$ rpki-client -vvf rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft File: 4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft (raw, json) Hash identifier: mFN7rgkdE65hCSh7Dsy1v7KnYt+/w55j4I74d//zsa4= Subject key identifier: 65:19:7A:4F:5A:36:EE:C5:47:99:E9:26:0B:3E:69:F4:A1:21:20:2C Authority key identifier: 4E:9A:6C:18:F3:49:B3:95:C3:1C:33:BB:7F:9B:9F:58:17:BD:E9:A8 Certificate issuer: /CN=4e9a6c18f349b395c31c33bb7f9b9f5817bde9a8 Certificate serial: 1B878C46665ECD23874CB07332399059194384A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TppsGPNJs5XDHDO7f5ufWBe96ag.cer Subject info access: rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft Manifest number: 02D7 Signing time: Sat 13 Jun 2026 09:29:40 +0000 Manifest this update: Sat 13 Jun 2026 09:24:40 +0000 Manifest next update: Sun 14 Jun 2026 09:33:40 +0000 Files and hashes: 1: 3138352e3230342e31342e302f32332d3234203d3e20323033393339.roa (hash: JQwkT1z8uimpbN2Jt8jPn0T3yATPeIOHsQosuzjWZdg=) 2: 323030313a3637383a3565343a3a2f34382d3438203d3e20343031353531.roa (hash: XAuPoyWgqk/2VSGKnl/UxA3UxeQIFy53PwlvcLnn9Pc=) 3: 323030313a3637383a3565343a3a2f34382d3438203d3e20323034303132.roa (hash: fxsQm1q2pmZhASyGNHE1h8SCDsGuI34aljSVVL+enkQ=) 4: 4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.crl (hash: twu5sKUolPnf6FwPhBwnvnLc70EP/9AZvvYRV6AOXwY=) 5: 323030313a3637383a3565343a3a2f34382d3438203d3e203631393631.roa (hash: nbAVFkQiqft9sHl9Hh+TY61io/BSlt5tgmWs0gncRuY=) 6: 326130613a663034303a3a2f32392d3239203d3e203631393631.roa (hash: q7WGQJ75bRybHehoGPB487LwawVW780GrlEzs+BTdx4=) 7: 3138352e3230342e31322e302f32332d3234203d3e203631393631.roa (hash: d3/k+6QX5UseLeqUWTi+l6cD1s9fc/SSlpG2TVD7AKo=) Validation: OK Signature path: rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.crl rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft rsync://rpki.ripe.net/repository/DEFAULT/TppsGPNJs5XDHDO7f5ufWBe96ag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 08:43:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:87:8c:46:66:5e:cd:23:87:4c:b0:73:32:39:90:59:19:43:84:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e9a6c18f349b395c31c33bb7f9b9f5817bde9a8 Validity Not Before: Jun 13 09:24:40 2026 GMT Not After : Jun 14 09:33:40 2026 GMT Subject: CN=65197A4F5A36EEC54799E9260B3E69F4A121202C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:72:e5:22:5c:ef:b8:8d:2c:5e:0d:a0:7a:90: 1f:44:e6:d6:65:38:9f:fc:30:9c:e4:46:85:0b:49: 93:c6:60:2f:20:cd:d2:e6:19:98:8d:9a:81:4a:2f: 1c:66:5c:ff:43:88:d4:c2:f0:d2:63:6f:1f:90:56: cd:a1:d4:e0:86:5d:0d:54:b8:95:9a:75:11:83:2c: 8d:e5:35:18:53:8d:fe:45:b1:be:ae:f6:3b:0f:db: ae:04:b6:8e:f7:f3:f6:8a:dc:20:df:a9:54:3d:5f: 46:7f:fc:bb:0b:b2:30:92:d2:ef:1d:ca:8f:c5:0b: da:a0:64:6d:4a:d2:b9:45:3d:a4:0a:41:52:cf:52: 7b:29:e7:59:6c:33:d2:91:74:db:a3:87:73:0b:a5: 9d:e1:e9:7f:95:0a:bd:ce:84:ad:12:41:24:ba:a3: cd:c8:23:28:69:05:39:17:53:a6:4d:28:c4:3c:67: 1d:32:45:92:cb:de:f5:6b:b2:6a:53:3e:3f:37:f0: 40:a6:46:a8:59:84:1c:5f:ce:2a:ed:b6:9d:31:33: 4e:97:f3:cc:2f:58:28:de:9d:48:7c:15:e8:db:e2: eb:77:75:b2:72:80:6b:3c:38:18:19:9c:34:91:4b: 84:69:94:62:79:0e:01:ac:72:01:db:48:8c:98:bd: d6:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:19:7A:4F:5A:36:EE:C5:47:99:E9:26:0B:3E:69:F4:A1:21:20:2C X509v3 Authority Key Identifier: keyid:4E:9A:6C:18:F3:49:B3:95:C3:1C:33:BB:7F:9B:9F:58:17:BD:E9:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TppsGPNJs5XDHDO7f5ufWBe96ag.cer Subject Information Access: Signed Object - URI:rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:96:3a:41:17:4b:da:95:2a:12:ad:55:33:7b:13:14:d7:7d: 86:e4:7a:58:11:30:2a:7a:f9:b8:80:45:e4:0e:a4:06:9c:b7: 9f:63:67:b1:a6:1b:63:04:54:96:a5:4e:6d:24:11:4a:2b:9b: bb:e2:87:42:07:0d:18:d8:52:07:a6:4c:78:17:3d:b4:eb:00: 83:c0:cc:23:7d:52:49:33:2e:4a:a4:8c:d7:ef:d6:1f:29:05: a5:5a:a7:97:d0:30:a6:93:87:65:bb:d5:3b:e8:9d:a1:1d:0b: f0:2b:84:a4:69:a2:fe:f3:d1:1c:06:0f:76:59:76:1e:47:90: ca:53:bb:a0:e7:5e:2c:74:b7:cd:af:f4:8a:51:e9:f9:6f:08: b3:20:55:07:b3:f8:b8:61:52:ff:e0:f2:a3:25:27:0b:af:8d: 68:87:7e:6c:bd:37:7a:69:82:e9:38:1d:1b:fa:c7:88:e6:ab: bf:29:40:38:d6:e7:1e:51:e6:1c:3a:a3:39:bd:cb:2b:1f:40: a8:4e:84:a8:03:33:71:de:e2:77:f1:27:5d:e5:01:2b:8c:e5: 2c:ac:d1:b4:82:20:66:69:57:18:7a:78:ef:85:31:cc:59:af: 49:e9:c5:b5:55:9f:3a:bb:20:e6:2b:62:f5:57:0b:5c:0f:43: 0b:33:6d:25 -----BEGIN CERTIFICATE----- MIIE4TCCA8mgAwIBAgIUG4eMRmZezSOHTLBzMjmQWRlDhKkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGU5YTZjMThmMzQ5YjM5NWMzMWMzM2JiN2Y5YjlmNTgx N2JkZTlhODAeFw0yNjA2MTMwOTI0NDBaFw0yNjA2MTQwOTMzNDBaMDMxMTAvBgNV BAMTKDY1MTk3QTRGNUEzNkVFQzU0Nzk5RTkyNjBCM0U2OUY0QTEyMTIwMkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDScuUiXO+4jSxeDaB6kB9E5tZl OJ/8MJzkRoULSZPGYC8gzdLmGZiNmoFKLxxmXP9DiNTC8NJjbx+QVs2h1OCGXQ1U uJWadRGDLI3lNRhTjf5Fsb6u9jsP264Eto738/aK3CDfqVQ9X0Z//LsLsjCS0u8d yo/FC9qgZG1K0rlFPaQKQVLPUnsp51lsM9KRdNujh3MLpZ3h6X+VCr3OhK0SQSS6 o83IIyhpBTkXU6ZNKMQ8Zx0yRZLL3vVrsmpTPj838ECmRqhZhBxfzirttp0xM06X 88wvWCjenUh8Fejb4ut3dbJygGs8OBgZnDSRS4RplGJ5DgGscgHbSIyYvdZjAgMB AAGjggHrMIIB5zAdBgNVHQ4EFgQUZRl6T1o27sVHmekmCz5p9KEhICwwHwYDVR0j BBgwFoAUTppsGPNJs5XDHDO7f5ufWBe96agwDgYDVR0PAQH/BAQDAgeAMGcGA1Ud HwRgMF4wXKBaoFiGVnJzeW5jOi8vcnBraS5uZWxsaWN1cy5uZXQvcmVwby9uZWxs aWN1cy8xLzRFOUE2QzE4RjM0OUIzOTVDMzFDMzNCQjdGOUI5RjU4MTdCREU5QTgu Y3JsMGQGCCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJp cGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9UcHBzR1BOSnM1WERIRE83ZjV1ZldC ZTk2YWcuY2VyMHIGCCsGAQUFBwELBGYwZDBiBggrBgEFBQcwC4ZWcnN5bmM6Ly9y cGtpLm5lbGxpY3VzLm5ldC9yZXBvL25lbGxpY3VzLzEvNEU5QTZDMThGMzQ5QjM5 NUMzMUMzM0JCN0Y5QjlGNTgxN0JERTlBOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsG AQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBACaWOkEXS9qVKhKt VTN7ExTXfYbkelgRMCp6+biAReQOpAact59jZ7GmG2MEVJalTm0kEUorm7vih0IH DRjYUgemTHgXPbTrAIPAzCN9UkkzLkqkjNfv1h8pBaVap5fQMKaTh2W71TvonaEd C/ArhKRpov7z0RwGD3ZZdh5HkMpTu6DnXix0t82v9IpR6flvCLMgVQez+LhhUv/g 8qMlJwuvjWiHfmy9N3ppguk4HRv6x4jmq78pQDjW5x5R5hw6ozm9yysfQKhOhKgD M3He4nfxJ13lASuM5Sys0bSCIGZpVxh6eO+FMcxZr0npxbVVnzq7IOYrYvVXC1wP QwszbSU= -----END CERTIFICATE-----Generated at Sat Jun 13 13:01:34 2026 by rpki-client