$ rpki-client -vvf rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft File: 4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft (raw, json) Hash identifier: F9slH2/7u4iYgw2gRfQ8qfA2/oosmL71y94GJMVf/+A= Subject key identifier: 79:DD:88:F9:32:B7:FB:AF:2A:72:15:7F:5A:ED:50:8C:AD:ED:67:72 Authority key identifier: 4E:9A:6C:18:F3:49:B3:95:C3:1C:33:BB:7F:9B:9F:58:17:BD:E9:A8 Certificate issuer: /CN=4e9a6c18f349b395c31c33bb7f9b9f5817bde9a8 Certificate serial: 3AC1956A2410F15F54DE403353D9590C2815C9D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TppsGPNJs5XDHDO7f5ufWBe96ag.cer Subject info access: rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft Manifest number: 0126 Signing time: Sun 03 Aug 2025 20:12:11 +0000 Manifest this update: Sun 03 Aug 2025 20:07:11 +0000 Manifest next update: Mon 04 Aug 2025 23:08:11 +0000 Files and hashes: 1: 323030313a3637383a3565343a3a2f34382d3438203d3e203631393631.roa (hash: 9lXsRq2vH27QU6oONZHHcOI2KgKrR7I1qDb4jmPN0NI=) 2: 326130613a663034303a3a2f32392d3239203d3e203631393631.roa (hash: n9oD82N/Oc74KjefJWuXbdniXyTRuYdzVFV6P1uLFxM=) 3: 323030313a3637383a3565343a3a2f34382d3438203d3e20323034303132.roa (hash: aQtSJ+DrPdjI6tdPjH35DjDz8hbObLwmapnYguKW8IE=) 4: 3138352e3230342e31342e302f32332d3233203d3e20323033393339.roa (hash: 0iU1VE4oIBeR0g+kEvaxFQYjnK8h1fW0reMHFIiSAYk=) 5: 323030313a3637383a3565343a3a2f34382d3438203d3e20343031353531.roa (hash: 4UYrDw3R1HMApdgBpMB/GcyfbyVxIeygboeA0NGcRKA=) 6: 3138352e3230342e31322e302f32332d3233203d3e203631393631.roa (hash: 05KBv20ho05+9nNhARljl3KvN1w1xbUcP6YBmhidjZI=) 7: 4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.crl (hash: mPVYZPF8slMOKSDph5s7eAmacnn+LAXexEAHe0wXlsg=) Validation: OK Signature path: rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.crl rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft rsync://rpki.ripe.net/repository/DEFAULT/TppsGPNJs5XDHDO7f5ufWBe96ag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 04 Aug 2025 23:08:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:c1:95:6a:24:10:f1:5f:54:de:40:33:53:d9:59:0c:28:15:c9:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e9a6c18f349b395c31c33bb7f9b9f5817bde9a8 Validity Not Before: Aug 3 20:07:11 2025 GMT Not After : Aug 4 23:08:11 2025 GMT Subject: CN=79DD88F932B7FBAF2A72157F5AED508CADED6772 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e8:4e:4d:84:09:d5:40:32:f1:42:9c:8c:5c: 1e:38:0a:d2:5d:c6:ba:b1:88:16:74:7b:b9:a9:42: 77:50:e7:6e:70:15:c3:ce:cb:8d:ea:a1:f0:9f:85: 65:ea:be:d8:1d:41:98:ad:31:35:01:78:74:a6:aa: 8b:a7:52:db:72:72:a8:da:f3:47:ce:ed:a9:41:4d: 6a:8e:11:f1:0d:9b:9f:a7:46:3b:6b:b0:63:64:f6: 2f:5b:c1:a1:56:3e:4b:2a:b3:2d:04:a0:fd:3b:a9: 58:d0:a8:4b:a5:f9:9e:32:f3:f5:90:66:93:bd:e7: d5:2a:0c:27:6a:27:1a:c4:fe:fc:61:0a:ed:9c:12: 8e:74:c8:e2:28:e6:e5:2e:85:01:71:52:52:1c:ff: 92:b8:99:b1:83:fd:3c:d8:70:59:3f:0a:41:d1:af: 5b:bb:f5:db:02:38:8b:5d:ab:aa:ef:c8:8c:80:5a: 97:19:1c:a3:03:25:39:56:b8:76:1e:ab:55:06:55: 92:88:a4:cb:a2:55:cd:7d:49:a2:ef:92:2b:b9:88: da:0f:74:81:51:ef:76:63:28:bb:fb:12:46:29:f0: 19:56:fb:60:24:a7:21:6a:83:6a:fb:d7:91:43:cd: d9:b4:10:e4:5c:a0:9a:7d:af:9e:4f:a9:32:93:b5: a6:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:DD:88:F9:32:B7:FB:AF:2A:72:15:7F:5A:ED:50:8C:AD:ED:67:72 X509v3 Authority Key Identifier: keyid:4E:9A:6C:18:F3:49:B3:95:C3:1C:33:BB:7F:9B:9F:58:17:BD:E9:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TppsGPNJs5XDHDO7f5ufWBe96ag.cer Subject Information Access: Signed Object - URI:rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:bf:12:c1:07:ed:5e:c5:c6:54:0e:ac:50:f8:5c:b7:7d:9e: 25:84:72:ba:5e:fe:e5:e3:8b:a8:6a:3c:07:ec:ea:42:68:dd: fb:22:28:c4:10:4a:d1:55:c6:60:6f:db:f3:98:47:54:a4:e8: e5:f4:71:d9:b9:92:4e:9c:b6:90:43:e7:ca:85:b0:04:89:86: e3:96:37:40:d3:c8:92:14:06:54:52:73:84:b1:27:c8:a2:79: 75:cc:9b:0d:58:4c:9b:d1:3f:6f:b1:23:84:64:60:4c:96:4f: c1:11:42:f6:f7:55:1f:b6:8c:27:54:14:76:4e:1e:e4:ff:49: 0e:bc:32:d1:0b:49:68:3e:a8:80:5a:b3:8d:9e:08:d0:be:a3: bb:08:fd:6d:d9:1f:25:89:74:bf:d7:ed:85:18:93:43:57:04: 6f:50:bd:c3:86:5b:cd:61:76:53:cc:ca:c1:6a:7c:84:80:a5: d8:13:07:e0:76:22:41:e5:f5:c9:52:06:1d:f3:b3:63:be:53: 0e:70:6f:35:22:d3:b0:2c:36:58:9e:68:b5:3d:94:d5:25:c7: f3:c2:83:50:18:ee:64:40:10:f4:f2:52:50:fe:51:47:be:fd: cb:43:1b:93:7f:c7:ef:62:60:55:fc:7b:68:96:75:49:9a:59: b0:cf:ed:b9 -----BEGIN CERTIFICATE----- MIIE4TCCA8mgAwIBAgIUOsGVaiQQ8V9U3kAzU9lZDCgVydYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGU5YTZjMThmMzQ5YjM5NWMzMWMzM2JiN2Y5YjlmNTgx N2JkZTlhODAeFw0yNTA4MDMyMDA3MTFaFw0yNTA4MDQyMzA4MTFaMDMxMTAvBgNV BAMTKDc5REQ4OEY5MzJCN0ZCQUYyQTcyMTU3RjVBRUQ1MDhDQURFRDY3NzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC76E5NhAnVQDLxQpyMXB44CtJd xrqxiBZ0e7mpQndQ525wFcPOy43qofCfhWXqvtgdQZitMTUBeHSmqounUttycqja 80fO7alBTWqOEfENm5+nRjtrsGNk9i9bwaFWPksqsy0EoP07qVjQqEul+Z4y8/WQ ZpO959UqDCdqJxrE/vxhCu2cEo50yOIo5uUuhQFxUlIc/5K4mbGD/TzYcFk/CkHR r1u79dsCOItdq6rvyIyAWpcZHKMDJTlWuHYeq1UGVZKIpMuiVc19SaLvkiu5iNoP dIFR73ZjKLv7EkYp8BlW+2AkpyFqg2r715FDzdm0EORcoJp9r55PqTKTtaZhAgMB AAGjggHrMIIB5zAdBgNVHQ4EFgQUed2I+TK3+68qchV/Wu1QjK3tZ3IwHwYDVR0j BBgwFoAUTppsGPNJs5XDHDO7f5ufWBe96agwDgYDVR0PAQH/BAQDAgeAMGcGA1Ud HwRgMF4wXKBaoFiGVnJzeW5jOi8vcnBraS5uZWxsaWN1cy5uZXQvcmVwby9uZWxs aWN1cy8xLzRFOUE2QzE4RjM0OUIzOTVDMzFDMzNCQjdGOUI5RjU4MTdCREU5QTgu Y3JsMGQGCCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJp cGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9UcHBzR1BOSnM1WERIRE83ZjV1ZldC ZTk2YWcuY2VyMHIGCCsGAQUFBwELBGYwZDBiBggrBgEFBQcwC4ZWcnN5bmM6Ly9y cGtpLm5lbGxpY3VzLm5ldC9yZXBvL25lbGxpY3VzLzEvNEU5QTZDMThGMzQ5QjM5 NUMzMUMzM0JCN0Y5QjlGNTgxN0JERTlBOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsG AQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBADa/EsEH7V7FxlQO rFD4XLd9niWEcrpe/uXji6hqPAfs6kJo3fsiKMQQStFVxmBv2/OYR1Sk6OX0cdm5 kk6ctpBD58qFsASJhuOWN0DTyJIUBlRSc4SxJ8iieXXMmw1YTJvRP2+xI4RkYEyW T8ERQvb3VR+2jCdUFHZOHuT/SQ68MtELSWg+qIBas42eCNC+o7sI/W3ZHyWJdL/X 7YUYk0NXBG9QvcOGW81hdlPMysFqfISApdgTB+B2IkHl9clSBh3zs2O+Uw5wbzUi 07AsNlieaLU9lNUlx/PCg1AY7mRAEPTyUlD+UUe+/ctDG5N/x+9iYFX8e2iWdUma WbDP7bk= -----END CERTIFICATE-----Generated at Mon Aug 4 16:06:39 2025 by rpki-client