$ rpki-client -vvf rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft File: 4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft (raw, json) Hash identifier: qHfELtXC9vE7LaZmtwRcQWgzG5n6w61PwzVlGhZ+zj8= Subject key identifier: 46:05:A4:0D:E5:20:0F:26:0E:8F:52:26:6A:B1:32:BD:0B:0D:16:1A Authority key identifier: 4E:9A:6C:18:F3:49:B3:95:C3:1C:33:BB:7F:9B:9F:58:17:BD:E9:A8 Certificate issuer: /CN=4e9a6c18f349b395c31c33bb7f9b9f5817bde9a8 Certificate serial: 20E3DD38C693DC2402F32A2BA0BB364D84F74D59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TppsGPNJs5XDHDO7f5ufWBe96ag.cer Subject info access: rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft Manifest number: 024B Signing time: Sun 01 Mar 2026 12:04:37 +0000 Manifest this update: Sun 01 Mar 2026 11:59:37 +0000 Manifest next update: Mon 02 Mar 2026 15:11:37 +0000 Files and hashes: 1: 323030313a3637383a3565343a3a2f34382d3438203d3e20323034303132.roa (hash: fxsQm1q2pmZhASyGNHE1h8SCDsGuI34aljSVVL+enkQ=) 2: 323030313a3637383a3565343a3a2f34382d3438203d3e20343031353531.roa (hash: XAuPoyWgqk/2VSGKnl/UxA3UxeQIFy53PwlvcLnn9Pc=) 3: 3138352e3230342e31342e302f32332d3234203d3e20323033393339.roa (hash: JQwkT1z8uimpbN2Jt8jPn0T3yATPeIOHsQosuzjWZdg=) 4: 3138352e3230342e31322e302f32332d3234203d3e203631393631.roa (hash: d3/k+6QX5UseLeqUWTi+l6cD1s9fc/SSlpG2TVD7AKo=) 5: 323030313a3637383a3565343a3a2f34382d3438203d3e203631393631.roa (hash: nbAVFkQiqft9sHl9Hh+TY61io/BSlt5tgmWs0gncRuY=) 6: 326130613a663034303a3a2f32392d3239203d3e203631393631.roa (hash: q7WGQJ75bRybHehoGPB487LwawVW780GrlEzs+BTdx4=) 7: 4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.crl (hash: VLkvIH1pCIdFiMekiOSKXAdnHVNZ8jn0/tH0lFKsQJI=) Validation: OK Signature path: rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.crl rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft rsync://rpki.ripe.net/repository/DEFAULT/TppsGPNJs5XDHDO7f5ufWBe96ag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 06:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:e3:dd:38:c6:93:dc:24:02:f3:2a:2b:a0:bb:36:4d:84:f7:4d:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e9a6c18f349b395c31c33bb7f9b9f5817bde9a8 Validity Not Before: Mar 1 11:59:37 2026 GMT Not After : Mar 2 15:11:37 2026 GMT Subject: CN=4605A40DE5200F260E8F52266AB132BD0B0D161A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:6d:12:0b:a1:c0:81:13:92:24:71:25:c3:1a: a2:92:f0:6e:8f:de:65:63:45:ef:ef:75:5c:61:9d: 27:44:6d:aa:a5:cd:2d:ef:0c:d1:0f:dd:2b:cd:46: 80:9d:8c:5a:ab:ba:3b:fb:d6:30:e2:1f:11:a1:d1: 1a:12:f1:93:26:0c:7b:47:eb:4d:d7:5a:35:b8:7d: 7f:f2:5f:7d:c4:ab:b6:e7:d7:78:60:c6:f6:4d:89: ff:96:76:39:2a:a0:6d:d1:ee:7a:64:cc:13:ed:44: a2:89:8a:61:6a:90:ea:0e:a6:ca:e2:9f:a8:62:63: 48:22:38:9b:97:6e:7e:d8:4c:f9:9c:5a:bc:74:42: 22:79:ee:f7:da:3e:e8:d4:a6:77:5f:2e:2b:6b:57: 1a:9f:85:00:c4:5f:c6:47:56:75:fe:6c:75:e6:37: 12:40:b8:93:b5:5f:08:ac:65:9f:b2:db:f0:e3:6c: e4:52:e4:eb:bd:90:b3:80:fd:dd:d7:7d:2c:3a:f7: 9f:cc:33:71:36:30:c8:37:2b:4b:3e:bf:b3:7a:22: 4f:20:89:70:1f:6b:96:c9:34:66:85:13:67:58:f4: 3b:72:04:9e:0c:5e:d3:02:7e:b8:13:6f:75:38:80: 57:61:48:32:60:4e:56:e8:30:ab:c0:83:90:59:df: aa:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:05:A4:0D:E5:20:0F:26:0E:8F:52:26:6A:B1:32:BD:0B:0D:16:1A X509v3 Authority Key Identifier: keyid:4E:9A:6C:18:F3:49:B3:95:C3:1C:33:BB:7F:9B:9F:58:17:BD:E9:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TppsGPNJs5XDHDO7f5ufWBe96ag.cer Subject Information Access: Signed Object - URI:rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:cd:ad:53:aa:f1:36:22:e9:5f:d7:9b:e5:e3:a6:68:d3:aa: 61:b2:a9:cb:42:0a:79:8a:b5:4e:0b:c7:45:39:45:ab:f9:62: 62:41:91:4f:3c:00:18:23:2d:9c:d9:eb:c1:23:5e:3e:e9:06: 98:cc:33:72:27:ff:dc:b0:63:ea:22:8e:93:1d:db:b6:33:8c: 0e:c2:b5:37:b1:a6:2b:17:6e:be:4e:55:ad:17:11:a5:55:fb: cc:95:06:c5:d3:a4:af:7b:37:8a:d2:20:e5:d1:03:eb:b3:f3: 04:65:3d:ad:12:82:73:00:c1:1a:b2:b2:88:47:2d:4b:2e:a0: d8:e6:a7:50:79:5e:ba:b0:fa:4f:7f:84:99:ac:23:da:1e:1b: f5:45:1a:25:fc:2f:9b:73:58:07:c0:6c:df:25:44:7c:94:b7: 9a:b6:aa:ec:b6:9b:3c:e4:48:4b:ae:c0:ed:e9:ce:96:cb:f3: 3e:af:a9:00:da:12:43:97:27:bb:37:db:e3:21:7e:f0:c2:82: f9:66:69:fd:69:7b:6e:da:e6:13:85:8c:82:3d:08:0b:8c:a0: 5e:cd:e0:58:e2:e4:37:44:76:f8:87:a1:b5:93:65:46:02:cc: cc:a8:fe:63:e4:8e:e7:30:7a:1f:6f:c8:5b:ad:72:c6:60:fb: 0d:8b:d3:80 -----BEGIN CERTIFICATE----- MIIE4TCCA8mgAwIBAgIUIOPdOMaT3CQC8yoroLs2TYT3TVkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGU5YTZjMThmMzQ5YjM5NWMzMWMzM2JiN2Y5YjlmNTgx N2JkZTlhODAeFw0yNjAzMDExMTU5MzdaFw0yNjAzMDIxNTExMzdaMDMxMTAvBgNV BAMTKDQ2MDVBNDBERTUyMDBGMjYwRThGNTIyNjZBQjEzMkJEMEIwRDE2MUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMbRILocCBE5IkcSXDGqKS8G6P 3mVjRe/vdVxhnSdEbaqlzS3vDNEP3SvNRoCdjFqrujv71jDiHxGh0RoS8ZMmDHtH 603XWjW4fX/yX33Eq7bn13hgxvZNif+WdjkqoG3R7npkzBPtRKKJimFqkOoOpsri n6hiY0giOJuXbn7YTPmcWrx0QiJ57vfaPujUpndfLitrVxqfhQDEX8ZHVnX+bHXm NxJAuJO1XwisZZ+y2/DjbORS5Ou9kLOA/d3XfSw695/MM3E2MMg3K0s+v7N6Ik8g iXAfa5bJNGaFE2dY9DtyBJ4MXtMCfrgTb3U4gFdhSDJgTlboMKvAg5BZ36p7AgMB AAGjggHrMIIB5zAdBgNVHQ4EFgQURgWkDeUgDyYOj1ImarEyvQsNFhowHwYDVR0j BBgwFoAUTppsGPNJs5XDHDO7f5ufWBe96agwDgYDVR0PAQH/BAQDAgeAMGcGA1Ud HwRgMF4wXKBaoFiGVnJzeW5jOi8vcnBraS5uZWxsaWN1cy5uZXQvcmVwby9uZWxs aWN1cy8xLzRFOUE2QzE4RjM0OUIzOTVDMzFDMzNCQjdGOUI5RjU4MTdCREU5QTgu Y3JsMGQGCCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJp cGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9UcHBzR1BOSnM1WERIRE83ZjV1ZldC ZTk2YWcuY2VyMHIGCCsGAQUFBwELBGYwZDBiBggrBgEFBQcwC4ZWcnN5bmM6Ly9y cGtpLm5lbGxpY3VzLm5ldC9yZXBvL25lbGxpY3VzLzEvNEU5QTZDMThGMzQ5QjM5 NUMzMUMzM0JCN0Y5QjlGNTgxN0JERTlBOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsG AQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAIDNrVOq8TYi6V/X m+XjpmjTqmGyqctCCnmKtU4Lx0U5Rav5YmJBkU88ABgjLZzZ68EjXj7pBpjMM3In /9ywY+oijpMd27YzjA7CtTexpisXbr5OVa0XEaVV+8yVBsXTpK97N4rSIOXRA+uz 8wRlPa0SgnMAwRqysohHLUsuoNjmp1B5Xrqw+k9/hJmsI9oeG/VFGiX8L5tzWAfA bN8lRHyUt5q2quy2mzzkSEuuwO3pzpbL8z6vqQDaEkOXJ7s32+MhfvDCgvlmaf1p e27a5hOFjII9CAuMoF7N4Fji5DdEdviHobWTZUYCzMyo/mPkjucweh9vyFutcsZg +w2L04A= -----END CERTIFICATE-----Generated at Sun Mar 1 16:36:27 2026 by rpki-client