$ rpki-client -vvf rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft File: 4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft (raw, json) Hash identifier: UZrc1ysNFUnTnHr8gzPsww+9/elHl4rHWCujWDlh2h8= Subject key identifier: 64:83:3B:D4:06:9D:D1:6D:6B:9E:48:5D:F8:97:95:36:65:3D:11:67 Authority key identifier: 4E:9A:6C:18:F3:49:B3:95:C3:1C:33:BB:7F:9B:9F:58:17:BD:E9:A8 Certificate issuer: /CN=4e9a6c18f349b395c31c33bb7f9b9f5817bde9a8 Certificate serial: 508C57FC2D6444BBE227FB83B5307B5BF3855AE2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TppsGPNJs5XDHDO7f5ufWBe96ag.cer Subject info access: rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft Manifest number: 018C Signing time: Sun 19 Oct 2025 03:26:10 +0000 Manifest this update: Sun 19 Oct 2025 03:21:10 +0000 Manifest next update: Mon 20 Oct 2025 07:25:10 +0000 Files and hashes: 1: 3138352e3230342e31342e302f32332d3233203d3e20323033393339.roa (hash: 0iU1VE4oIBeR0g+kEvaxFQYjnK8h1fW0reMHFIiSAYk=) 2: 323030313a3637383a3565343a3a2f34382d3438203d3e20323034303132.roa (hash: aQtSJ+DrPdjI6tdPjH35DjDz8hbObLwmapnYguKW8IE=) 3: 326130613a663034303a3a2f32392d3239203d3e203631393631.roa (hash: n9oD82N/Oc74KjefJWuXbdniXyTRuYdzVFV6P1uLFxM=) 4: 4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.crl (hash: mF7Ax64VJZyma7asSGudCAv7RsI7dgU1zs3d73OcAnA=) 5: 323030313a3637383a3565343a3a2f34382d3438203d3e203631393631.roa (hash: 9lXsRq2vH27QU6oONZHHcOI2KgKrR7I1qDb4jmPN0NI=) 6: 3138352e3230342e31322e302f32332d3233203d3e203631393631.roa (hash: 05KBv20ho05+9nNhARljl3KvN1w1xbUcP6YBmhidjZI=) 7: 323030313a3637383a3565343a3a2f34382d3438203d3e20343031353531.roa (hash: 4UYrDw3R1HMApdgBpMB/GcyfbyVxIeygboeA0NGcRKA=) Validation: OK Signature path: rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.crl rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft rsync://rpki.ripe.net/repository/DEFAULT/TppsGPNJs5XDHDO7f5ufWBe96ag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 06:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:8c:57:fc:2d:64:44:bb:e2:27:fb:83:b5:30:7b:5b:f3:85:5a:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e9a6c18f349b395c31c33bb7f9b9f5817bde9a8 Validity Not Before: Oct 19 03:21:10 2025 GMT Not After : Oct 20 07:25:10 2025 GMT Subject: CN=64833BD4069DD16D6B9E485DF8979536653D1167 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:41:33:93:3a:1f:f5:f5:72:6d:3a:50:e4:ee: 33:97:39:e9:00:2c:92:21:21:17:94:c4:f1:26:26: 5a:01:11:d1:c9:e5:96:af:7a:d3:cc:38:c0:3f:5e: 7e:14:fb:70:19:07:de:ee:e8:c6:08:0e:c7:28:0c: 8c:b0:1b:e4:59:d5:d7:02:7c:b1:ae:b0:bc:e3:4c: fc:c6:ea:1a:7b:3e:27:65:31:e6:ad:47:5c:4f:52: ec:c5:19:81:29:60:09:db:68:95:a0:33:85:af:be: d4:d2:b1:4f:cb:08:74:84:11:b0:1e:7c:7f:ad:64: 98:a2:d9:bd:d1:49:c1:2f:91:ef:ce:56:f3:ff:36: 07:50:87:9b:54:cc:82:a7:27:29:3b:34:35:2c:f4: 63:5b:1f:8d:0a:f4:f7:c9:a8:54:cf:85:83:7c:73: 26:d1:91:89:95:f4:de:4d:52:23:08:3e:35:55:11: d9:1f:e1:59:4e:9c:78:11:1c:aa:f1:c5:75:bc:58: e0:7f:4c:ed:c6:c2:b8:e4:60:f8:40:48:6a:6f:13: 08:6e:40:f5:4c:e3:21:7d:3b:92:70:03:2a:3d:99: 2e:00:30:93:3a:e8:f2:4a:54:18:0d:26:4f:0b:e5: e6:f3:4c:c3:df:b3:b0:be:ba:e0:c5:5f:03:0a:03: 3d:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:83:3B:D4:06:9D:D1:6D:6B:9E:48:5D:F8:97:95:36:65:3D:11:67 X509v3 Authority Key Identifier: keyid:4E:9A:6C:18:F3:49:B3:95:C3:1C:33:BB:7F:9B:9F:58:17:BD:E9:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TppsGPNJs5XDHDO7f5ufWBe96ag.cer Subject Information Access: Signed Object - URI:rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:4b:e2:60:4a:f4:72:8f:70:a0:88:07:3f:1f:61:d5:66:d5: b2:d2:a4:2d:3c:87:5b:37:8e:6b:ec:e2:e2:c6:c0:1c:c0:6c: 2c:13:7b:6f:27:23:68:aa:8c:67:87:a5:b6:d6:27:0f:33:d0: 31:b4:f3:7e:6c:f6:bc:e2:01:d6:b9:1e:a2:1c:04:45:81:d6: 3e:10:4e:c7:47:2f:3c:5d:6a:9f:ee:5a:16:bd:fd:a9:21:f7: de:d6:1e:18:ab:de:25:a9:3a:e6:27:00:dd:78:e2:5d:41:1d: b7:9f:6e:51:c4:ea:d9:1b:17:4c:23:fa:a1:09:f4:38:12:c0: 4c:80:6b:1f:4b:67:49:32:8a:12:97:ef:67:7d:8d:3a:36:ce: 97:5b:04:6e:5d:3e:ab:1c:7b:51:3b:35:2f:68:a8:b2:13:84: ee:03:9c:3e:c0:23:d9:ab:d3:a5:b6:ca:b8:eb:a0:cc:4a:1b: ca:80:a8:dd:2a:5d:15:d8:3a:8b:70:ed:04:29:9a:d5:f3:13: 33:da:5c:35:a2:f7:76:16:00:c5:10:b0:46:e6:b4:6e:9d:b7: e5:d7:a7:6c:fc:c8:e1:eb:e4:5c:57:2f:00:8d:08:a0:9e:55: 8a:04:53:00:cb:2a:87:c7:0b:80:47:e2:cb:04:8d:8a:7c:f6: a5:57:3c:e5 -----BEGIN CERTIFICATE----- MIIE4TCCA8mgAwIBAgIUUIxX/C1kRLviJ/uDtTB7W/OFWuIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGU5YTZjMThmMzQ5YjM5NWMzMWMzM2JiN2Y5YjlmNTgx N2JkZTlhODAeFw0yNTEwMTkwMzIxMTBaFw0yNTEwMjAwNzI1MTBaMDMxMTAvBgNV BAMTKDY0ODMzQkQ0MDY5REQxNkQ2QjlFNDg1REY4OTc5NTM2NjUzRDExNjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpQTOTOh/19XJtOlDk7jOXOekA LJIhIReUxPEmJloBEdHJ5ZavetPMOMA/Xn4U+3AZB97u6MYIDscoDIywG+RZ1dcC fLGusLzjTPzG6hp7PidlMeatR1xPUuzFGYEpYAnbaJWgM4WvvtTSsU/LCHSEEbAe fH+tZJii2b3RScEvke/OVvP/NgdQh5tUzIKnJyk7NDUs9GNbH40K9PfJqFTPhYN8 cybRkYmV9N5NUiMIPjVVEdkf4VlOnHgRHKrxxXW8WOB/TO3GwrjkYPhASGpvEwhu QPVM4yF9O5JwAyo9mS4AMJM66PJKVBgNJk8L5ebzTMPfs7C+uuDFXwMKAz1bAgMB AAGjggHrMIIB5zAdBgNVHQ4EFgQUZIM71Aad0W1rnkhd+JeVNmU9EWcwHwYDVR0j BBgwFoAUTppsGPNJs5XDHDO7f5ufWBe96agwDgYDVR0PAQH/BAQDAgeAMGcGA1Ud HwRgMF4wXKBaoFiGVnJzeW5jOi8vcnBraS5uZWxsaWN1cy5uZXQvcmVwby9uZWxs aWN1cy8xLzRFOUE2QzE4RjM0OUIzOTVDMzFDMzNCQjdGOUI5RjU4MTdCREU5QTgu Y3JsMGQGCCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJp cGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9UcHBzR1BOSnM1WERIRE83ZjV1ZldC ZTk2YWcuY2VyMHIGCCsGAQUFBwELBGYwZDBiBggrBgEFBQcwC4ZWcnN5bmM6Ly9y cGtpLm5lbGxpY3VzLm5ldC9yZXBvL25lbGxpY3VzLzEvNEU5QTZDMThGMzQ5QjM5 NUMzMUMzM0JCN0Y5QjlGNTgxN0JERTlBOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsG AQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAABL4mBK9HKPcKCI Bz8fYdVm1bLSpC08h1s3jmvs4uLGwBzAbCwTe28nI2iqjGeHpbbWJw8z0DG0835s 9rziAda5HqIcBEWB1j4QTsdHLzxdap/uWha9/akh997WHhir3iWpOuYnAN144l1B HbefblHE6tkbF0wj+qEJ9DgSwEyAax9LZ0kyihKX72d9jTo2zpdbBG5dPqsce1E7 NS9oqLIThO4DnD7AI9mr06W2yrjroMxKG8qAqN0qXRXYOotw7QQpmtXzEzPaXDWi 93YWAMUQsEbmtG6dt+XXp2z8yOHr5FxXLwCNCKCeVYoEUwDLKofHC4BH4ssEjYp8 9qVXPOU= -----END CERTIFICATE-----Generated at Sun Oct 19 15:28:03 2025 by rpki-client