Manifest

$ rpki-client -vvf rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft
File:                     4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft (raw, json)
Hash identifier:          pPhZzqsDXl/2+18owkpqjakcvDTKknhq3vRIT3j5LN4=
Subject key identifier:   8A:BF:E0:5D:A7:BF:66:84:B3:8C:96:5D:4E:01:11:6B:22:24:CF:B5
Authority key identifier: 4E:9A:6C:18:F3:49:B3:95:C3:1C:33:BB:7F:9B:9F:58:17:BD:E9:A8
Certificate issuer:       /CN=4e9a6c18f349b395c31c33bb7f9b9f5817bde9a8
Certificate serial:       3A8B78482CB3464D695A68B419A80433134039B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TppsGPNJs5XDHDO7f5ufWBe96ag.cer
Subject info access:      rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft
Manifest number:          0329
Signing time:             Tue 28 Jul 2026 01:34:32 +0000
Manifest this update:     Tue 28 Jul 2026 01:29:32 +0000
Manifest next update:     Wed 29 Jul 2026 03:10:32 +0000
Files and hashes:         1: 4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.crl (hash: Wc1o5OBFSXakA/uEk85g4wiS6D2BBl57n9D/Z7hE/Go=)
                          2: 3138352e3230342e31322e302f32332d3234203d3e2037303130.roa (hash: jYTgcOfbk9bjq+6wsdfbqqj91vyiJUyqR79FO1mbmrc=)
                          3: 323030313a3637383a3565343a3a2f34382d3438203d3e2037303130.roa (hash: NgMsiuiWolklNu0dHOm4jeyy4AZSxHgK7gSzz1LYcr4=)
                          4: 3138352e3230342e31342e302f32332d3234203d3e20323033393339.roa (hash: JQwkT1z8uimpbN2Jt8jPn0T3yATPeIOHsQosuzjWZdg=)
                          5: 326130613a663034303a3a2f32392d3239203d3e2037303130.roa (hash: axOAY/addUVO+GjS/O49vvKsNcuSOeEME1u8NtFgMAw=)
Validation:               OK
Signature path:           rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.crl
                          rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TppsGPNJs5XDHDO7f5ufWBe96ag.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 03:10:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:8b:78:48:2c:b3:46:4d:69:5a:68:b4:19:a8:04:33:13:40:39:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e9a6c18f349b395c31c33bb7f9b9f5817bde9a8
        Validity
            Not Before: Jul 28 01:29:32 2026 GMT
            Not After : Jul 29 03:10:32 2026 GMT
        Subject: CN=8ABFE05DA7BF6684B38C965D4E01116B2224CFB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:49:10:03:c1:a4:aa:7e:d7:9a:07:1d:20:8f:
                    2b:95:a9:bb:7b:d2:f3:70:54:92:e5:d9:53:2f:49:
                    06:7f:6b:b9:41:4e:b6:12:1c:ee:5d:bf:98:a8:21:
                    33:30:15:0e:d0:6d:93:5d:87:d8:56:82:f4:f0:07:
                    43:1e:aa:84:0b:13:0e:6c:05:54:51:39:d2:f7:07:
                    9e:a9:e7:b9:bf:7d:83:aa:52:98:66:03:b1:a0:b4:
                    3d:91:23:bf:b8:ac:73:29:36:c4:d0:54:9e:4f:81:
                    ee:0b:48:b6:2f:13:5b:14:b4:c9:d4:10:0d:88:49:
                    b2:02:11:31:73:d8:ac:4b:49:20:91:64:85:f9:0a:
                    e0:57:67:86:dd:f3:85:0a:b9:bb:2f:c0:18:2f:ce:
                    b1:39:26:65:2a:35:97:ae:bf:8a:dd:b5:b2:b3:4f:
                    5a:ba:73:61:61:f1:59:5a:40:65:0d:15:12:3d:43:
                    5e:47:45:b2:3d:20:aa:f8:10:5d:14:91:42:bc:bf:
                    c8:bc:42:f2:e7:47:98:2e:f7:03:63:e3:e1:e8:25:
                    d4:14:e5:fc:a6:f5:2f:e4:81:ae:80:c9:6a:c8:b1:
                    42:63:10:eb:06:d8:72:05:ad:76:cd:f9:72:24:ab:
                    97:8a:5f:f4:35:55:2d:d1:b8:0d:5a:55:ce:ff:6e:
                    4b:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:BF:E0:5D:A7:BF:66:84:B3:8C:96:5D:4E:01:11:6B:22:24:CF:B5
            X509v3 Authority Key Identifier:
                keyid:4E:9A:6C:18:F3:49:B3:95:C3:1C:33:BB:7F:9B:9F:58:17:BD:E9:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TppsGPNJs5XDHDO7f5ufWBe96ag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:af:8e:af:c2:32:51:af:d1:09:a6:09:8e:f9:18:c7:b2:49:
         4b:54:56:9d:60:bf:64:85:f7:7f:3e:7e:aa:d7:64:65:a0:3a:
         40:fb:62:95:b6:d1:c3:4f:23:84:66:8c:59:75:59:4c:e2:0c:
         ef:5f:32:0f:7d:0d:6a:e4:cd:c6:21:10:ca:76:0b:8b:42:5f:
         20:0f:7f:87:65:35:6f:6d:f2:fe:33:43:77:c8:79:96:d4:9a:
         34:15:95:c1:16:31:05:9e:65:82:25:0f:ca:50:bb:3c:49:ee:
         29:a3:82:75:5d:56:71:a6:83:d0:44:26:d8:bc:2d:e4:06:fb:
         2b:11:ea:28:11:8b:6f:6b:51:2f:db:28:90:39:92:4e:f3:98:
         6d:5b:3a:c1:65:bd:b1:19:37:cc:e5:d9:47:2a:f2:5b:67:4d:
         e3:92:a5:ec:72:2d:ae:81:59:f3:8e:ce:b1:cc:36:58:5c:35:
         f5:94:c0:03:69:bf:09:ba:91:69:f1:4d:e4:4f:5d:fe:b5:c7:
         89:e0:ab:f5:52:7d:72:b3:d2:30:8e:9f:af:dc:39:ec:cb:9f:
         26:86:60:2a:14:e9:00:a3:7c:27:82:8e:6f:9a:80:46:41:a8:
         a5:1b:63:ec:b4:b0:25:61:e0:e0:90:54:10:6a:25:00:43:19:
         fe:6d:d1:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:51:07 2026 by rpki-client