$ rpki-client -vvf rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft File: 4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft (raw, json) Hash identifier: kzOLkEVeQVrSiy68qSUIqNi7W88AscvuFpsgMfqQiHM= Subject key identifier: DB:21:7E:1D:26:F3:FA:59:DB:64:9F:C3:4A:7F:39:03:8E:4F:D7:95 Authority key identifier: 4E:9A:6C:18:F3:49:B3:95:C3:1C:33:BB:7F:9B:9F:58:17:BD:E9:A8 Certificate issuer: /CN=4e9a6c18f349b395c31c33bb7f9b9f5817bde9a8 Certificate serial: 5A3DF6220FE641B13209C3E75C382AEF1089DABA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TppsGPNJs5XDHDO7f5ufWBe96ag.cer Subject info access: rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft Manifest number: F7 Signing time: Sun 29 Jun 2025 03:37:09 +0000 Manifest this update: Sun 29 Jun 2025 03:32:09 +0000 Manifest next update: Mon 30 Jun 2025 07:25:09 +0000 Files and hashes: 1: 3138352e3230342e31322e302f32332d3233203d3e203631393631.roa (hash: 05KBv20ho05+9nNhARljl3KvN1w1xbUcP6YBmhidjZI=) 2: 323030313a3637383a3565343a3a2f34382d3438203d3e203631393631.roa (hash: 9lXsRq2vH27QU6oONZHHcOI2KgKrR7I1qDb4jmPN0NI=) 3: 4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.crl (hash: Rkm71oTGjPqcz3vCjqo/RYWXa8s6Olk40hKIexpFchQ=) 4: 323030313a3637383a3565343a3a2f34382d3438203d3e20323034303132.roa (hash: aQtSJ+DrPdjI6tdPjH35DjDz8hbObLwmapnYguKW8IE=) 5: 326130613a663034303a3a2f32392d3239203d3e203631393631.roa (hash: n9oD82N/Oc74KjefJWuXbdniXyTRuYdzVFV6P1uLFxM=) 6: 323030313a3637383a3565343a3a2f34382d3438203d3e20343031353531.roa (hash: 4UYrDw3R1HMApdgBpMB/GcyfbyVxIeygboeA0NGcRKA=) 7: 3138352e3230342e31342e302f32332d3233203d3e20323033393339.roa (hash: 0iU1VE4oIBeR0g+kEvaxFQYjnK8h1fW0reMHFIiSAYk=) Validation: OK Signature path: rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.crl rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft rsync://rpki.ripe.net/repository/DEFAULT/TppsGPNJs5XDHDO7f5ufWBe96ag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 30 Jun 2025 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:3d:f6:22:0f:e6:41:b1:32:09:c3:e7:5c:38:2a:ef:10:89:da:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e9a6c18f349b395c31c33bb7f9b9f5817bde9a8 Validity Not Before: Jun 29 03:32:09 2025 GMT Not After : Jun 30 07:25:09 2025 GMT Subject: CN=DB217E1D26F3FA59DB649FC34A7F39038E4FD795 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:db:7f:b7:df:cd:a0:8b:2c:33:95:2b:d5:33: bb:5a:cd:c2:aa:9a:00:d7:32:a1:c9:e0:fc:2f:f6: 7b:41:21:e7:1d:c6:07:c8:21:0f:46:3b:b4:66:65: 86:8f:24:cb:cf:54:b6:f4:1e:76:17:fc:9b:73:5c: 79:3e:53:a2:f1:58:99:0a:ad:ed:c9:53:f9:9c:38: 0f:e6:d6:9e:26:e7:d3:ee:9c:dc:08:07:2d:59:b7: 7e:cd:21:b7:6a:e9:8d:72:76:fd:84:18:74:e3:d4: 32:78:08:c5:ee:13:2d:a3:52:98:3e:4e:cf:97:80: 03:90:5f:9d:ac:8f:d8:6b:25:ee:35:9e:0a:8f:fe: 78:78:98:08:31:ac:30:a5:e6:38:61:56:a6:b3:64: 34:d7:17:79:77:d2:f7:ae:9f:fb:25:92:db:d1:eb: 39:39:e1:5f:d6:0b:2a:94:ae:32:89:3f:a8:fb:bb: 62:58:23:f1:8d:9a:eb:d9:38:e5:f7:48:99:74:a7: 31:7e:0f:ce:df:04:2b:ba:12:a9:1c:d0:34:e4:fb: 51:cf:c5:bb:bd:29:89:d2:c1:ed:89:21:a2:c0:d7: 5e:39:fd:79:36:33:ae:c5:e4:13:3f:e6:89:bf:13: 64:08:3d:c2:32:15:80:76:41:bf:39:e0:20:93:ed: 3f:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:21:7E:1D:26:F3:FA:59:DB:64:9F:C3:4A:7F:39:03:8E:4F:D7:95 X509v3 Authority Key Identifier: keyid:4E:9A:6C:18:F3:49:B3:95:C3:1C:33:BB:7F:9B:9F:58:17:BD:E9:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TppsGPNJs5XDHDO7f5ufWBe96ag.cer Subject Information Access: Signed Object - URI:rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:80:58:b9:9c:39:f3:b9:ab:43:59:6c:52:41:8a:08:0c:97: 56:71:ee:81:33:15:29:36:9f:99:22:c8:ea:cb:1a:71:eb:09: 36:46:1f:c6:3c:f1:b1:59:01:63:58:f8:ee:a1:5a:c0:89:27: 42:e5:02:29:0b:b4:ae:70:bf:01:4b:65:ec:09:79:e6:15:23: 74:40:8b:0b:d4:f9:2f:9d:58:2a:42:4d:28:98:32:45:0b:24: 27:b6:6e:5f:72:5e:30:d0:0c:b8:6b:b0:07:4b:2c:75:fd:e1: 11:3a:23:87:b5:a9:32:f8:08:b3:7c:54:95:38:a2:5c:e7:29: 5c:27:12:9e:40:31:f5:96:75:a3:2b:0b:6f:9e:11:dd:2b:60: b8:98:2d:8a:2f:4f:e6:0d:fd:7e:31:3e:0c:3c:2e:33:94:e5: 77:35:11:4c:da:0b:e9:cd:1d:31:8e:49:97:6f:55:aa:c3:d5: 26:ac:48:fb:20:b3:75:f9:a7:da:6d:d5:7e:46:ca:20:ec:c4: dd:c1:fe:e5:47:3f:cb:49:76:7a:5f:e6:a6:ae:97:44:47:42: 49:48:70:1c:80:c5:2e:10:e3:26:cd:97:cc:45:69:c0:c2:ad: 1e:e0:95:3a:a7:56:3d:21:03:dd:e4:8f:be:af:28:83:f6:95: c1:c8:7d:6c -----BEGIN CERTIFICATE----- MIIE4TCCA8mgAwIBAgIUWj32Ig/mQbEyCcPnXDgq7xCJ2rowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGU5YTZjMThmMzQ5YjM5NWMzMWMzM2JiN2Y5YjlmNTgx N2JkZTlhODAeFw0yNTA2MjkwMzMyMDlaFw0yNTA2MzAwNzI1MDlaMDMxMTAvBgNV BAMTKERCMjE3RTFEMjZGM0ZBNTlEQjY0OUZDMzRBN0YzOTAzOEU0RkQ3OTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM23+3382giywzlSvVM7tazcKq mgDXMqHJ4Pwv9ntBIecdxgfIIQ9GO7RmZYaPJMvPVLb0HnYX/JtzXHk+U6LxWJkK re3JU/mcOA/m1p4m59PunNwIBy1Zt37NIbdq6Y1ydv2EGHTj1DJ4CMXuEy2jUpg+ Ts+XgAOQX52sj9hrJe41ngqP/nh4mAgxrDCl5jhhVqazZDTXF3l30veun/slktvR 6zk54V/WCyqUrjKJP6j7u2JYI/GNmuvZOOX3SJl0pzF+D87fBCu6Eqkc0DTk+1HP xbu9KYnSwe2JIaLA1145/Xk2M67F5BM/5om/E2QIPcIyFYB2Qb854CCT7T8JAgMB AAGjggHrMIIB5zAdBgNVHQ4EFgQU2yF+HSbz+lnbZJ/DSn85A45P15UwHwYDVR0j BBgwFoAUTppsGPNJs5XDHDO7f5ufWBe96agwDgYDVR0PAQH/BAQDAgeAMGcGA1Ud HwRgMF4wXKBaoFiGVnJzeW5jOi8vcnBraS5uZWxsaWN1cy5uZXQvcmVwby9uZWxs aWN1cy8xLzRFOUE2QzE4RjM0OUIzOTVDMzFDMzNCQjdGOUI5RjU4MTdCREU5QTgu Y3JsMGQGCCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJp cGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9UcHBzR1BOSnM1WERIRE83ZjV1ZldC ZTk2YWcuY2VyMHIGCCsGAQUFBwELBGYwZDBiBggrBgEFBQcwC4ZWcnN5bmM6Ly9y cGtpLm5lbGxpY3VzLm5ldC9yZXBvL25lbGxpY3VzLzEvNEU5QTZDMThGMzQ5QjM5 NUMzMUMzM0JCN0Y5QjlGNTgxN0JERTlBOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsG AQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAGuAWLmcOfO5q0NZ bFJBiggMl1Zx7oEzFSk2n5kiyOrLGnHrCTZGH8Y88bFZAWNY+O6hWsCJJ0LlAikL tK5wvwFLZewJeeYVI3RAiwvU+S+dWCpCTSiYMkULJCe2bl9yXjDQDLhrsAdLLHX9 4RE6I4e1qTL4CLN8VJU4olznKVwnEp5AMfWWdaMrC2+eEd0rYLiYLYovT+YN/X4x Pgw8LjOU5Xc1EUzaC+nNHTGOSZdvVarD1SasSPsgs3X5p9pt1X5GyiDsxN3B/uVH P8tJdnpf5qaul0RHQklIcByAxS4Q4ybNl8xFacDCrR7glTqnVj0hA93kj76vKIP2 lcHIfWw= -----END CERTIFICATE-----Generated at Sun Jun 29 06:28:29 2025 by rpki-client