Manifest

$ rpki-client -vvvf rpki.nellicus.net/repo/nellicus/3/DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.mft
File:                     DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.mft (raw, json)
Hash identifier:          vozCsRX34HnTt9H6hR0FHsfyr8wCDDInx2vApLd/XZ8=
Subject key identifier:   97:FB:4E:40:36:27:6A:AE:1E:13:BE:F8:66:69:EA:4D:D4:91:66:11
Authority key identifier: DD:17:5B:D4:FB:7F:1D:C2:36:DB:13:CD:2B:42:A6:45:90:AF:EC:5C
Certificate issuer:       /CN=7f9c05420b55c3ede703521d14d813758898042260f078b24d
Certificate serial:       049B12ABFDF3BC59168F37E92016A403FD711EA3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864/7f9c05420b55c3ede703521d14d813758898042260f078b24d.cer
Subject info access:      rsync://rpki.nellicus.net/repo/nellicus/3/DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.mft
Manifest number:          0191
Signing time:             Sun 20 Sep 2026 06:32:49 +0000
Manifest this update:     Sun 20 Sep 2026 06:27:49 +0000
Manifest next update:     Mon 21 Sep 2026 07:47:49 +0000
Files and hashes:         1: DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.crl (hash: yOLL8EvDKtPSGnkIQoAIgPyEc+Z97I2OOt15w9/G3JQ=)
                          2: 3139382e3230322e3139352e302f32342d3234203d3e2037303130.roa (hash: ijdjhUA/W8GrEHjWCkpsTOyiMWFsOJ2kKaXbr1wTlms=)
                          3: 32332e3135312e3133322e302f32342d3234203d3e2037303130.roa (hash: tctQKM2NsEf1NWEg9XqqGOTDGObWKmiIUoceijkBKhI=)
                          4: 323630323a663438623a3a2f33362d3438203d3e2037303130.roa (hash: Xb+aPiHNR5Ln915Gz5HbUVinqXFh6cSM0aLUbQZXqZY=)
Validation:               OK
Signature path:           rsync://rpki.nellicus.net/repo/nellicus/3/DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.crl
                          rsync://rpki.nellicus.net/repo/nellicus/3/DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864/7f9c05420b55c3ede703521d14d813758898042260f078b24d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864/f0e3e332-2e13-47b7-be3c-bd2f40db6864.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864/f0e3e332-2e13-47b7-be3c-bd2f40db6864.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 07:47:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:9b:12:ab:fd:f3:bc:59:16:8f:37:e9:20:16:a4:03:fd:71:1e:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f9c05420b55c3ede703521d14d813758898042260f078b24d
        Validity
            Not Before: Sep 20 06:27:49 2026 GMT
            Not After : Sep 21 07:47:49 2026 GMT
        Subject: CN=97FB4E4036276AAE1E13BEF86669EA4DD4916611
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:8f:e4:d5:71:8b:d1:c6:53:42:43:82:92:b6:
                    6c:15:d5:34:99:29:7c:21:84:b8:0c:e4:0e:94:d7:
                    a0:ab:bc:0c:39:a8:96:78:29:bf:09:89:7f:c5:9a:
                    ad:37:cf:04:5c:51:f1:2a:97:e4:2d:dc:54:81:a7:
                    d6:1e:6a:7d:58:49:20:be:b9:93:08:9d:d3:48:a7:
                    f9:aa:9f:e9:05:3c:a9:6c:57:d7:38:9d:af:e9:e2:
                    92:5f:d2:0a:4e:e8:a1:51:21:51:cf:79:83:ad:5e:
                    b8:97:4f:48:3e:d1:55:79:0c:ae:6b:d7:60:5f:bf:
                    c8:d8:89:98:af:ba:0f:44:f0:d6:9e:e5:a1:39:05:
                    f0:73:bd:f7:9c:0e:fc:b5:7d:db:4c:da:68:ad:c7:
                    fd:c2:cf:40:1b:6c:b8:a4:4b:a0:1c:67:57:d7:e6:
                    67:41:e2:c0:45:55:13:b7:ad:9e:d3:91:f1:74:d1:
                    03:c1:b2:c2:89:95:79:83:c0:e7:1f:bf:d5:45:3a:
                    5b:27:cc:0c:44:18:57:4d:67:ed:20:71:ac:fb:8d:
                    7c:4c:c2:b4:f3:d9:c3:f2:e2:22:9f:c2:6a:37:6a:
                    7d:bf:54:f1:23:39:a2:9c:5b:ec:d7:9d:38:b7:dd:
                    87:e8:da:50:e7:7b:9e:92:fb:e2:d9:d0:39:98:6c:
                    64:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:FB:4E:40:36:27:6A:AE:1E:13:BE:F8:66:69:EA:4D:D4:91:66:11
            X509v3 Authority Key Identifier:
                keyid:DD:17:5B:D4:FB:7F:1D:C2:36:DB:13:CD:2B:42:A6:45:90:AF:EC:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.nellicus.net/repo/nellicus/3/DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864/7f9c05420b55c3ede703521d14d813758898042260f078b24d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.nellicus.net/repo/nellicus/3/DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:fc:ed:72:b6:07:b3:a1:07:ad:28:2f:95:20:0f:c5:3a:ec:
         40:cb:bd:30:3d:5d:22:46:d2:00:4f:01:72:b0:00:b9:f3:d8:
         25:13:1b:88:95:b2:fe:e0:5e:8d:c0:f6:69:dc:cf:ff:81:d4:
         c8:2e:14:47:82:6c:e1:63:f0:5e:64:c5:92:42:34:6c:39:c9:
         9f:3f:dd:80:00:72:9a:5b:33:4f:b1:8c:9a:dc:3c:8d:7d:79:
         d4:36:a6:ff:da:72:5b:00:04:e5:eb:b0:80:3c:ea:68:39:83:
         32:7e:5e:72:ce:22:4d:6b:12:21:1c:68:76:5e:25:81:92:d5:
         62:6a:75:46:3c:f7:a7:f5:e6:49:88:f3:e9:70:81:4c:62:f8:
         a9:80:82:be:26:15:57:90:4f:63:0e:81:21:b4:f7:e5:09:50:
         0a:ce:94:d8:a5:a6:8f:5e:8a:b2:0b:d8:65:24:e0:9e:39:5f:
         17:47:f4:60:d4:b8:38:67:7d:d6:ba:a2:48:c3:db:90:67:4f:
         ab:72:e7:47:1f:91:e9:95:7f:b2:fb:7e:e4:41:65:dd:27:b7:
         2b:99:13:24:2f:0f:95:b5:13:16:5e:22:cf:df:59:dc:4f:bd:
         07:4e:a0:93:d7:47:da:ab:15:a2:2f:f6:51:c6:57:48:10:e5:
         13:48:85:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 16:34:25 2026 by rpki-client