Manifest

$ rpki-client -vvvf rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft
File:                     4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft (raw, json)
Hash identifier:          j5EPGyQp9U9eM6QXtDs6Lj6fRUSinrs/SlrScXVmXC0=
Subject key identifier:   B1:EB:55:AA:A7:B9:15:9D:2A:2A:D5:9B:3B:F4:D4:D6:D9:44:D2:A0
Authority key identifier: 4E:9A:6C:18:F3:49:B3:95:C3:1C:33:BB:7F:9B:9F:58:17:BD:E9:A8
Certificate issuer:       /CN=4e9a6c18f349b395c31c33bb7f9b9f5817bde9a8
Certificate serial:       3C2158BC812AD57BA3AFA050770B8E0BDDF1958D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TppsGPNJs5XDHDO7f5ufWBe96ag.cer
Subject info access:      rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft
Manifest number:          0371
Signing time:             Sat 19 Sep 2026 21:27:49 +0000
Manifest this update:     Sat 19 Sep 2026 21:22:49 +0000
Manifest next update:     Sun 20 Sep 2026 23:00:49 +0000
Files and hashes:         1: 4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.crl (hash: 5eMlMOz+ZPjncek7nAzvgtap6WhqH/N/5JXsstqeRIo=)
                          2: 3138352e3230342e31342e302f32332d3234203d3e20323033393339.roa (hash: JQwkT1z8uimpbN2Jt8jPn0T3yATPeIOHsQosuzjWZdg=)
                          3: 323030313a3637383a3565343a3a2f34382d3438203d3e2037303130.roa (hash: NgMsiuiWolklNu0dHOm4jeyy4AZSxHgK7gSzz1LYcr4=)
                          4: 3138352e3230342e31322e302f32332d3234203d3e2037303130.roa (hash: jYTgcOfbk9bjq+6wsdfbqqj91vyiJUyqR79FO1mbmrc=)
                          5: 326130613a663034303a3a2f32392d3239203d3e2037303130.roa (hash: axOAY/addUVO+GjS/O49vvKsNcuSOeEME1u8NtFgMAw=)
Validation:               OK
Signature path:           rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.crl
                          rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TppsGPNJs5XDHDO7f5ufWBe96ag.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Sep 2026 23:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:21:58:bc:81:2a:d5:7b:a3:af:a0:50:77:0b:8e:0b:dd:f1:95:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e9a6c18f349b395c31c33bb7f9b9f5817bde9a8
        Validity
            Not Before: Sep 19 21:22:49 2026 GMT
            Not After : Sep 20 23:00:49 2026 GMT
        Subject: CN=B1EB55AAA7B9159D2A2AD59B3BF4D4D6D944D2A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:cb:99:88:58:5a:94:d8:54:21:01:da:92:2a:
                    84:96:f3:fb:57:78:a8:ba:30:ac:02:da:31:38:9e:
                    40:03:08:0b:76:88:10:37:b1:6c:8b:3b:92:b2:c2:
                    7d:aa:2b:d6:bc:bb:e6:a5:e4:b5:53:6e:77:f8:c4:
                    87:6e:de:e4:fd:64:13:72:fb:78:cd:2d:d9:fa:1f:
                    26:24:b5:48:cf:3f:11:43:f2:7f:44:7b:03:5d:6f:
                    25:dc:26:36:5f:69:38:4d:18:00:ff:1b:18:b6:fe:
                    bd:f4:82:5d:e3:45:34:75:c0:3e:f8:5e:c9:88:ac:
                    cd:26:a1:2f:13:59:ba:0b:d3:44:69:2c:0d:c7:f2:
                    78:52:bb:ba:b9:d2:c0:8c:8a:d2:20:ad:fe:de:3c:
                    96:62:bf:de:e5:2f:56:4e:9d:d6:7e:a8:69:aa:a1:
                    c3:bf:8c:1e:a5:9b:13:42:3c:24:61:0e:47:52:63:
                    4c:82:6c:06:f8:bb:97:b4:17:f0:41:c5:22:69:f6:
                    1c:ab:a4:86:73:39:5e:6b:57:93:45:2b:02:99:2d:
                    11:d2:d7:32:f0:38:32:c4:5d:6d:0b:33:ac:de:29:
                    bc:ec:41:1f:23:61:0d:e3:00:fa:71:a3:8e:4c:97:
                    cd:b7:ed:5a:95:77:bf:e9:0c:00:f3:c2:ef:8a:49:
                    05:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:EB:55:AA:A7:B9:15:9D:2A:2A:D5:9B:3B:F4:D4:D6:D9:44:D2:A0
            X509v3 Authority Key Identifier:
                keyid:4E:9A:6C:18:F3:49:B3:95:C3:1C:33:BB:7F:9B:9F:58:17:BD:E9:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TppsGPNJs5XDHDO7f5ufWBe96ag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:d9:0f:76:85:d0:8c:a5:40:98:a8:dd:34:38:ea:1a:60:af:
         e6:35:2a:75:07:8d:60:f5:1a:88:7f:a1:a4:24:81:63:d5:a0:
         43:46:1a:6b:74:7b:28:16:cb:60:45:9f:01:a9:f2:eb:47:f4:
         08:6a:22:61:de:e6:73:c4:64:3c:45:89:4f:2d:86:87:53:f6:
         5f:58:69:2d:4f:77:ca:ba:d3:aa:50:84:45:00:ad:c4:45:a8:
         ff:56:5f:75:8a:d8:07:5a:68:c8:3f:f0:5b:59:8b:b6:a6:bf:
         fb:8f:1e:19:16:9b:0c:d2:5a:9c:4c:c2:44:e2:c0:0f:bd:0a:
         70:6f:cb:d6:fb:5a:b5:b5:8f:61:ba:1a:d0:10:1b:ea:1a:8d:
         72:88:a6:3e:e6:aa:61:cb:00:c2:ac:21:cb:48:d3:ae:a8:99:
         c4:2b:fb:6a:f5:61:64:2c:23:bc:b4:51:96:3f:50:ed:9c:b4:
         d1:96:5f:1d:a8:a3:e4:58:69:c3:f8:05:50:50:13:cd:26:60:
         35:87:8d:f8:f7:7f:60:8d:57:c0:45:29:e9:c9:c3:24:04:2b:
         ad:f5:d5:eb:64:80:92:22:05:37:c4:e5:7a:8a:99:52:5f:4d:
         99:0e:05:71:35:13:24:97:03:7a:8a:d9:6d:4e:bc:95:b0:43:
         6f:18:69:df
-----BEGIN CERTIFICATE-----
MIIE4TCCA8mgAwIBAgIUPCFYvIEq1Xujr6BQdwuOC93xlY0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGU5YTZjMThmMzQ5YjM5NWMzMWMzM2JiN2Y5YjlmNTgx
N2JkZTlhODAeFw0yNjA5MTkyMTIyNDlaFw0yNjA5MjAyMzAwNDlaMDMxMTAvBgNV
BAMTKEIxRUI1NUFBQTdCOTE1OUQyQTJBRDU5QjNCRjRENEQ2RDk0NEQyQTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBy5mIWFqU2FQhAdqSKoSW8/tX
eKi6MKwC2jE4nkADCAt2iBA3sWyLO5Kywn2qK9a8u+al5LVTbnf4xIdu3uT9ZBNy
+3jNLdn6HyYktUjPPxFD8n9EewNdbyXcJjZfaThNGAD/Gxi2/r30gl3jRTR1wD74
XsmIrM0moS8TWboL00RpLA3H8nhSu7q50sCMitIgrf7ePJZiv97lL1ZOndZ+qGmq
ocO/jB6lmxNCPCRhDkdSY0yCbAb4u5e0F/BBxSJp9hyrpIZzOV5rV5NFKwKZLRHS
1zLwODLEXW0LM6zeKbzsQR8jYQ3jAPpxo45Ml8237VqVd7/pDADzwu+KSQVfAgMB
AAGjggHrMIIB5zAdBgNVHQ4EFgQUsetVqqe5FZ0qKtWbO/TU1tlE0qAwHwYDVR0j
BBgwFoAUTppsGPNJs5XDHDO7f5ufWBe96agwDgYDVR0PAQH/BAQDAgeAMGcGA1Ud
HwRgMF4wXKBaoFiGVnJzeW5jOi8vcnBraS5uZWxsaWN1cy5uZXQvcmVwby9uZWxs
aWN1cy8xLzRFOUE2QzE4RjM0OUIzOTVDMzFDMzNCQjdGOUI5RjU4MTdCREU5QTgu
Y3JsMGQGCCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJp
cGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9UcHBzR1BOSnM1WERIRE83ZjV1ZldC
ZTk2YWcuY2VyMHIGCCsGAQUFBwELBGYwZDBiBggrBgEFBQcwC4ZWcnN5bmM6Ly9y
cGtpLm5lbGxpY3VzLm5ldC9yZXBvL25lbGxpY3VzLzEvNEU5QTZDMThGMzQ5QjM5
NUMzMUMzM0JCN0Y5QjlGNTgxN0JERTlBOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsG
AQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAHnZD3aF0IylQJio
3TQ46hpgr+Y1KnUHjWD1Goh/oaQkgWPVoENGGmt0eygWy2BFnwGp8utH9AhqImHe
5nPEZDxFiU8thodT9l9YaS1Pd8q606pQhEUArcRFqP9WX3WK2AdaaMg/8FtZi7am
v/uPHhkWmwzSWpxMwkTiwA+9CnBvy9b7WrW1j2G6GtAQG+oajXKIpj7mqmHLAMKs
IctI066omcQr+2r1YWQsI7y0UZY/UO2ctNGWXx2oo+RYacP4BVBQE80mYDWHjfj3
f2CNV8BFKenJwyQEK6311etkgJIiBTfE5XqKmVJfTZkOBXE1EySXA3qK2W1OvJWw
Q28Yad8=
-----END CERTIFICATE-----
Generated at Sun Sep 20 14:50:56 2026 by rpki-client