$ rpki-client -vvf rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft File: 4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft (raw, json) Hash identifier: xuAoPspmwoNkCWWzTkme0w/FC/ZHv3Qy5ZKTseHt6Ko= Subject key identifier: 7C:8A:BB:E1:86:2E:16:30:8F:FF:96:02:77:05:0C:5B:33:1C:A6:B0 Authority key identifier: 4E:9A:6C:18:F3:49:B3:95:C3:1C:33:BB:7F:9B:9F:58:17:BD:E9:A8 Certificate issuer: /CN=4e9a6c18f349b395c31c33bb7f9b9f5817bde9a8 Certificate serial: 4D6E57A3117A0D1CCA505A79A6A32B85F0609AB3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TppsGPNJs5XDHDO7f5ufWBe96ag.cer Subject info access: rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft Manifest number: 02AC Signing time: Tue 12 May 2026 14:52:39 +0000 Manifest this update: Tue 12 May 2026 14:47:39 +0000 Manifest next update: Wed 13 May 2026 15:19:39 +0000 Files and hashes: 1: 3138352e3230342e31342e302f32332d3234203d3e20323033393339.roa (hash: JQwkT1z8uimpbN2Jt8jPn0T3yATPeIOHsQosuzjWZdg=) 2: 323030313a3637383a3565343a3a2f34382d3438203d3e20323034303132.roa (hash: fxsQm1q2pmZhASyGNHE1h8SCDsGuI34aljSVVL+enkQ=) 3: 323030313a3637383a3565343a3a2f34382d3438203d3e20343031353531.roa (hash: XAuPoyWgqk/2VSGKnl/UxA3UxeQIFy53PwlvcLnn9Pc=) 4: 4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.crl (hash: /bDY6sUJFa8rlExVmDxwGM87wsJ16kd+KcY8p/e6VHo=) 5: 326130613a663034303a3a2f32392d3239203d3e203631393631.roa (hash: q7WGQJ75bRybHehoGPB487LwawVW780GrlEzs+BTdx4=) 6: 3138352e3230342e31322e302f32332d3234203d3e203631393631.roa (hash: d3/k+6QX5UseLeqUWTi+l6cD1s9fc/SSlpG2TVD7AKo=) 7: 323030313a3637383a3565343a3a2f34382d3438203d3e203631393631.roa (hash: nbAVFkQiqft9sHl9Hh+TY61io/BSlt5tgmWs0gncRuY=) Validation: OK Signature path: rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.crl rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft rsync://rpki.ripe.net/repository/DEFAULT/TppsGPNJs5XDHDO7f5ufWBe96ag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 14:18:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:6e:57:a3:11:7a:0d:1c:ca:50:5a:79:a6:a3:2b:85:f0:60:9a:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e9a6c18f349b395c31c33bb7f9b9f5817bde9a8 Validity Not Before: May 12 14:47:39 2026 GMT Not After : May 13 15:19:39 2026 GMT Subject: CN=7C8ABBE1862E16308FFF960277050C5B331CA6B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:0e:df:ca:3c:67:74:e8:4d:3d:9b:6b:f1:ad: 5d:cb:2d:d4:74:6c:36:73:11:bf:18:f5:18:80:cb: 46:11:13:56:12:5c:ac:a9:f4:59:f9:fd:d2:a0:04: 26:0d:d3:eb:f4:5e:04:5e:a1:1d:01:0f:c9:e5:68: 1d:a7:90:6f:ff:78:d5:e4:83:c9:49:cb:79:ff:29: d0:c4:02:f6:70:64:92:28:c5:3c:59:0b:80:ae:97: 18:30:63:c7:ed:96:d2:17:d6:d5:d2:30:7b:80:48: d3:fb:18:79:ce:c0:39:0f:26:d7:32:d1:cf:aa:b6: 79:e8:33:99:7b:a4:bb:c9:f2:56:1b:b4:78:5e:25: 01:bd:fa:09:13:6a:0b:c3:48:39:f3:d8:14:54:66: 3d:42:af:96:b7:6b:1e:89:3c:aa:1f:d8:f0:9b:e0: 5e:a0:d8:5c:69:72:4d:30:a5:6d:6d:06:99:7b:63: da:25:af:ad:d0:cd:7f:cf:07:3c:43:ad:ca:7b:64: fd:87:e2:ce:26:41:9b:17:ce:47:0e:1a:ca:99:69: af:94:59:93:f1:8d:14:1a:95:e2:0e:51:bb:85:d2: 5b:f2:11:47:ed:5a:2a:4d:bb:b9:15:96:1c:bc:85: df:fa:14:c8:3c:7f:d6:da:05:a5:17:81:ab:ed:ef: 64:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:8A:BB:E1:86:2E:16:30:8F:FF:96:02:77:05:0C:5B:33:1C:A6:B0 X509v3 Authority Key Identifier: keyid:4E:9A:6C:18:F3:49:B3:95:C3:1C:33:BB:7F:9B:9F:58:17:BD:E9:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TppsGPNJs5XDHDO7f5ufWBe96ag.cer Subject Information Access: Signed Object - URI:rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:21:15:6f:25:9d:d6:1e:8b:df:d7:7b:f5:77:e4:86:1e:a9: da:53:e7:94:c2:8a:d3:6e:41:6d:68:71:c9:12:56:66:26:da: e4:37:cc:f8:a7:38:68:40:45:4d:ed:9e:0a:a0:f6:3b:64:12: 8a:5b:97:b7:57:43:c3:78:fb:85:cb:c1:7e:27:41:de:9d:f4: b1:97:15:1c:e8:32:40:98:2a:9d:bb:fd:47:70:80:50:da:85: 2a:2d:a0:a9:dc:d9:34:65:38:4b:27:44:25:28:83:90:b3:4d: e2:21:b4:10:ab:b4:bf:f7:b3:2d:0f:1c:33:71:66:f8:00:4d: 61:6e:ed:b3:d8:74:7b:11:4e:64:2a:40:f3:1b:72:d8:6b:e8: c8:8a:c3:90:7f:84:30:fe:ab:e8:c7:67:b3:5d:1b:96:81:7d: fe:92:3f:f2:0e:8d:6f:fe:e9:7e:9f:43:a5:f9:45:b3:53:30: 4a:09:ae:1d:5e:b2:24:56:1f:9c:0e:1a:f4:5a:b8:5c:30:45: d2:37:b1:c0:6e:85:f5:25:73:1a:c2:6f:94:55:43:67:f8:bb: 21:aa:eb:c2:41:1d:00:6a:4f:28:37:e7:5d:ea:d7:d1:1f:b6: c4:6b:fd:fb:0d:de:50:9b:d0:7d:32:cd:87:35:27:f0:32:9c: e9:a8:51:54 -----BEGIN CERTIFICATE----- MIIE4TCCA8mgAwIBAgIUTW5XoxF6DRzKUFp5pqMrhfBgmrMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGU5YTZjMThmMzQ5YjM5NWMzMWMzM2JiN2Y5YjlmNTgx N2JkZTlhODAeFw0yNjA1MTIxNDQ3MzlaFw0yNjA1MTMxNTE5MzlaMDMxMTAvBgNV BAMTKDdDOEFCQkUxODYyRTE2MzA4RkZGOTYwMjc3MDUwQzVCMzMxQ0E2QjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDDt/KPGd06E09m2vxrV3LLdR0 bDZzEb8Y9RiAy0YRE1YSXKyp9Fn5/dKgBCYN0+v0XgReoR0BD8nlaB2nkG//eNXk g8lJy3n/KdDEAvZwZJIoxTxZC4CulxgwY8ftltIX1tXSMHuASNP7GHnOwDkPJtcy 0c+qtnnoM5l7pLvJ8lYbtHheJQG9+gkTagvDSDnz2BRUZj1Cr5a3ax6JPKof2PCb 4F6g2Fxpck0wpW1tBpl7Y9olr63QzX/PBzxDrcp7ZP2H4s4mQZsXzkcOGsqZaa+U WZPxjRQaleIOUbuF0lvyEUftWipNu7kVlhy8hd/6FMg8f9baBaUXgavt72T3AgMB AAGjggHrMIIB5zAdBgNVHQ4EFgQUfIq74YYuFjCP/5YCdwUMWzMcprAwHwYDVR0j BBgwFoAUTppsGPNJs5XDHDO7f5ufWBe96agwDgYDVR0PAQH/BAQDAgeAMGcGA1Ud HwRgMF4wXKBaoFiGVnJzeW5jOi8vcnBraS5uZWxsaWN1cy5uZXQvcmVwby9uZWxs aWN1cy8xLzRFOUE2QzE4RjM0OUIzOTVDMzFDMzNCQjdGOUI5RjU4MTdCREU5QTgu Y3JsMGQGCCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJp cGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9UcHBzR1BOSnM1WERIRE83ZjV1ZldC ZTk2YWcuY2VyMHIGCCsGAQUFBwELBGYwZDBiBggrBgEFBQcwC4ZWcnN5bmM6Ly9y cGtpLm5lbGxpY3VzLm5ldC9yZXBvL25lbGxpY3VzLzEvNEU5QTZDMThGMzQ5QjM5 NUMzMUMzM0JCN0Y5QjlGNTgxN0JERTlBOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsG AQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAFQhFW8lndYei9/X e/V35IYeqdpT55TCitNuQW1occkSVmYm2uQ3zPinOGhARU3tngqg9jtkEopbl7dX Q8N4+4XLwX4nQd6d9LGXFRzoMkCYKp27/UdwgFDahSotoKnc2TRlOEsnRCUog5Cz TeIhtBCrtL/3sy0PHDNxZvgATWFu7bPYdHsRTmQqQPMbcthr6MiKw5B/hDD+q+jH Z7NdG5aBff6SP/IOjW/+6X6fQ6X5RbNTMEoJrh1esiRWH5wOGvRauFwwRdI3scBu hfUlcxrCb5RVQ2f4uyGq68JBHQBqTyg3513q19EftsRr/fsN3lCb0H0yzYc1J/Ay nOmoUVQ= -----END CERTIFICATE-----Generated at Wed May 13 01:02:31 2026 by rpki-client