Manifest

$ rpki-client -vvf rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.mft
File:                     20C2297BC67D21C3254384D3BD886506A06E30A2.mft (raw, json)
Hash identifier:          XKUi/g+5WT7fXT0D6bHPUVbzQVe/TuqQH9AdCOD7VO8=
Subject key identifier:   6B:D0:D2:CC:A9:85:7E:B5:CE:D2:BF:64:46:C6:6A:9F:F9:37:60:C3
Authority key identifier: 20:C2:29:7B:C6:7D:21:C3:25:43:84:D3:BD:88:65:06:A0:6E:30:A2
Certificate issuer:       /CN=63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3
Certificate serial:       116D609D0377297D4006A7427C4FF81AD4F352B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3.cer
Subject info access:      rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.mft
Manifest number:          02D8
Signing time:             Fri 12 Jun 2026 21:33:04 +0000
Manifest this update:     Fri 12 Jun 2026 21:28:04 +0000
Manifest next update:     Sat 13 Jun 2026 23:31:04 +0000
Files and hashes:         1: 20C2297BC67D21C3254384D3BD886506A06E30A2.crl (hash: x/g8OVuGRvbK69c8HMaHvay29cjYrbfqwfu46mAbU0s=)
                          2: 323630323a663735323a3a2f33362d3336203d3e203631393631.roa (hash: CqNp7ek3u5kbCBWfN53/CnZ4zIsOoWuXEyXMjQabM7w=)
                          3: 323630323a666461643a3a2f34302d3438203d3e203631393631.roa (hash: pLWuN2bUHqMXgcevJT1AmoYm7sc9azuOkUaBTt9vVNg=)
                          4: 3134322e3234382e39302e302f32332d3234203d3e203631393631.roa (hash: SEfJJW0oCHWn/xdi75zWLDupC/cjkqW/OUbAiUPdXMo=)
                          5: 32332e3133312e3137322e302f32342d3234203d3e203631393631.roa (hash: ipFemzkztsboDmqpCJAhUhmIJUiu758VxunW+cYOxO0=)
                          6: AS61961.asa (hash: xB62lymjtKQrG3onCUo1WoI7naRlPCnglhV9lM7+Szk=)
Validation:               OK
Signature path:           rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.crl
                          rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/0a080168-c146-41c6-9367-391cd429b856.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/0a080168-c146-41c6-9367-391cd429b856.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 23:31:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:6d:60:9d:03:77:29:7d:40:06:a7:42:7c:4f:f8:1a:d4:f3:52:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3
        Validity
            Not Before: Jun 12 21:28:04 2026 GMT
            Not After : Jun 13 23:31:04 2026 GMT
        Subject: CN=6BD0D2CCA9857EB5CED2BF6446C66A9FF93760C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:e4:10:d7:c9:a8:4b:f9:f9:32:87:b6:8d:94:
                    47:c9:88:68:e3:7b:7a:1f:0d:a1:37:0d:63:cc:11:
                    b1:03:b2:f2:ec:c6:3c:fe:88:49:58:f7:4e:c5:98:
                    5f:62:f8:ab:af:86:46:35:7e:be:0e:b3:9a:24:a9:
                    e4:7d:f6:5b:f7:be:ec:72:dd:b1:b0:80:0a:8c:3b:
                    f2:2e:fc:ab:be:72:8a:ed:31:7d:44:79:16:5a:dc:
                    c2:b9:83:2d:fe:4f:e7:66:32:dd:ad:66:bd:4e:f2:
                    db:cc:f2:60:d2:74:bb:4a:11:45:0e:54:e6:cb:7c:
                    9e:e6:55:3c:21:8c:07:8d:28:66:9f:5a:46:ea:76:
                    88:f7:71:fd:b3:6f:c8:35:e3:35:09:f4:a4:08:46:
                    33:04:85:6b:9e:37:03:fa:65:c2:2a:4a:a7:ed:a0:
                    0b:4f:fc:c5:07:d1:c0:70:3c:03:40:32:b4:b9:9b:
                    9f:26:a3:24:79:7d:eb:59:a6:98:22:4d:06:65:c0:
                    b4:d5:0a:94:c9:ab:6f:7c:ae:8a:b4:d2:99:e4:e1:
                    74:8f:31:95:75:88:dc:91:6c:cc:8a:23:79:56:8e:
                    2c:8f:d7:85:6f:31:1d:ca:61:18:e0:87:c1:dd:6c:
                    3d:3d:f5:4b:e3:a7:33:2c:f7:f7:e3:f9:11:6b:b8:
                    85:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:D0:D2:CC:A9:85:7E:B5:CE:D2:BF:64:46:C6:6A:9F:F9:37:60:C3
            X509v3 Authority Key Identifier:
                keyid:20:C2:29:7B:C6:7D:21:C3:25:43:84:D3:BD:88:65:06:A0:6E:30:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:dc:34:74:eb:4f:08:79:d3:97:6f:6a:4c:2f:ad:d8:54:7a:
         9f:db:87:2d:d3:27:70:93:fc:d2:a7:44:a2:99:3a:c1:88:b5:
         4a:fa:24:fb:63:31:21:98:72:77:bc:32:ad:4a:94:55:23:f1:
         e6:de:56:3a:1f:7f:9f:3f:87:d3:91:f1:df:a2:9e:4a:3f:d3:
         92:9d:40:3d:9b:70:a8:4f:24:ad:73:cb:fb:17:94:6e:11:90:
         1c:80:42:5f:e0:72:69:38:0b:4b:fb:f7:2d:73:14:18:63:af:
         e2:d9:17:04:b1:84:49:a5:5e:a3:a4:03:e2:5d:30:e1:51:16:
         30:1a:00:eb:59:07:2c:6a:79:17:d5:77:02:93:e6:a2:9d:fe:
         c8:d1:49:ab:bb:67:1f:97:71:4d:bd:a6:62:38:22:3c:fc:37:
         aa:bc:08:d4:b3:02:15:ce:41:cc:59:87:f3:57:c8:51:22:d0:
         a4:b2:71:be:98:dd:95:b7:33:7a:08:71:ca:0c:a3:0b:f7:53:
         9d:14:85:2a:b5:c1:5d:27:55:e4:6b:a7:b7:38:9f:fe:5d:81:
         05:52:66:38:4c:68:49:2b:99:7d:fb:8e:e0:d9:ea:fd:d4:3d:
         cb:b4:3d:c4:1c:fd:0f:47:6f:14:94:87:5a:cd:f8:ad:32:07:
         c9:fd:3d:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:51:04 2026 by rpki-client