Manifest

$ rpki-client -vvf rpki.nellicus.net/repo/nellicus/3/DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.mft
File:                     DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.mft (raw, json)
Hash identifier:          h3p6fIqVlk+oZ0MExM3fm5BybNzsMsmhmzCMef58piE=
Subject key identifier:   16:AC:63:94:AC:76:6A:72:46:E1:A5:1F:9A:51:48:44:D9:19:67:BD
Authority key identifier: DD:17:5B:D4:FB:7F:1D:C2:36:DB:13:CD:2B:42:A6:45:90:AF:EC:5C
Certificate issuer:       /CN=7f9c05420b55c3ede703521d14d813758898042260f078b24d
Certificate serial:       7AF08CA12D237641A056FCBE5F940ED4CA403CBC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864/7f9c05420b55c3ede703521d14d813758898042260f078b24d.cer
Subject info access:      rsync://rpki.nellicus.net/repo/nellicus/3/DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.mft
Manifest number:          F6
Signing time:             Sat 13 Jun 2026 05:28:39 +0000
Manifest this update:     Sat 13 Jun 2026 05:23:39 +0000
Manifest next update:     Sun 14 Jun 2026 05:46:39 +0000
Files and hashes:         1: 323630323a663438623a3a2f33362d3438203d3e203631393631.roa (hash: tF1TO5OePBirSA2MxPH7uXQfaSSl0HRibFaeUgy/1P4=)
                          2: DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.crl (hash: RWvJoHGP7hKxDrk9OksISVF4tEQX8iCWTMgxxMRZr48=)
                          3: 32332e3135312e3133322e302f32342d3234203d3e203631393631.roa (hash: v8No20hTrarlcWsm3WcVuQdnMeOU9NeFzlFcrLYahz4=)
Validation:               OK
Signature path:           rsync://rpki.nellicus.net/repo/nellicus/3/DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.crl
                          rsync://rpki.nellicus.net/repo/nellicus/3/DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864/7f9c05420b55c3ede703521d14d813758898042260f078b24d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864/f0e3e332-2e13-47b7-be3c-bd2f40db6864.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864/f0e3e332-2e13-47b7-be3c-bd2f40db6864.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 05:46:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:f0:8c:a1:2d:23:76:41:a0:56:fc:be:5f:94:0e:d4:ca:40:3c:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f9c05420b55c3ede703521d14d813758898042260f078b24d
        Validity
            Not Before: Jun 13 05:23:39 2026 GMT
            Not After : Jun 14 05:46:39 2026 GMT
        Subject: CN=16AC6394AC766A7246E1A51F9A514844D91967BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:51:e3:4e:98:a8:33:69:91:65:34:39:f7:0e:
                    37:8d:39:15:6e:01:57:e5:12:80:c0:85:16:9a:ce:
                    f5:5b:08:4a:32:00:47:50:7f:71:42:cb:66:fd:1b:
                    e5:27:c7:75:c1:9c:c4:c5:1f:f3:51:ad:28:8f:af:
                    35:62:af:c1:d6:59:10:11:4b:3e:20:31:e7:fb:66:
                    6f:fa:f4:7c:b2:c3:84:1f:79:43:ea:43:fe:38:5a:
                    9c:25:9d:f0:ac:3a:0e:52:73:32:d7:50:8f:e1:00:
                    83:4c:ae:90:7e:73:e4:39:4e:ae:3d:88:31:91:1e:
                    7f:32:73:b3:51:f3:1f:89:f2:b6:71:5d:92:84:4f:
                    82:8d:e0:b5:ce:9d:e9:27:f8:2c:06:66:d1:36:9c:
                    ae:19:82:28:91:ef:60:db:42:9f:48:df:a2:a8:6e:
                    eb:e0:de:c3:f0:d0:ee:9a:c6:9e:eb:6b:80:48:01:
                    dc:16:92:bb:0e:47:e5:de:5a:1b:9a:39:cd:1d:a8:
                    ee:e0:51:f8:17:42:95:5f:5e:4a:71:c6:78:81:cf:
                    01:ea:c9:ed:e4:73:cf:cc:55:7b:6d:45:b9:bd:7e:
                    5f:7a:80:9a:62:aa:fa:43:28:64:11:5f:c8:73:b8:
                    54:f8:b7:ba:98:e2:15:13:4b:7c:77:e6:ad:5b:e3:
                    32:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:AC:63:94:AC:76:6A:72:46:E1:A5:1F:9A:51:48:44:D9:19:67:BD
            X509v3 Authority Key Identifier:
                keyid:DD:17:5B:D4:FB:7F:1D:C2:36:DB:13:CD:2B:42:A6:45:90:AF:EC:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.nellicus.net/repo/nellicus/3/DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864/7f9c05420b55c3ede703521d14d813758898042260f078b24d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.nellicus.net/repo/nellicus/3/DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:1b:1c:ee:c3:03:70:5b:23:b4:91:81:48:86:a9:c0:b6:e4:
         3c:15:d2:10:a3:22:70:57:f1:65:44:df:d9:b0:de:50:3c:ec:
         26:93:8c:8c:28:92:4c:6d:45:f0:79:0d:23:c5:c1:f7:b8:95:
         9e:d3:d2:9b:85:50:6d:65:6f:53:45:af:c6:da:28:37:26:aa:
         02:aa:45:9b:49:ea:20:26:22:26:71:49:d7:e7:a5:95:e5:93:
         0f:4f:a0:60:0c:c2:3a:d1:4b:f8:be:95:16:fa:3d:41:68:9d:
         0e:86:43:11:24:98:70:20:1f:a3:21:a8:49:6d:d9:85:c4:bc:
         b0:cc:56:3b:22:bf:41:78:9a:47:ae:d8:3c:3c:41:b1:c0:d4:
         b7:ac:a9:af:e3:1e:a1:11:50:a1:03:32:17:fb:69:95:3e:ef:
         c3:a2:81:09:d9:f9:e5:84:a6:eb:9b:54:7d:b7:a9:5d:77:83:
         4a:ab:1e:a3:80:f8:8d:92:a3:4c:31:6f:a6:ff:8f:c6:6e:75:
         dc:58:13:f4:2b:47:8f:61:b3:c7:c5:f3:bc:dd:39:6a:35:b8:
         8b:24:fd:8a:9b:e6:53:ca:89:1d:31:e4:7b:c8:54:0d:d4:3d:
         21:fb:98:f3:d1:0c:e4:64:41:2b:de:1d:18:0f:5c:ec:ed:0b:
         f6:4a:5e:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:10:57 2026 by rpki-client