Manifest

$ rpki-client -vvf rpki.cc/repo/networkservices/0/1C2D1DBC48258325C2B358984C61641373F92FC7.mft
File:                     1C2D1DBC48258325C2B358984C61641373F92FC7.mft (raw, json)
Hash identifier:          LOCHmbT9MdrQouzuG8UkHZdUBvbL0a9kXdYQJVRgUL4=
Subject key identifier:   B0:41:EF:32:3E:1E:26:9D:70:D9:88:54:83:7A:F4:18:DA:97:FB:5D
Authority key identifier: 1C:2D:1D:BC:48:25:83:25:C2:B3:58:98:4C:61:64:13:73:F9:2F:C7
Certificate issuer:       /CN=1c2d1dbc48258325c2b358984c61641373f92fc7
Certificate serial:       557E5D3B860AD26951B68E00528271BD1E0F8DBC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HC0dvEglgyXCs1iYTGFkE3P5L8c.cer
Subject info access:      rsync://rpki.cc/repo/networkservices/0/1C2D1DBC48258325C2B358984C61641373F92FC7.mft
Manifest number:          53
Signing time:             Wed 25 Mar 2026 18:43:34 +0000
Manifest this update:     Wed 25 Mar 2026 18:38:34 +0000
Manifest next update:     Thu 26 Mar 2026 21:42:34 +0000
Files and hashes:         1: 1C2D1DBC48258325C2B358984C61641373F92FC7.crl (hash: T1uoJIf6xS1Wt+UDSLYURXgmuz+2ijwxOmqdaTIPijw=)
                          2: AS50224.asa (hash: rPmliXCXUPTdizadyes60PZbVbbTw1Bagzs9JDkOf54=)
Validation:               OK
Signature path:           rsync://rpki.cc/repo/networkservices/0/1C2D1DBC48258325C2B358984C61641373F92FC7.crl
                          rsync://rpki.cc/repo/networkservices/0/1C2D1DBC48258325C2B358984C61641373F92FC7.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HC0dvEglgyXCs1iYTGFkE3P5L8c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:7e:5d:3b:86:0a:d2:69:51:b6:8e:00:52:82:71:bd:1e:0f:8d:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c2d1dbc48258325c2b358984c61641373f92fc7
        Validity
            Not Before: Mar 25 18:38:34 2026 GMT
            Not After : Mar 26 21:42:34 2026 GMT
        Subject: CN=B041EF323E1E269D70D98854837AF418DA97FB5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:7a:c8:82:88:5f:74:69:7e:15:b2:06:c6:7c:
                    4d:c9:05:78:ca:70:fa:af:f5:33:dd:8c:79:fd:cd:
                    a0:2e:33:f3:73:74:2e:48:dc:2e:b9:f7:c6:28:5c:
                    59:69:f9:66:17:2e:03:b4:28:fa:77:7d:a6:bb:ac:
                    77:86:1a:ec:3a:2d:42:b4:71:a8:8c:6e:fe:0e:23:
                    88:7d:18:29:0b:fe:f1:19:78:7c:7e:29:d4:0b:67:
                    ac:9d:36:0b:4f:43:9b:59:f7:c3:21:59:c3:39:5c:
                    64:d4:0f:11:1c:88:c5:84:36:3a:57:70:60:41:1c:
                    80:4b:6c:40:76:e8:24:df:fb:d4:e9:38:b8:95:d2:
                    eb:9c:83:20:35:2a:87:b2:7f:36:4a:89:d5:52:dc:
                    bb:54:38:e4:49:f6:41:ed:63:1c:b4:e7:6a:96:cb:
                    86:e4:34:96:1f:06:2d:da:49:4c:d9:0c:bc:a5:a4:
                    e2:5f:ba:8d:81:96:7f:25:73:35:86:b4:64:2c:1c:
                    9e:0e:47:c5:68:73:c2:b3:80:e5:1b:ad:c6:39:ae:
                    c8:5f:e1:8b:ac:aa:e7:ca:2d:8f:26:ac:13:da:3a:
                    d8:cc:ed:74:37:aa:68:3d:04:5c:c2:ef:e8:78:28:
                    08:f7:e7:9f:b3:85:4e:e9:bd:44:d7:67:a4:d0:ad:
                    91:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:41:EF:32:3E:1E:26:9D:70:D9:88:54:83:7A:F4:18:DA:97:FB:5D
            X509v3 Authority Key Identifier:
                keyid:1C:2D:1D:BC:48:25:83:25:C2:B3:58:98:4C:61:64:13:73:F9:2F:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/networkservices/0/1C2D1DBC48258325C2B358984C61641373F92FC7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HC0dvEglgyXCs1iYTGFkE3P5L8c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/networkservices/0/1C2D1DBC48258325C2B358984C61641373F92FC7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:7e:a6:d3:a4:54:e9:dc:a3:cc:c0:94:14:97:e3:b8:92:c0:
         9f:aa:91:5d:af:40:33:49:01:7f:74:de:df:b9:87:80:31:f8:
         5e:6c:99:71:76:16:ed:29:79:67:88:e7:8b:74:43:30:27:55:
         a0:c2:b5:b0:9d:56:6b:46:b9:75:68:d5:0e:a5:f9:59:5a:9e:
         8f:b0:dc:d9:14:4f:4b:60:1b:cb:6c:df:ca:59:df:45:a5:23:
         2e:d1:ca:29:56:d0:17:3f:f6:d9:fc:2a:f7:2a:a1:3c:26:f7:
         6b:e8:34:71:4a:4d:46:05:40:6a:3b:e1:bc:85:0a:c9:6a:44:
         c8:e1:f5:9d:84:01:bf:04:42:d4:63:08:2d:d5:5b:73:a9:f6:
         bf:21:80:eb:fb:b9:8c:3b:5e:c9:1c:32:9a:d6:c8:81:46:01:
         83:38:5a:de:3e:ae:82:28:76:66:08:92:1c:26:2c:36:b7:9b:
         f2:6f:ad:4d:7b:a8:e2:c0:c1:77:b6:56:0e:dc:a6:78:f8:7b:
         a8:7f:1d:74:a4:2a:cb:ef:77:59:1c:d0:d4:4d:0b:29:c0:e9:
         3c:9a:2e:57:d6:d8:01:7f:15:e7:95:07:e2:6b:4e:e9:aa:cb:
         f9:58:1b:33:33:5e:e5:e0:2f:43:79:c2:f4:7a:21:de:83:0a:
         d0:5c:9e:65
-----BEGIN CERTIFICATE-----
MIIE2zCCA8OgAwIBAgIUVX5dO4YK0mlRto4AUoJxvR4PjbwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMWMyZDFkYmM0ODI1ODMyNWMyYjM1ODk4NGM2MTY0MTM3
M2Y5MmZjNzAeFw0yNjAzMjUxODM4MzRaFw0yNjAzMjYyMTQyMzRaMDMxMTAvBgNV
BAMTKEIwNDFFRjMyM0UxRTI2OUQ3MEQ5ODg1NDgzN0FGNDE4REE5N0ZCNUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWesiCiF90aX4VsgbGfE3JBXjK
cPqv9TPdjHn9zaAuM/NzdC5I3C6598YoXFlp+WYXLgO0KPp3faa7rHeGGuw6LUK0
caiMbv4OI4h9GCkL/vEZeHx+KdQLZ6ydNgtPQ5tZ98MhWcM5XGTUDxEciMWENjpX
cGBBHIBLbEB26CTf+9TpOLiV0uucgyA1KoeyfzZKidVS3LtUOORJ9kHtYxy052qW
y4bkNJYfBi3aSUzZDLylpOJfuo2Bln8lczWGtGQsHJ4OR8Voc8KzgOUbrcY5rshf
4YusqufKLY8mrBPaOtjM7XQ3qmg9BFzC7+h4KAj355+zhU7pvUTXZ6TQrZEfAgMB
AAGjggHlMIIB4TAdBgNVHQ4EFgQUsEHvMj4eJp1w2YhUg3r0GNqX+10wHwYDVR0j
BBgwFoAUHC0dvEglgyXCs1iYTGFkE3P5L8cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud
HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraS5jYy9yZXBvL25ldHdvcmtzZXJ2aWNl
cy8wLzFDMkQxREJDNDgyNTgzMjVDMkIzNTg5ODRDNjE2NDEzNzNGOTJGQzcuY3Js
MGQGCCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9IQzBkdkVnbGd5WENzMWlZVEdGa0UzUDVM
OGMuY2VyMG8GCCsGAQUFBwELBGMwYTBfBggrBgEFBQcwC4ZTcnN5bmM6Ly9ycGtp
LmNjL3JlcG8vbmV0d29ya3NlcnZpY2VzLzAvMUMyRDFEQkM0ODI1ODMyNUMyQjM1
ODk4NEM2MTY0MTM3M0Y5MkZDNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI
AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAIx+ptOkVOnco8zAlBSX47iS
wJ+qkV2vQDNJAX903t+5h4Ax+F5smXF2Fu0peWeI54t0QzAnVaDCtbCdVmtGuXVo
1Q6l+Vlano+w3NkUT0tgG8ts38pZ30WlIy7RyilW0Bc/9tn8KvcqoTwm92voNHFK
TUYFQGo74byFCslqRMjh9Z2EAb8EQtRjCC3VW3Op9r8hgOv7uYw7XskcMprWyIFG
AYM4Wt4+roIodmYIkhwmLDa3m/JvrU17qOLAwXe2Vg7cpnj4e6h/HXSkKsvvd1kc
0NRNCynA6TyaLlfW2AF/FeeVB+JrTumqy/lYGzMzXuXgL0N5wvR6Id6DCtBcnmU=
-----END CERTIFICATE-----
Generated at Wed Mar 25 21:21:44 2026 by rpki-client