$ rpki-client -vvf rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft File: 4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft (raw, json) Hash identifier: oaLW24HPayS6mZ3gKVVavMV3bu0sS6BO01ef9EeveHw= Subject key identifier: 30:AF:26:5B:3F:BE:FC:38:B7:D0:CB:12:97:8E:FA:31:EC:82:99:D0 Authority key identifier: 4E:9A:6C:18:F3:49:B3:95:C3:1C:33:BB:7F:9B:9F:58:17:BD:E9:A8 Certificate issuer: /CN=4e9a6c18f349b395c31c33bb7f9b9f5817bde9a8 Certificate serial: 5A6078CE861F743C7D76CBE239BFE81DF43BDEC9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TppsGPNJs5XDHDO7f5ufWBe96ag.cer Subject info access: rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft Manifest number: 0140 Signing time: Sat 23 Aug 2025 06:17:55 +0000 Manifest this update: Sat 23 Aug 2025 06:12:55 +0000 Manifest next update: Sun 24 Aug 2025 09:57:55 +0000 Files and hashes: 1: 323030313a3637383a3565343a3a2f34382d3438203d3e20343031353531.roa (hash: 4UYrDw3R1HMApdgBpMB/GcyfbyVxIeygboeA0NGcRKA=) 2: 323030313a3637383a3565343a3a2f34382d3438203d3e203631393631.roa (hash: 9lXsRq2vH27QU6oONZHHcOI2KgKrR7I1qDb4jmPN0NI=) 3: 4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.crl (hash: yFriOIFVSgz9OMNpBSBzx+VtJv040D67SomFC98OUzE=) 4: 323030313a3637383a3565343a3a2f34382d3438203d3e20323034303132.roa (hash: aQtSJ+DrPdjI6tdPjH35DjDz8hbObLwmapnYguKW8IE=) 5: 326130613a663034303a3a2f32392d3239203d3e203631393631.roa (hash: n9oD82N/Oc74KjefJWuXbdniXyTRuYdzVFV6P1uLFxM=) 6: 3138352e3230342e31322e302f32332d3233203d3e203631393631.roa (hash: 05KBv20ho05+9nNhARljl3KvN1w1xbUcP6YBmhidjZI=) 7: 3138352e3230342e31342e302f32332d3233203d3e20323033393339.roa (hash: 0iU1VE4oIBeR0g+kEvaxFQYjnK8h1fW0reMHFIiSAYk=) Validation: OK Signature path: rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.crl rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft rsync://rpki.ripe.net/repository/DEFAULT/TppsGPNJs5XDHDO7f5ufWBe96ag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 09:57:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:60:78:ce:86:1f:74:3c:7d:76:cb:e2:39:bf:e8:1d:f4:3b:de:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e9a6c18f349b395c31c33bb7f9b9f5817bde9a8 Validity Not Before: Aug 23 06:12:55 2025 GMT Not After : Aug 24 09:57:55 2025 GMT Subject: CN=30AF265B3FBEFC38B7D0CB12978EFA31EC8299D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:c4:d9:2e:c9:ea:18:bb:cd:1e:5a:9c:ff:d3: c0:ed:4b:c5:39:5c:23:42:b6:a1:9a:33:03:9e:6f: 70:bc:c0:39:07:04:8c:ae:d4:84:1f:9b:08:1d:05: 2f:6b:16:ed:e5:61:f1:7e:f4:92:13:ff:c3:f9:6d: 07:36:37:53:8f:16:f9:9f:a3:29:3a:b2:20:4e:be: 5b:43:f2:27:8b:93:1d:a1:89:45:1f:41:48:ce:c9: 22:b6:76:49:bf:3d:9f:f4:18:98:ee:1a:42:5e:1d: cd:c0:71:af:67:8e:cf:27:89:30:fb:eb:bd:4d:c4: 8d:32:57:91:f8:fa:8d:49:c4:e3:28:90:ea:cf:d5: 24:a6:01:fd:64:16:65:41:02:a8:e8:a6:28:bf:32: 7b:05:cb:f2:95:da:3b:a2:52:61:71:e6:c8:0f:15: c9:59:ac:54:7c:48:1a:69:98:d9:1e:14:4a:43:4b: 60:63:cc:b7:15:1e:b5:a5:c3:d8:94:ab:af:8a:18: 7c:3b:68:74:00:29:ba:12:b1:40:55:36:f3:7a:37: 0e:85:72:2b:9d:51:f2:db:0f:13:76:a3:f2:d6:b4: 31:56:74:3e:fe:f1:85:8e:2f:fa:df:6e:b1:92:bd: 4d:69:ee:f1:da:4e:58:8c:70:32:51:60:c2:f3:50: 64:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:AF:26:5B:3F:BE:FC:38:B7:D0:CB:12:97:8E:FA:31:EC:82:99:D0 X509v3 Authority Key Identifier: keyid:4E:9A:6C:18:F3:49:B3:95:C3:1C:33:BB:7F:9B:9F:58:17:BD:E9:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TppsGPNJs5XDHDO7f5ufWBe96ag.cer Subject Information Access: Signed Object - URI:rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:f7:25:3d:43:c0:01:21:85:f8:57:3f:41:10:81:68:0f:a2: 37:1f:5e:cb:70:46:fd:a0:9a:c0:b4:3d:bf:5e:8c:ca:51:94: 45:87:0b:44:31:a3:70:e1:98:43:bd:4b:89:23:c7:9c:e0:d9: 41:de:9f:e7:6d:21:e4:58:64:b7:f3:bd:31:58:58:54:69:63: 1e:29:ee:d6:08:86:49:28:92:7b:49:94:ca:48:62:41:52:3c: d7:37:1e:19:a5:95:f7:4b:30:49:74:75:6e:a9:74:d7:88:0c: 87:50:bf:bb:c0:8c:db:66:12:23:a5:e1:a7:79:4a:b9:be:e1: 4c:af:56:b9:02:10:09:34:91:ae:76:3e:01:2f:cc:fe:e3:73: 14:08:59:73:1c:d7:5f:6a:2f:ad:aa:13:7e:61:e1:4a:0f:3c: 6d:d9:a6:7b:2d:bb:6c:f1:dc:91:2b:5c:7b:d0:18:0b:2b:2c: 33:3b:c9:43:fb:9e:c0:94:20:24:0d:6f:49:84:94:d0:fe:91: 42:c3:6a:84:93:3a:4f:42:c0:c2:fd:76:7f:15:22:28:f7:77: c0:33:a0:ab:75:0f:24:d3:b6:ec:d4:c8:bb:e0:4f:6a:5d:a5: 4c:48:5a:42:82:13:b2:ff:47:0e:31:1f:b2:43:9d:0d:31:70: e5:a4:39:90 -----BEGIN CERTIFICATE----- MIIE4TCCA8mgAwIBAgIUWmB4zoYfdDx9dsviOb/oHfQ73skwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGU5YTZjMThmMzQ5YjM5NWMzMWMzM2JiN2Y5YjlmNTgx N2JkZTlhODAeFw0yNTA4MjMwNjEyNTVaFw0yNTA4MjQwOTU3NTVaMDMxMTAvBgNV BAMTKDMwQUYyNjVCM0ZCRUZDMzhCN0QwQ0IxMjk3OEVGQTMxRUM4Mjk5RDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpxNkuyeoYu80eWpz/08DtS8U5 XCNCtqGaMwOeb3C8wDkHBIyu1IQfmwgdBS9rFu3lYfF+9JIT/8P5bQc2N1OPFvmf oyk6siBOvltD8ieLkx2hiUUfQUjOySK2dkm/PZ/0GJjuGkJeHc3Aca9njs8niTD7 671NxI0yV5H4+o1JxOMokOrP1SSmAf1kFmVBAqjopii/MnsFy/KV2juiUmFx5sgP FclZrFR8SBppmNkeFEpDS2BjzLcVHrWlw9iUq6+KGHw7aHQAKboSsUBVNvN6Nw6F ciudUfLbDxN2o/LWtDFWdD7+8YWOL/rfbrGSvU1p7vHaTliMcDJRYMLzUGQxAgMB AAGjggHrMIIB5zAdBgNVHQ4EFgQUMK8mWz++/Di30MsSl476MeyCmdAwHwYDVR0j BBgwFoAUTppsGPNJs5XDHDO7f5ufWBe96agwDgYDVR0PAQH/BAQDAgeAMGcGA1Ud HwRgMF4wXKBaoFiGVnJzeW5jOi8vcnBraS5uZWxsaWN1cy5uZXQvcmVwby9uZWxs aWN1cy8xLzRFOUE2QzE4RjM0OUIzOTVDMzFDMzNCQjdGOUI5RjU4MTdCREU5QTgu Y3JsMGQGCCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJp cGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9UcHBzR1BOSnM1WERIRE83ZjV1ZldC ZTk2YWcuY2VyMHIGCCsGAQUFBwELBGYwZDBiBggrBgEFBQcwC4ZWcnN5bmM6Ly9y cGtpLm5lbGxpY3VzLm5ldC9yZXBvL25lbGxpY3VzLzEvNEU5QTZDMThGMzQ5QjM5 NUMzMUMzM0JCN0Y5QjlGNTgxN0JERTlBOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsG AQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBABv3JT1DwAEhhfhX P0EQgWgPojcfXstwRv2gmsC0Pb9ejMpRlEWHC0Qxo3DhmEO9S4kjx5zg2UHen+dt IeRYZLfzvTFYWFRpYx4p7tYIhkkokntJlMpIYkFSPNc3HhmllfdLMEl0dW6pdNeI DIdQv7vAjNtmEiOl4ad5Srm+4UyvVrkCEAk0ka52PgEvzP7jcxQIWXMc119qL62q E35h4UoPPG3Zpnstu2zx3JErXHvQGAsrLDM7yUP7nsCUICQNb0mElND+kULDaoST Ok9CwML9dn8VIij3d8AzoKt1DyTTtuzUyLvgT2pdpUxIWkKCE7L/Rw4xH7JDnQ0x cOWkOZA= -----END CERTIFICATE-----Generated at Sat Aug 23 16:55:18 2025 by rpki-client