$ rpki-client -vvf repo.rpki.space/repo/pfcloud-tgewiese/0/CABF373EADCD9376E524CE313AB868C03EEB1088.mft File: CABF373EADCD9376E524CE313AB868C03EEB1088.mft (raw, json) Hash identifier: btL+KcSXqF84c8rcgMspdQtuTVWn8aDTOijUmaYW4ko= Subject key identifier: 30:A3:33:DD:8C:15:85:12:6A:8D:2F:77:4E:5F:DD:0D:8E:01:77:CC Authority key identifier: CA:BF:37:3E:AD:CD:93:76:E5:24:CE:31:3A:B8:68:C0:3E:EB:10:88 Certificate issuer: /CN=CABF373EADCD9376E524CE313AB868C03EEB1088 Certificate serial: 3F7737D04A52D12CF9E92D009D00E87C1E97B6B2 Authority info access: rsync://repo.rpki.space/repo/Infiniroute/1/CABF373EADCD9376E524CE313AB868C03EEB1088.cer Subject info access: rsync://repo.rpki.space/repo/pfcloud-tgewiese/0/CABF373EADCD9376E524CE313AB868C03EEB1088.mft Manifest number: 0235 Signing time: Tue 04 Nov 2025 14:44:39 +0000 Manifest this update: Tue 04 Nov 2025 14:39:39 +0000 Manifest next update: Wed 05 Nov 2025 18:28:39 +0000 Files and hashes: 1: 326131343a3763303a313030333a3a2f34382d3438203d3e20323038323038.roa (hash: uvRTeITzG5dnGGKWlNSbP1RgjIMdhit9i0H0cABSxCE=) 2: 326131343a3763303a313330303a3a2f34302d3430203d3e20323133383530.roa (hash: ghrsyOsNjV1vJxVSpYhOwOHrESe1ZdqgfbMmoLsZ/wQ=) 3: CABF373EADCD9376E524CE313AB868C03EEB1088.crl (hash: H+5CxZZsmHwCTbGvpgDrxzGEXz1RlsqSClbUqqJ29VQ=) 4: 326131343a3763303a313030303a3a2f33382d3338203d3e20323135333635.roa (hash: sgRTwSyhVCQpHRZOTXhgdGYd5BzW5V4pFBW18sNeqlE=) 5: 326131343a3763303a313230303a3a2f34302d3430203d3e203538323132.roa (hash: B9fjxhBETDxMPuBEk4eX4HMycaaFKdpcguPNMhcUOpI=) Validation: OK Signature path: rsync://repo.rpki.space/repo/pfcloud-tgewiese/0/CABF373EADCD9376E524CE313AB868C03EEB1088.crl rsync://repo.rpki.space/repo/pfcloud-tgewiese/0/CABF373EADCD9376E524CE313AB868C03EEB1088.mft rsync://repo.rpki.space/repo/Infiniroute/1/CABF373EADCD9376E524CE313AB868C03EEB1088.cer rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.mft rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 11:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:77:37:d0:4a:52:d1:2c:f9:e9:2d:00:9d:00:e8:7c:1e:97:b6:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CABF373EADCD9376E524CE313AB868C03EEB1088 Validity Not Before: Nov 4 14:39:39 2025 GMT Not After : Nov 5 18:28:39 2025 GMT Subject: CN=30A333DD8C1585126A8D2F774E5FDD0D8E0177CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:94:2f:ac:eb:e2:23:f1:72:0e:c5:20:40:a8: 76:8b:fb:81:61:70:60:49:8a:1c:29:ac:b1:dc:f7: 6c:6a:d2:c8:c6:0f:72:c0:35:29:05:98:77:e1:8c: 14:82:08:cf:b9:c1:d3:d8:9b:c5:fa:9b:c0:b7:40: 6e:58:31:9b:90:16:26:00:56:14:f5:4e:6f:ab:d2: 17:db:e8:ba:74:40:f1:13:3d:4c:66:a7:0a:59:35: 5e:1c:fd:ef:8c:ba:ed:f0:41:86:d3:9d:24:27:27: 70:62:0e:66:6c:a0:66:bf:1d:f8:b4:f8:8f:89:fd: 01:89:59:f3:05:71:03:62:c1:f1:72:26:92:31:56: 98:86:6b:34:e1:3c:c0:25:d1:48:8c:b4:c8:a1:81: a7:87:33:af:4e:4d:1e:1c:e6:d1:fb:ed:fd:df:96: 83:29:f3:ed:5d:3e:0e:8b:d3:4a:9e:00:b8:b3:0b: 92:f6:8f:57:21:52:de:37:2c:1d:1c:2b:5f:cc:17: 44:0a:33:94:e7:18:3b:b0:1a:d9:1e:5e:2f:3d:9d: 2a:23:bd:49:cc:e5:d9:bc:e2:61:8c:5e:8c:e5:51: 50:57:3e:94:11:64:e2:49:82:91:10:9e:89:36:55: 4e:99:5f:6d:e1:da:6e:ce:e7:5d:42:57:11:45:22: 37:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:A3:33:DD:8C:15:85:12:6A:8D:2F:77:4E:5F:DD:0D:8E:01:77:CC X509v3 Authority Key Identifier: keyid:CA:BF:37:3E:AD:CD:93:76:E5:24:CE:31:3A:B8:68:C0:3E:EB:10:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo.rpki.space/repo/pfcloud-tgewiese/0/CABF373EADCD9376E524CE313AB868C03EEB1088.crl Authority Information Access: CA Issuers - URI:rsync://repo.rpki.space/repo/Infiniroute/1/CABF373EADCD9376E524CE313AB868C03EEB1088.cer Subject Information Access: Signed Object - URI:rsync://repo.rpki.space/repo/pfcloud-tgewiese/0/CABF373EADCD9376E524CE313AB868C03EEB1088.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e3:39:67:99:6b:2a:22:28:6f:d7:1c:10:b6:a9:db:e6:c0:d6: 53:5c:9f:38:27:5d:12:41:8d:96:ae:4e:1a:08:1d:de:75:4b: 27:90:e9:02:1c:0d:c8:4f:34:d2:0a:79:3a:d7:49:ca:d3:a6: 18:16:b8:48:df:f2:b8:e3:6d:56:ec:a1:bb:a2:a7:36:02:f5: 2e:b4:98:56:7c:c5:af:63:68:4b:48:15:04:82:c9:0f:3f:6e: a9:d8:08:7d:bb:0f:0a:c7:38:79:a8:bc:76:32:a3:4d:7b:cc: e9:93:e5:4f:15:02:90:a9:c5:1e:88:54:aa:40:08:5f:b9:c9: 25:a6:55:ac:d4:b6:a0:0c:3a:0e:da:5c:b2:91:60:ff:5e:0e: f0:33:7e:2c:79:f0:87:27:9b:3a:30:a1:b1:06:e0:f0:f7:c8: 47:64:02:06:eb:eb:cb:bf:ec:f4:4c:f6:bd:7d:1a:47:93:c9: 60:c3:a8:62:c7:a7:58:88:f4:82:cf:b8:37:ba:3f:16:b6:a4: a0:58:ae:32:7a:06:5b:a4:c1:a9:a6:3c:53:5d:47:9a:c8:92: 6b:89:b0:33:a7:45:d6:cf:5e:b3:f4:8c:17:4f:d8:be:84:eb: 6e:69:b4:a9:ac:18:7b:c4:c8:21:ea:9e:be:cf:9c:ff:b5:31: 97:81:a0:4c -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgIUP3c30EpS0Sz56S0AnQDofB6XtrIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0FCRjM3M0VBRENEOTM3NkU1MjRDRTMxM0FCODY4QzAz RUVCMTA4ODAeFw0yNTExMDQxNDM5MzlaFw0yNTExMDUxODI4MzlaMDMxMTAvBgNV BAMTKDMwQTMzM0REOEMxNTg1MTI2QThEMkY3NzRFNUZERDBEOEUwMTc3Q0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4lC+s6+Ij8XIOxSBAqHaL+4Fh cGBJihwprLHc92xq0sjGD3LANSkFmHfhjBSCCM+5wdPYm8X6m8C3QG5YMZuQFiYA VhT1Tm+r0hfb6Lp0QPETPUxmpwpZNV4c/e+Muu3wQYbTnSQnJ3BiDmZsoGa/Hfi0 +I+J/QGJWfMFcQNiwfFyJpIxVpiGazThPMAl0UiMtMihgaeHM69OTR4c5tH77f3f loMp8+1dPg6L00qeALizC5L2j1chUt43LB0cK1/MF0QKM5TnGDuwGtkeXi89nSoj vUnM5dm84mGMXozlUVBXPpQRZOJJgpEQnok2VU6ZX23h2m7O511CVxFFIjcjAgMB AAGjggIGMIICAjAdBgNVHQ4EFgQUMKMz3YwVhRJqjS93Tl/dDY4Bd8wwHwYDVR0j BBgwFoAUyr83Pq3Nk3blJM4xOrhowD7rEIgwDgYDVR0PAQH/BAQDAgeAMG0GA1Ud HwRmMGQwYqBgoF6GXHJzeW5jOi8vcmVwby5ycGtpLnNwYWNlL3JlcG8vcGZjbG91 ZC10Z2V3aWVzZS8wL0NBQkYzNzNFQURDRDkzNzZFNTI0Q0UzMTNBQjg2OEMwM0VF QjEwODguY3JsMHMGCCsGAQUFBwEBBGcwZTBjBggrBgEFBQcwAoZXcnN5bmM6Ly9y ZXBvLnJwa2kuc3BhY2UvcmVwby9JbmZpbmlyb3V0ZS8xL0NBQkYzNzNFQURDRDkz NzZFNTI0Q0UzMTNBQjg2OEMwM0VFQjEwODguY2VyMHgGCCsGAQUFBwELBGwwajBo BggrBgEFBQcwC4ZccnN5bmM6Ly9yZXBvLnJwa2kuc3BhY2UvcmVwby9wZmNsb3Vk LXRnZXdpZXNlLzAvQ0FCRjM3M0VBRENEOTM3NkU1MjRDRTMxM0FCODY4QzAzRUVC MTA4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB /wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJ KoZIhvcNAQELBQADggEBAOM5Z5lrKiIob9ccELap2+bA1lNcnzgnXRJBjZauThoI Hd51SyeQ6QIcDchPNNIKeTrXScrTphgWuEjf8rjjbVbsobuipzYC9S60mFZ8xa9j aEtIFQSCyQ8/bqnYCH27DwrHOHmovHYyo017zOmT5U8VApCpxR6IVKpACF+5ySWm VazUtqAMOg7aXLKRYP9eDvAzfix58IcnmzowobEG4PD3yEdkAgbr68u/7PRM9r19 GkeTyWDDqGLHp1iI9ILPuDe6Pxa2pKBYrjJ6BlukwammPFNdR5rIkmuJsDOnRdbP XrP0jBdP2L6E625ptKmsGHvEyCHqnr7PnP+1MZeBoEw= -----END CERTIFICATE-----Generated at Wed Nov 5 02:56:15 2025 by rpki-client