Manifest

$ rpki-client -vvvf rpki.nellicus.net/repo/nellicus/3/DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.mft
File:                     DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.mft (raw, json)
Hash identifier:          Dxfob/8ymAoRRrNP4WnJZbhXBbLuZ1Br/G2T/zoDEqQ=
Subject key identifier:   C8:8D:E2:82:61:93:BD:57:AC:1D:F3:1C:E7:B5:EB:86:A1:84:5D:CF
Authority key identifier: DD:17:5B:D4:FB:7F:1D:C2:36:DB:13:CD:2B:42:A6:45:90:AF:EC:5C
Certificate issuer:       /CN=7f9c05420b55c3ede703521d14d813758898042260f078b24d
Certificate serial:       0E90F5E962BA0EB5329CD03C896BFC3B5C374DF3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864/7f9c05420b55c3ede703521d14d813758898042260f078b24d.cer
Subject info access:      rsync://rpki.nellicus.net/repo/nellicus/3/DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.mft
Manifest number:          01D1
Signing time:             Fri 06 Nov 2026 21:33:38 +0000
Manifest this update:     Fri 06 Nov 2026 21:28:38 +0000
Manifest next update:     Sat 07 Nov 2026 23:18:38 +0000
Files and hashes:         1: 32332e3135312e3133322e302f32342d3234203d3e2037303130.roa (hash: tctQKM2NsEf1NWEg9XqqGOTDGObWKmiIUoceijkBKhI=)
                          2: 3139382e3230322e3139352e302f32342d3234203d3e2037303130.roa (hash: ijdjhUA/W8GrEHjWCkpsTOyiMWFsOJ2kKaXbr1wTlms=)
                          3: DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.crl (hash: maYSx417mtwwVbsiVWsJXYWCJ4dlJ80rsm2LGEt4G30=)
                          4: 323630323a663438623a3a2f33362d3438203d3e2037303130.roa (hash: Xb+aPiHNR5Ln915Gz5HbUVinqXFh6cSM0aLUbQZXqZY=)
Validation:               OK
Signature path:           rsync://rpki.nellicus.net/repo/nellicus/3/DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.crl
                          rsync://rpki.nellicus.net/repo/nellicus/3/DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864/7f9c05420b55c3ede703521d14d813758898042260f078b24d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864/f0e3e332-2e13-47b7-be3c-bd2f40db6864.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864/f0e3e332-2e13-47b7-be3c-bd2f40db6864.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Nov 2026 23:18:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:90:f5:e9:62:ba:0e:b5:32:9c:d0:3c:89:6b:fc:3b:5c:37:4d:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f9c05420b55c3ede703521d14d813758898042260f078b24d
        Validity
            Not Before: Nov  6 21:28:38 2026 GMT
            Not After : Nov  7 23:18:38 2026 GMT
        Subject: CN=C88DE2826193BD57AC1DF31CE7B5EB86A1845DCF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:5d:b4:a4:17:a7:64:d5:48:ce:89:ab:89:da:
                    fa:34:91:31:16:28:7d:ee:61:ae:72:4a:31:cf:85:
                    90:35:0c:19:44:4c:3a:72:f1:00:33:49:af:00:81:
                    c8:6c:a2:8c:79:c4:d3:ee:f7:8b:28:6a:fb:aa:fa:
                    75:0f:56:01:5c:10:a2:4b:85:10:ef:0b:b6:2f:2f:
                    c4:b2:33:95:c6:af:8a:27:94:59:e9:61:d4:b0:83:
                    4e:00:db:b8:e9:f1:14:5b:37:61:55:ee:9a:09:dc:
                    55:cd:32:a3:b4:48:23:9b:d7:8b:69:78:55:9d:96:
                    22:bb:b2:4c:38:ca:5b:3b:14:51:25:a0:35:6d:e6:
                    e9:ee:f3:5f:38:b2:28:3a:12:a3:26:46:31:3c:8e:
                    4e:0e:03:b6:92:e2:1d:b2:a3:d3:66:03:82:35:d6:
                    7a:4a:c1:d0:3b:19:87:3d:77:aa:65:96:2c:62:94:
                    93:44:b2:d2:bb:c8:df:c9:c2:9f:1b:63:d9:d2:c3:
                    45:f9:32:44:b9:3f:9f:cc:95:bb:46:f7:4f:51:da:
                    e2:27:65:06:9c:53:8c:10:33:68:b6:e2:b8:35:bf:
                    1a:93:dc:c3:66:91:d6:c6:f3:70:67:c2:ef:bc:1d:
                    93:e1:f6:89:d5:07:83:47:ad:fc:c1:a6:57:31:05:
                    1e:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:8D:E2:82:61:93:BD:57:AC:1D:F3:1C:E7:B5:EB:86:A1:84:5D:CF
            X509v3 Authority Key Identifier:
                keyid:DD:17:5B:D4:FB:7F:1D:C2:36:DB:13:CD:2B:42:A6:45:90:AF:EC:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.nellicus.net/repo/nellicus/3/DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864/7f9c05420b55c3ede703521d14d813758898042260f078b24d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.nellicus.net/repo/nellicus/3/DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:17:b2:a1:72:df:dc:43:8d:98:d1:96:56:d0:cb:36:ed:6c:
         71:e8:20:3a:8d:4c:2a:f8:e2:0e:ee:69:83:b7:a1:ac:52:1c:
         fe:4f:d2:e2:ed:cf:49:83:82:6e:11:63:df:7b:0e:6e:77:20:
         50:34:fc:8e:85:de:67:44:a2:ac:8c:de:2c:ef:fa:17:b0:e7:
         76:56:6d:08:d4:38:6b:a2:47:ec:a6:5b:fa:c8:c6:b8:86:25:
         b5:d8:f1:85:44:b0:4c:96:6a:5c:1d:c6:96:af:6e:4b:f4:86:
         18:4c:91:40:50:67:f7:ac:40:b9:54:eb:21:f3:70:71:ee:f4:
         ab:4c:ed:89:90:cb:1a:f5:03:b4:a9:2b:6f:dd:87:0e:43:10:
         9b:0f:ed:d6:bb:0c:6a:93:32:bc:c6:3f:b9:a9:06:d7:0a:e4:
         4d:46:1e:36:5d:ce:c7:0c:8d:ce:df:6b:19:5c:a8:b9:ec:7c:
         e4:c7:45:4b:fe:f8:35:79:4e:0b:1f:e7:61:49:57:7c:98:95:
         ed:43:92:91:92:4f:9c:a2:a3:4d:09:d6:47:73:ec:37:d1:a7:
         b6:46:77:a0:bb:5e:9d:70:9b:83:b3:5c:1a:d1:6c:15:94:8f:
         2e:93:1c:55:8f:a2:ac:a9:51:54:39:e1:e4:b0:f4:7b:e9:ad:
         5c:55:77:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 7 18:21:50 2026 by rpki-client