$ rpki-client -vvf repo.rpki.space/repo/pfcloud-tgewiese/0/CABF373EADCD9376E524CE313AB868C03EEB1088.mft File: CABF373EADCD9376E524CE313AB868C03EEB1088.mft (raw, json) Hash identifier: ngmRDOUUCXBe43ZORmB8D42k7BBBqXl6xMxEg4juZfc= Subject key identifier: 1B:F1:BB:50:DE:C2:9C:9C:D2:2D:59:07:89:8E:50:29:F8:CA:FA:65 Authority key identifier: CA:BF:37:3E:AD:CD:93:76:E5:24:CE:31:3A:B8:68:C0:3E:EB:10:88 Certificate issuer: /CN=CABF373EADCD9376E524CE313AB868C03EEB1088 Certificate serial: 61B66866EE2643BE422CF793E7DE04ABA44ED7F7 Authority info access: rsync://repo.rpki.space/repo/Infiniroute/1/CABF373EADCD9376E524CE313AB868C03EEB1088.cer Subject info access: rsync://repo.rpki.space/repo/pfcloud-tgewiese/0/CABF373EADCD9376E524CE313AB868C03EEB1088.mft Manifest number: 02B7 Signing time: Mon 02 Mar 2026 09:48:22 +0000 Manifest this update: Mon 02 Mar 2026 09:43:22 +0000 Manifest next update: Tue 03 Mar 2026 12:34:22 +0000 Files and hashes: 1: 326131343a3763303a313030303a3a2f33382d3338203d3e20323135333635.roa (hash: sgRTwSyhVCQpHRZOTXhgdGYd5BzW5V4pFBW18sNeqlE=) 2: 326131343a3763303a313030333a3a2f34382d3438203d3e20323038323038.roa (hash: uvRTeITzG5dnGGKWlNSbP1RgjIMdhit9i0H0cABSxCE=) 3: CABF373EADCD9376E524CE313AB868C03EEB1088.crl (hash: W8mYyEYkLZuC8Q6KJ2LEil8ggrIc94LJ1VPi9bNq51g=) 4: 326131343a3763303a313230303a3a2f34302d3430203d3e20323031363837.roa (hash: f/cdjCfjhlySyNuo0kgMIF/CdapB1t3ceS2H+YsmCRc=) 5: 326131343a3763303a313330303a3a2f34302d3430203d3e20323133383530.roa (hash: ghrsyOsNjV1vJxVSpYhOwOHrESe1ZdqgfbMmoLsZ/wQ=) Validation: OK Signature path: rsync://repo.rpki.space/repo/pfcloud-tgewiese/0/CABF373EADCD9376E524CE313AB868C03EEB1088.crl rsync://repo.rpki.space/repo/pfcloud-tgewiese/0/CABF373EADCD9376E524CE313AB868C03EEB1088.mft rsync://repo.rpki.space/repo/Infiniroute/1/CABF373EADCD9376E524CE313AB868C03EEB1088.cer rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.mft rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 19:53:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:b6:68:66:ee:26:43:be:42:2c:f7:93:e7:de:04:ab:a4:4e:d7:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CABF373EADCD9376E524CE313AB868C03EEB1088 Validity Not Before: Mar 2 09:43:22 2026 GMT Not After : Mar 3 12:34:22 2026 GMT Subject: CN=1BF1BB50DEC29C9CD22D5907898E5029F8CAFA65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:cc:29:e6:dc:6b:66:49:7e:85:9c:2e:79:10: bc:2a:54:cf:bd:2e:53:87:fc:64:3e:06:47:e3:54: 79:c3:7f:d8:87:72:42:31:f5:8f:f2:d2:6a:a5:15: 10:a2:d1:b9:e5:79:b5:89:b7:63:65:19:89:83:8f: 87:8d:34:f0:c7:e5:3a:c8:54:d5:a1:a1:70:8b:5f: d1:91:b4:28:c8:e7:90:dc:4c:3a:8f:a7:e0:52:89: 75:2d:d6:70:4f:34:74:ff:c0:21:25:7c:30:d8:41: dc:07:e1:31:9b:2f:9d:fc:fc:52:54:41:c8:5d:ba: ca:ef:76:ff:89:50:79:a6:45:92:7a:91:7e:d4:7b: d5:99:b4:7d:39:d7:27:c5:26:de:87:0e:c1:8e:9e: 32:78:30:2f:fe:32:d1:cd:c0:2b:e9:d1:5c:6f:a1: 2b:d4:19:51:ab:f5:89:3b:17:e7:0a:09:70:a2:50: 67:c0:b4:cd:29:2f:78:c5:55:3a:86:52:9a:28:6b: 0f:05:03:ac:d4:67:92:49:3c:0d:00:26:c0:5f:d5: a1:f2:ec:ef:5e:05:01:46:84:f3:94:78:23:9d:77: 8e:0c:95:c1:32:f9:a6:4d:89:3d:37:52:be:81:73: 1a:62:c2:2a:08:74:92:c9:1e:8c:36:74:0b:e6:c8: 0b:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:F1:BB:50:DE:C2:9C:9C:D2:2D:59:07:89:8E:50:29:F8:CA:FA:65 X509v3 Authority Key Identifier: keyid:CA:BF:37:3E:AD:CD:93:76:E5:24:CE:31:3A:B8:68:C0:3E:EB:10:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo.rpki.space/repo/pfcloud-tgewiese/0/CABF373EADCD9376E524CE313AB868C03EEB1088.crl Authority Information Access: CA Issuers - URI:rsync://repo.rpki.space/repo/Infiniroute/1/CABF373EADCD9376E524CE313AB868C03EEB1088.cer Subject Information Access: Signed Object - URI:rsync://repo.rpki.space/repo/pfcloud-tgewiese/0/CABF373EADCD9376E524CE313AB868C03EEB1088.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:53:96:ec:fc:0a:49:90:ba:29:d2:d2:06:c2:a4:6f:ba:ab: 04:11:91:d4:0a:a4:2e:ad:b4:e0:e6:9c:db:c5:ff:a5:ec:87: 7f:ce:87:af:f2:e8:cd:79:80:9a:70:79:18:4b:c1:fb:c9:24: 84:32:0e:b2:28:d5:2e:01:16:37:84:96:41:0c:fc:6b:c6:5d: f8:09:67:bf:1c:2d:2d:2c:4d:44:d3:fe:5f:38:f4:6a:33:77: dd:a8:90:8a:bb:09:06:be:59:1e:29:8a:c4:bc:5b:4c:4d:61: 1c:c1:3e:0c:81:3c:70:51:1a:76:a4:30:64:5a:7f:80:11:04: 2f:20:b9:75:c6:b5:ee:63:78:2b:17:12:9d:21:e5:6f:78:a6: 9a:cf:a6:a9:2a:df:d5:47:31:29:5b:8b:44:bd:a6:04:f4:ad: ff:d1:3d:5e:e2:a9:82:00:74:f7:a5:5c:10:94:07:5a:a5:4c: 3c:46:e0:80:d1:72:42:c1:fa:87:70:25:c9:22:85:2f:0b:64: d1:f0:23:3f:2b:36:bc:12:9c:d5:b6:ba:2b:63:36:d9:cf:14: 3f:af:93:bc:71:f3:99:59:db:9f:93:0a:19:68:ec:84:20:9f: 79:2a:f9:30:a4:9b:90:b9:85:75:9f:cc:0a:70:cf:46:71:d8: 65:c5:41:b6 -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgIUYbZoZu4mQ75CLPeT594Eq6RO1/cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0FCRjM3M0VBRENEOTM3NkU1MjRDRTMxM0FCODY4QzAz RUVCMTA4ODAeFw0yNjAzMDIwOTQzMjJaFw0yNjAzMDMxMjM0MjJaMDMxMTAvBgNV BAMTKDFCRjFCQjUwREVDMjlDOUNEMjJENTkwNzg5OEU1MDI5RjhDQUZBNjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLzCnm3GtmSX6FnC55ELwqVM+9 LlOH/GQ+BkfjVHnDf9iHckIx9Y/y0mqlFRCi0bnlebWJt2NlGYmDj4eNNPDH5TrI VNWhoXCLX9GRtCjI55DcTDqPp+BSiXUt1nBPNHT/wCElfDDYQdwH4TGbL538/FJU Qchdusrvdv+JUHmmRZJ6kX7Ue9WZtH051yfFJt6HDsGOnjJ4MC/+MtHNwCvp0Vxv oSvUGVGr9Yk7F+cKCXCiUGfAtM0pL3jFVTqGUpooaw8FA6zUZ5JJPA0AJsBf1aHy 7O9eBQFGhPOUeCOdd44MlcEy+aZNiT03Ur6BcxpiwioIdJLJHow2dAvmyAvxAgMB AAGjggIGMIICAjAdBgNVHQ4EFgQUG/G7UN7CnJzSLVkHiY5QKfjK+mUwHwYDVR0j BBgwFoAUyr83Pq3Nk3blJM4xOrhowD7rEIgwDgYDVR0PAQH/BAQDAgeAMG0GA1Ud HwRmMGQwYqBgoF6GXHJzeW5jOi8vcmVwby5ycGtpLnNwYWNlL3JlcG8vcGZjbG91 ZC10Z2V3aWVzZS8wL0NBQkYzNzNFQURDRDkzNzZFNTI0Q0UzMTNBQjg2OEMwM0VF QjEwODguY3JsMHMGCCsGAQUFBwEBBGcwZTBjBggrBgEFBQcwAoZXcnN5bmM6Ly9y ZXBvLnJwa2kuc3BhY2UvcmVwby9JbmZpbmlyb3V0ZS8xL0NBQkYzNzNFQURDRDkz NzZFNTI0Q0UzMTNBQjg2OEMwM0VFQjEwODguY2VyMHgGCCsGAQUFBwELBGwwajBo BggrBgEFBQcwC4ZccnN5bmM6Ly9yZXBvLnJwa2kuc3BhY2UvcmVwby9wZmNsb3Vk LXRnZXdpZXNlLzAvQ0FCRjM3M0VBRENEOTM3NkU1MjRDRTMxM0FCODY4QzAzRUVC MTA4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB /wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJ KoZIhvcNAQELBQADggEBALNTluz8CkmQuinS0gbCpG+6qwQRkdQKpC6ttODmnNvF /6Xsh3/Oh6/y6M15gJpweRhLwfvJJIQyDrIo1S4BFjeElkEM/GvGXfgJZ78cLS0s TUTT/l849Gozd92okIq7CQa+WR4pisS8W0xNYRzBPgyBPHBRGnakMGRaf4ARBC8g uXXGte5jeCsXEp0h5W94pprPpqkq39VHMSlbi0S9pgT0rf/RPV7iqYIAdPelXBCU B1qlTDxG4IDRckLB+odwJckihS8LZNHwIz8rNrwSnNW2uitjNtnPFD+vk7xx85lZ 25+TChlo7IQgn3kq+TCkm5C5hXWfzApwz0Zx2GXFQbY= -----END CERTIFICATE-----Generated at Mon Mar 2 12:36:46 2026 by rpki-client