Manifest

$ rpki-client -vvf rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.mft
File:                     20C2297BC67D21C3254384D3BD886506A06E30A2.mft (raw, json)
Hash identifier:          VhW8xA68p/sXDvQ183lOR5HKPxq2DZlz5GkefbzOUWw=
Subject key identifier:   7D:9B:F6:35:AF:29:D7:21:FD:99:9A:76:88:D0:4D:F0:D6:34:40:7F
Authority key identifier: 20:C2:29:7B:C6:7D:21:C3:25:43:84:D3:BD:88:65:06:A0:6E:30:A2
Certificate issuer:       /CN=63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3
Certificate serial:       24BDC818AB972D814A27D8C97A8C3457110964E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3.cer
Subject info access:      rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.mft
Manifest number:          01A5
Signing time:             Wed 05 Nov 2025 11:41:10 +0000
Manifest this update:     Wed 05 Nov 2025 11:36:10 +0000
Manifest next update:     Thu 06 Nov 2025 13:17:10 +0000
Files and hashes:         1: 32332e3133312e3137322e302f32342d3234203d3e203631393631.roa (hash: sX4clBllsnOe26N+axHOkcAsIye3vArF/kg1Z4Off60=)
                          2: 3134322e3234382e39302e302f32332d3234203d3e203631393631.roa (hash: SEfJJW0oCHWn/xdi75zWLDupC/cjkqW/OUbAiUPdXMo=)
                          3: 323630323a663735323a3a2f33362d3336203d3e203631393631.roa (hash: LJae5qX98q1IoVhcF3MovFKodtof25tEPl+Vd+qKFHU=)
                          4: 20C2297BC67D21C3254384D3BD886506A06E30A2.crl (hash: OqFuESES7w4rHmtcLpo633BNDwV5OPGlIfIavsA/jbE=)
Validation:               OK
Signature path:           rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.crl
                          rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/0a080168-c146-41c6-9367-391cd429b856.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/0a080168-c146-41c6-9367-391cd429b856.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 13:17:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:bd:c8:18:ab:97:2d:81:4a:27:d8:c9:7a:8c:34:57:11:09:64:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3
        Validity
            Not Before: Nov  5 11:36:10 2025 GMT
            Not After : Nov  6 13:17:10 2025 GMT
        Subject: CN=7D9BF635AF29D721FD999A7688D04DF0D634407F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:bd:99:12:8b:6c:40:cd:ec:b9:24:92:60:b1:
                    c2:54:2a:e3:98:5f:40:bf:8c:bc:99:93:af:6a:de:
                    0a:60:06:79:97:c2:70:3b:78:17:58:ef:85:0e:a8:
                    ff:9f:88:0f:65:78:6f:32:15:bf:34:41:a7:ec:d3:
                    e9:40:84:db:e3:3c:52:2d:d5:67:80:06:97:e1:2f:
                    73:ed:ae:94:f9:2e:e0:1d:31:dc:10:3e:7d:70:e7:
                    83:d1:58:f9:01:94:0d:34:68:70:31:ed:ce:93:4b:
                    28:0e:c7:89:fa:de:dc:44:17:4f:33:f3:25:f7:1c:
                    5f:eb:8b:81:67:8f:8f:3f:4e:cc:a0:0f:ae:1d:ef:
                    ef:e7:36:b2:af:b1:8a:8a:76:d4:00:8a:ef:57:81:
                    da:79:ae:f5:46:9b:b8:b6:27:ad:87:89:eb:f4:56:
                    2f:5b:34:56:64:1d:b9:23:08:17:00:39:ee:c7:15:
                    0d:d0:1a:c5:6d:a1:65:98:44:07:4f:30:d2:77:be:
                    e6:db:5e:e0:95:0f:e9:22:ed:2b:dc:48:22:08:45:
                    5a:f0:c6:4a:f5:21:80:6d:0e:6b:ae:d3:ab:a9:8e:
                    e4:10:c0:55:2b:7d:a0:c7:3f:f7:7a:e8:b2:54:36:
                    41:b9:1d:bb:bd:e9:54:39:8d:47:f1:0f:fe:d7:06:
                    ca:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:9B:F6:35:AF:29:D7:21:FD:99:9A:76:88:D0:4D:F0:D6:34:40:7F
            X509v3 Authority Key Identifier:
                keyid:20:C2:29:7B:C6:7D:21:C3:25:43:84:D3:BD:88:65:06:A0:6E:30:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:75:cc:47:53:3d:55:ce:12:67:85:cb:31:c6:a6:71:75:5e:
         a6:fa:a2:8e:b7:59:b8:ed:b1:94:03:73:6c:7c:68:09:b2:7b:
         0e:d3:ee:30:7b:d7:8c:d7:ad:da:37:fb:7a:64:ae:aa:2b:6c:
         25:dc:cd:24:d4:3f:76:da:e3:29:ed:eb:43:92:42:cc:7f:1e:
         3e:71:e8:90:9c:a7:c7:f6:c5:4d:e7:63:c5:8b:f4:54:d7:4a:
         38:3a:3c:a5:c5:40:5a:55:58:96:c0:28:d9:0b:9a:dd:09:5e:
         15:ea:05:34:9a:ed:e1:13:6e:6c:4a:36:5a:25:12:8c:21:e9:
         01:2e:1b:24:d8:85:6f:2c:54:24:26:aa:c2:f7:7b:6d:a8:8c:
         9c:18:37:43:28:3c:1f:b0:f0:28:c2:15:19:2b:4c:56:45:f3:
         1e:32:0d:ea:87:e4:ea:dc:54:3c:4b:f0:75:9e:aa:2d:42:d7:
         70:c6:aa:10:e6:a9:3c:23:3c:13:ce:71:d2:63:b9:db:f2:4a:
         e6:0c:55:3f:8a:a5:87:cd:04:c7:e9:d9:c7:5e:67:30:a2:11:
         19:3d:aa:42:58:ba:d2:3b:2d:23:20:cb:d7:f1:46:32:33:6b:
         be:d9:ae:5d:5b:9f:5f:13:80:7c:f2:1b:ab:f7:18:87:23:26:
         b3:de:6f:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:45:18 2025 by rpki-client