
$ rpki-client -vvf repo.rpki.space/repo/pfcloud-tgewiese/0/CABF373EADCD9376E524CE313AB868C03EEB1088.mft
File: CABF373EADCD9376E524CE313AB868C03EEB1088.mft (raw, json)
Hash identifier: h8pH+iTcL/oaermsHhddxXk8FQzsTvtK9g0XjR3LL0M=
Subject key identifier: 30:6E:A5:47:3A:97:9D:1D:20:51:AD:FF:48:42:B7:B0:83:52:AF:D2
Authority key identifier: CA:BF:37:3E:AD:CD:93:76:E5:24:CE:31:3A:B8:68:C0:3E:EB:10:88
Certificate issuer: /CN=CABF373EADCD9376E524CE313AB868C03EEB1088
Certificate serial: 5A6F1C72BF63628210BD15B923A21F27C115BAB8
Authority info access: rsync://repo.rpki.space/repo/Infiniroute/1/CABF373EADCD9376E524CE313AB868C03EEB1088.cer
Subject info access: rsync://repo.rpki.space/repo/pfcloud-tgewiese/0/CABF373EADCD9376E524CE313AB868C03EEB1088.mft
Manifest number: 02F5
Signing time: Fri 17 Apr 2026 22:53:03 +0000
Manifest this update: Fri 17 Apr 2026 22:48:03 +0000
Manifest next update: Sun 19 Apr 2026 01:42:03 +0000
Files and hashes: 1: 326131343a3763303a313230303a3a2f34302d3430203d3e20323031363837.roa (hash: f/cdjCfjhlySyNuo0kgMIF/CdapB1t3ceS2H+YsmCRc=)
2: 326131343a3763303a313030303a3a2f33382d3338203d3e20323135333635.roa (hash: sgRTwSyhVCQpHRZOTXhgdGYd5BzW5V4pFBW18sNeqlE=)
3: CABF373EADCD9376E524CE313AB868C03EEB1088.crl (hash: uHwGJVIc1kIY6P9rj+ED4HfuddPHlJ0l2Zu3xMMefBo=)
4: 326131343a3763303a313030333a3a2f34382d3438203d3e20323038323038.roa (hash: Q1m8GBF9oFuLdgm3mf/7nAqbDbU5cuywYXav+p5MPSc=)
5: 326131343a3763303a313330303a3a2f34302d3430203d3e20323133383530.roa (hash: ghrsyOsNjV1vJxVSpYhOwOHrESe1ZdqgfbMmoLsZ/wQ=)
Validation: OK
Signature path: rsync://repo.rpki.space/repo/pfcloud-tgewiese/0/CABF373EADCD9376E524CE313AB868C03EEB1088.crl
rsync://repo.rpki.space/repo/pfcloud-tgewiese/0/CABF373EADCD9376E524CE313AB868C03EEB1088.mft
rsync://repo.rpki.space/repo/Infiniroute/1/CABF373EADCD9376E524CE313AB868C03EEB1088.cer
rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.mft
rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 21:23:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:6f:1c:72:bf:63:62:82:10:bd:15:b9:23:a2:1f:27:c1:15:ba:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CABF373EADCD9376E524CE313AB868C03EEB1088
Validity
Not Before: Apr 17 22:48:03 2026 GMT
Not After : Apr 19 01:42:03 2026 GMT
Subject: CN=306EA5473A979D1D2051ADFF4842B7B08352AFD2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:57:75:38:ef:60:79:56:e6:05:b4:17:00:32:
4e:3c:d2:a9:02:da:06:96:3a:86:43:57:dd:de:c4:
48:89:21:23:fc:98:21:f5:dc:0d:41:15:a8:13:cc:
8d:73:98:8c:01:e0:bf:44:f9:8a:e8:2a:4a:2a:3e:
60:36:56:15:9f:a4:66:db:2f:a0:c0:a2:50:77:75:
d8:9c:f6:25:76:d5:a3:ad:98:14:7c:f0:1f:cc:90:
66:af:e7:bb:ca:fe:a2:17:ca:46:92:bf:f9:71:53:
58:bc:02:31:ce:77:3e:2a:67:45:52:a7:db:e7:68:
b7:5c:f1:36:49:8f:e5:42:a7:63:a4:ad:5d:b8:3a:
d6:6e:dd:f8:23:6c:21:c8:d3:4b:f7:51:d2:5a:da:
58:55:22:b0:e6:e9:74:4b:e0:d2:e2:4f:40:f8:56:
1a:dc:c9:16:60:7f:9c:59:6f:79:75:90:f3:4e:0e:
35:a8:d0:f7:ba:0a:78:bd:49:fe:53:5e:20:e3:2d:
d0:eb:0c:97:30:6d:61:89:79:62:4a:80:c3:45:9c:
1f:c5:48:73:3b:4a:4f:06:af:88:87:eb:fb:fc:37:
8f:45:ac:f7:e2:42:99:b0:39:6a:9c:50:b2:98:64:
0f:cf:4d:fd:4b:d1:66:01:52:50:7c:af:9f:76:fa:
1b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:6E:A5:47:3A:97:9D:1D:20:51:AD:FF:48:42:B7:B0:83:52:AF:D2
X509v3 Authority Key Identifier:
keyid:CA:BF:37:3E:AD:CD:93:76:E5:24:CE:31:3A:B8:68:C0:3E:EB:10:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo.rpki.space/repo/pfcloud-tgewiese/0/CABF373EADCD9376E524CE313AB868C03EEB1088.crl
Authority Information Access:
CA Issuers - URI:rsync://repo.rpki.space/repo/Infiniroute/1/CABF373EADCD9376E524CE313AB868C03EEB1088.cer
Subject Information Access:
Signed Object - URI:rsync://repo.rpki.space/repo/pfcloud-tgewiese/0/CABF373EADCD9376E524CE313AB868C03EEB1088.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:64:44:a4:3a:95:d8:2b:f7:72:35:48:08:9a:73:84:dc:54:
a5:7f:48:5b:26:24:44:46:e4:d0:a7:76:bd:32:48:5d:b6:26:
00:c7:e1:94:5b:e5:e5:f1:b5:62:47:f5:f8:39:39:43:19:05:
20:ae:51:9a:5a:3c:6b:9b:95:c9:ec:45:ce:03:2a:f8:22:b7:
d4:5a:8b:7a:f5:8c:7f:2e:51:a5:00:f6:80:d8:f2:e7:a4:c2:
d1:fa:29:43:90:3d:b4:4b:15:ec:9f:fe:4c:e4:6c:05:96:73:
c4:8b:d8:10:9b:a1:47:cf:f9:78:18:94:34:4e:9e:06:c0:ed:
64:de:72:2e:a3:79:ea:72:13:b1:c4:0b:11:f8:39:7b:a2:6f:
ed:52:97:3c:f6:55:45:e8:9e:d8:79:11:c9:81:a1:44:bc:c4:
e5:45:5d:e3:f0:16:3e:05:a3:47:2c:54:5e:75:78:4e:d1:b6:
e1:fa:9a:01:87:6a:80:28:4e:f2:35:d3:62:61:8a:93:b1:fc:
36:ba:60:92:78:e8:60:ab:50:e3:b2:79:39:6c:41:00:e0:50:
f7:07:f1:62:87:ce:53:a9:a1:28:7f:c1:04:c2:24:9c:a1:e3:
5c:c1:5b:ca:33:54:c7:47:84:d1:01:7d:e5:83:43:40:50:cd:
4d:49:88:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 04:17:04 2026 by rpki-client