d:68:e9:63:59:
                    42:e2:cf:05:52:ea:c0:d8:e6:39:6e:fe:d0:33:2f:
                    e5:e7:b9:24:52:f8:e4:e2:23:3c:db:b0:8c:de:f1:
                    84:af:d4:12:eb:ba:c1:05:42:50:88:b4:af:85:52:
                    fc:b2:db:96:da:62:74:e0:37:96:ba:cf:d8:bc:53:
                    2b:ca:71:99:18:2c:9a:ce:69:31:43:4a:a9:f7:b5:
                    09:95:5d:3e:b6:f0:76:11:42:84:38:a3:62:13:2a:
                    35:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:D3:4F:C6:1F:A0:FE:38:D9:CC:CF:B3:CB:83:10:00:1D:CC:5A:F1
            X509v3 Authority Key Identifier:
                keyid:CA:E8:15:0E:95:95:DB:E9:A7:4A:28:9B:FD:0E:8D:2B:1C:E6:B3:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo.rpki.space/repo/Pfcloud/2/CAE8150E9595DBE9A74A289BFD0E8D2B1CE6B38D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yugVDpWV2-mnSiib_Q6NKxzms40.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo.rpki.space/repo/Pfcloud/2/CAE8150E9595DBE9A74A289BFD0E8D2B1CE6B38D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:74:61:9f:09:3c:e4:b9:dc:dc:54:af:e8:bd:b8:ca:e0:46:
         d6:f1:bd:6f:3f:2a:bf:db:7a:18:a1:1c:c5:b6:ea:44:1c:a6:
         fc:99:8a:9f:8b:22:81:90:89:cc:2e:48:7e:24:b4:63:81:76:
         0a:b7:b5:95:fe:c4:87:fb:2e:19:32:8c:cd:45:b9:3c:de:bd:
         ea:75:dd:a5:ac:4c:54:e9:ce:55:64:95:29:d6:84:90:f2:fd:
         94:b1:a0:90:f3:29:4f:c3:2b:8f:8f:fa:90:b7:a8:df:e8:1b:
         f1:6b:1e:71:d2:ae:c3:41:f9:01:68:b7:99:a0:66:a5:a4:13:
         ca:d1:6c:5f:3f:8e:b4:f6:cd:49:75:c2:ce:a9:7f:6f:88:5e:
         5b:e6:ce:c3:84:bd:c5:8e:37:44:49:2a:13:e2:a4:b9:4b:59:
         16:7f:38:eb:5d:d6:21:5b:7b:31:fc:80:06:9c:a0:74:00:a5:
         43:b9:0b:86:ee:34:fb:d6:85:09:a5:1e:1d:38:77:06:f6:8c:
         25:80:43:d5:bf:eb:57:c4:53:37:ed:6a:45:d7:4e:c6:a8:fb:
         98:6f:d7:d1:7b:9f:e2:bd:99:50:d7:79:e4:3e:7c:88:f8:68:
         85:14:7e:b9:b5:7c:78:f2:a9:8f:49:3c:a9:65:64:16:b2:78:
         2f:e3:2a:33
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 18:13:50 2026 by rpki-client