Manifest

$ rpki-client -vvf rpki.nellicus.net/repo/nellicus/3/DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.mft
File:                     DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.mft (raw, json)
Hash identifier:          2/yu7SuANgm1QWqKwxPlx8fBn4q2H5MZTMoYgafJ+L4=
Subject key identifier:   D7:A7:F9:8B:4B:D4:40:41:93:3D:A6:0E:1E:21:3D:64:59:1F:ED:01
Authority key identifier: DD:17:5B:D4:FB:7F:1D:C2:36:DB:13:CD:2B:42:A6:45:90:AF:EC:5C
Certificate issuer:       /CN=7f9c05420b55c3ede703521d14d813758898042260f078b24d
Certificate serial:       40AD013645CABB9CF22F35164CC62A0B6FA77822
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864/7f9c05420b55c3ede703521d14d813758898042260f078b24d.cer
Subject info access:      rsync://rpki.nellicus.net/repo/nellicus/3/DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.mft
Manifest number:          0148
Signing time:             Tue 28 Jul 2026 02:59:32 +0000
Manifest this update:     Tue 28 Jul 2026 02:54:32 +0000
Manifest next update:     Wed 29 Jul 2026 04:43:32 +0000
Files and hashes:         1: DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.crl (hash: heu+mLmBPihf48RyERD6vFQX3SwY+pIQfzy+uGYLZ/k=)
                          2: 3139382e3230322e3139352e302f32342d3234203d3e2037303130.roa (hash: ijdjhUA/W8GrEHjWCkpsTOyiMWFsOJ2kKaXbr1wTlms=)
                          3: 323630323a663438623a3a2f33362d3438203d3e2037303130.roa (hash: Xb+aPiHNR5Ln915Gz5HbUVinqXFh6cSM0aLUbQZXqZY=)
                          4: 32332e3135312e3133322e302f32342d3234203d3e2037303130.roa (hash: tctQKM2NsEf1NWEg9XqqGOTDGObWKmiIUoceijkBKhI=)
Validation:               OK
Signature path:           rsync://rpki.nellicus.net/repo/nellicus/3/DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.crl
                          rsync://rpki.nellicus.net/repo/nellicus/3/DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864/7f9c05420b55c3ede703521d14d813758898042260f078b24d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864/f0e3e332-2e13-47b7-be3c-bd2f40db6864.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864/f0e3e332-2e13-47b7-be3c-bd2f40db6864.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 Jul 2026 04:43:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:ad:01:36:45:ca:bb:9c:f2:2f:35:16:4c:c6:2a:0b:6f:a7:78:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f9c05420b55c3ede703521d14d813758898042260f078b24d
        Validity
            Not Before: Jul 28 02:54:32 2026 GMT
            Not After : Jul 29 04:43:32 2026 GMT
        Subject: CN=D7A7F98B4BD44041933DA60E1E213D64591FED01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:3e:75:61:b5:d6:5b:cc:5c:17:24:2a:b6:a8:
                    c4:24:43:46:8c:52:18:4e:f1:48:1b:a0:14:a4:a2:
                    64:88:fb:21:89:80:85:ae:e5:22:03:e4:9b:1e:c8:
                    b7:fd:f3:cc:ee:ae:b3:ce:cb:94:d6:0c:f5:1a:60:
                    b1:64:d2:73:a5:4f:de:2d:40:4c:dd:18:d5:dd:2b:
                    9e:ed:8b:42:ac:ad:fd:0f:08:ff:28:57:4f:cf:36:
                    f0:80:a5:73:44:30:dd:de:ba:fe:07:cc:de:66:a9:
                    88:03:77:3f:1f:94:37:5b:fe:12:3f:8f:01:01:a6:
                    4a:54:12:77:00:ac:60:11:08:ab:32:f5:16:c8:e9:
                    93:d7:79:04:f7:db:c9:66:40:70:76:d3:49:03:e4:
                    44:a3:bb:2c:35:26:30:b2:9a:fa:57:8b:9a:1f:e3:
                    c5:b6:9f:74:e5:97:7b:01:29:92:f5:b9:22:dc:c7:
                    92:df:29:c2:f9:18:de:1f:7e:a8:b2:af:8a:9b:4e:
                    9a:70:eb:31:f5:de:d9:b8:0d:b2:1c:02:d3:81:0b:
                    71:3a:b4:13:44:23:62:60:e1:8b:26:4c:10:d3:1d:
                    91:4c:75:4c:bc:e3:20:53:8d:45:05:5e:e5:df:33:
                    37:b6:c7:7d:7f:3d:db:70:b9:56:49:7d:5e:15:8b:
                    78:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:A7:F9:8B:4B:D4:40:41:93:3D:A6:0E:1E:21:3D:64:59:1F:ED:01
            X509v3 Authority Key Identifier:
                keyid:DD:17:5B:D4:FB:7F:1D:C2:36:DB:13:CD:2B:42:A6:45:90:AF:EC:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.nellicus.net/repo/nellicus/3/DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864/7f9c05420b55c3ede703521d14d813758898042260f078b24d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.nellicus.net/repo/nellicus/3/DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:74:25:4b:49:fc:39:2b:0b:26:90:52:ae:37:8d:c7:79:b1:
         d3:15:66:b2:fa:a6:ed:ed:81:19:38:8f:0d:7e:5f:84:4b:df:
         1b:f4:87:e7:59:09:84:b5:ca:b3:8a:da:05:95:18:a7:77:14:
         f2:f8:f2:d4:82:73:80:bf:f4:b6:e6:0d:e5:48:21:34:7a:3c:
         91:6d:30:09:e5:c5:1a:24:d6:97:42:af:32:cd:89:bc:80:08:
         f9:2f:2d:26:0a:fe:30:e8:69:b8:70:f6:b1:2c:1a:bb:9a:7c:
         24:7a:db:ba:c5:ff:ec:ef:cf:09:92:93:e7:61:87:b2:14:57:
         c7:91:c3:e3:06:3a:d4:6d:59:23:10:32:be:68:e0:e6:3c:59:
         25:cd:8d:8e:a2:86:be:e9:4c:b7:5f:75:a7:3a:02:58:2a:04:
         b0:48:7f:fc:b1:af:08:f4:57:c0:ab:04:29:42:da:df:6a:c3:
         eb:99:55:86:fe:6f:53:7e:85:7e:09:83:f2:5c:16:42:4a:36:
         dc:9d:66:43:4c:60:41:de:fb:69:c5:54:26:58:9c:50:f0:5a:
         cd:62:b8:55:25:05:39:b9:a5:ae:92:8c:35:fc:49:20:13:ee:
         f6:fe:6b:dc:b3:07:d7:4a:ba:ea:72:1c:fa:8e:eb:14:0e:b6:
         eb:f6:a0:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:51:08 2026 by rpki-client