$ rpki-client -vvf rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft File: 4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft (raw, json) Hash identifier: nNqxPfkWbZOXEhZGmobw1g5VaGH6/+o6zzXKKrotRqY= Subject key identifier: 14:C9:B4:75:5B:E7:56:F5:31:E8:F6:1C:AA:83:2F:97:4F:BD:D4:8D Authority key identifier: 4E:9A:6C:18:F3:49:B3:95:C3:1C:33:BB:7F:9B:9F:58:17:BD:E9:A8 Certificate issuer: /CN=4e9a6c18f349b395c31c33bb7f9b9f5817bde9a8 Certificate serial: 5698B9679EC9D1D38BEA2A3711736E3B2CBBE731 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TppsGPNJs5XDHDO7f5ufWBe96ag.cer Subject info access: rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft Manifest number: 026F Signing time: Sat 28 Mar 2026 02:24:45 +0000 Manifest this update: Sat 28 Mar 2026 02:19:45 +0000 Manifest next update: Sun 29 Mar 2026 02:24:45 +0000 Files and hashes: 1: 323030313a3637383a3565343a3a2f34382d3438203d3e20323034303132.roa (hash: fxsQm1q2pmZhASyGNHE1h8SCDsGuI34aljSVVL+enkQ=) 2: 3138352e3230342e31322e302f32332d3234203d3e203631393631.roa (hash: d3/k+6QX5UseLeqUWTi+l6cD1s9fc/SSlpG2TVD7AKo=) 3: 4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.crl (hash: PC0/M9y+/cFRugX8IRgrCihQcSaFYB2LORitnk6l2Ms=) 4: 326130613a663034303a3a2f32392d3239203d3e203631393631.roa (hash: q7WGQJ75bRybHehoGPB487LwawVW780GrlEzs+BTdx4=) 5: 323030313a3637383a3565343a3a2f34382d3438203d3e203631393631.roa (hash: nbAVFkQiqft9sHl9Hh+TY61io/BSlt5tgmWs0gncRuY=) 6: 323030313a3637383a3565343a3a2f34382d3438203d3e20343031353531.roa (hash: XAuPoyWgqk/2VSGKnl/UxA3UxeQIFy53PwlvcLnn9Pc=) 7: 3138352e3230342e31342e302f32332d3234203d3e20323033393339.roa (hash: JQwkT1z8uimpbN2Jt8jPn0T3yATPeIOHsQosuzjWZdg=) Validation: OK Signature path: rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.crl rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft rsync://rpki.ripe.net/repository/DEFAULT/TppsGPNJs5XDHDO7f5ufWBe96ag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Mar 2026 00:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:98:b9:67:9e:c9:d1:d3:8b:ea:2a:37:11:73:6e:3b:2c:bb:e7:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e9a6c18f349b395c31c33bb7f9b9f5817bde9a8 Validity Not Before: Mar 28 02:19:45 2026 GMT Not After : Mar 29 02:24:45 2026 GMT Subject: CN=14C9B4755BE756F531E8F61CAA832F974FBDD48D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:2a:89:d6:42:9e:d3:82:57:e2:0b:77:eb:4d: 49:39:29:db:de:03:fd:65:58:4e:29:f1:ef:f4:cc: 48:3b:71:58:7d:94:e0:7b:6f:e0:b7:2b:75:ac:20: 8e:c3:b4:25:74:ee:bd:3b:f8:fb:15:ee:76:e7:a3: 2c:92:ac:88:db:96:ec:32:e1:e2:92:02:c6:8d:67: e9:d6:29:2a:88:41:42:ca:11:db:c7:66:f7:31:70: a6:79:50:25:74:db:4f:89:b7:89:3a:4d:9c:f5:de: 1a:09:84:b3:f9:69:d8:34:f9:a8:8d:4c:1c:a8:30: 30:71:51:b8:3a:9c:96:0f:17:8b:68:de:bc:a2:4d: 63:dd:d1:2e:a6:0e:bb:c9:9d:a8:d1:b5:ba:c1:29: 39:ea:e9:4e:1c:85:41:e7:39:30:2a:9f:fd:d6:d4: 44:54:b1:53:fc:d7:75:e5:63:c3:49:6e:7b:16:f6: 16:89:df:6a:e6:27:42:54:51:af:1c:62:d4:54:2a: b0:a6:db:67:cf:42:4b:59:f0:26:98:b5:c1:89:62: 06:bd:b0:83:02:70:e8:ab:79:7c:33:0f:c9:0e:69: 34:d4:bb:14:7a:99:a4:5c:9c:6d:f8:cb:68:91:b6: 4e:33:03:16:13:45:c7:39:7d:1c:b2:b3:52:08:18: d8:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:C9:B4:75:5B:E7:56:F5:31:E8:F6:1C:AA:83:2F:97:4F:BD:D4:8D X509v3 Authority Key Identifier: keyid:4E:9A:6C:18:F3:49:B3:95:C3:1C:33:BB:7F:9B:9F:58:17:BD:E9:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TppsGPNJs5XDHDO7f5ufWBe96ag.cer Subject Information Access: Signed Object - URI:rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:79:6a:2a:25:9b:30:30:50:55:f5:24:dd:71:0d:68:61:78: ad:46:0f:67:9c:99:e1:d3:a9:2c:38:94:4f:d1:19:3c:c6:0c: 60:93:14:76:a9:34:38:9f:25:f1:85:ec:e0:4f:92:49:fc:c9: 6a:81:f2:d4:ad:0e:23:65:d8:f1:fd:09:82:6f:a6:0f:f3:1b: 33:87:09:3f:20:f8:3e:15:4d:c1:42:86:7f:09:f6:39:29:67: fa:bb:e9:69:5b:af:8e:8c:0d:d5:2f:25:95:e0:0d:c5:a5:7b: 5d:a1:fc:fe:ae:d7:22:ee:b3:18:1c:0a:af:3c:46:ce:55:15: 66:11:80:49:e1:c4:55:ce:98:29:ea:d0:ab:06:41:d9:f3:5a: f8:7e:56:85:89:cd:2c:ca:90:19:0d:7c:31:d7:cb:cc:9a:9d: 2a:b5:80:f4:6e:bc:c9:9d:42:ed:27:1b:5f:bf:77:9e:17:cb: ba:58:35:90:8e:00:b9:c4:63:29:30:e6:f0:3d:5b:da:9f:18: bb:86:61:d6:6d:7f:a7:61:dc:c6:89:4c:3b:8a:52:50:65:58: 3c:a4:e1:cd:23:2e:a5:df:19:8e:af:8e:64:7f:bd:70:21:b0: 67:e4:c7:07:33:e3:61:8c:fb:20:d2:94:45:d8:5d:63:98:46: ed:d2:ad:97 -----BEGIN CERTIFICATE----- MIIE4TCCA8mgAwIBAgIUVpi5Z57J0dOL6io3EXNuOyy75zEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGU5YTZjMThmMzQ5YjM5NWMzMWMzM2JiN2Y5YjlmNTgx N2JkZTlhODAeFw0yNjAzMjgwMjE5NDVaFw0yNjAzMjkwMjI0NDVaMDMxMTAvBgNV BAMTKDE0QzlCNDc1NUJFNzU2RjUzMUU4RjYxQ0FBODMyRjk3NEZCREQ0OEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChKonWQp7TglfiC3frTUk5Kdve A/1lWE4p8e/0zEg7cVh9lOB7b+C3K3WsII7DtCV07r07+PsV7nbnoyySrIjbluwy 4eKSAsaNZ+nWKSqIQULKEdvHZvcxcKZ5UCV020+Jt4k6TZz13hoJhLP5adg0+aiN TByoMDBxUbg6nJYPF4to3ryiTWPd0S6mDrvJnajRtbrBKTnq6U4chUHnOTAqn/3W 1ERUsVP813XlY8NJbnsW9haJ32rmJ0JUUa8cYtRUKrCm22fPQktZ8CaYtcGJYga9 sIMCcOireXwzD8kOaTTUuxR6maRcnG34y2iRtk4zAxYTRcc5fRyys1IIGNiPAgMB AAGjggHrMIIB5zAdBgNVHQ4EFgQUFMm0dVvnVvUx6PYcqoMvl0+91I0wHwYDVR0j BBgwFoAUTppsGPNJs5XDHDO7f5ufWBe96agwDgYDVR0PAQH/BAQDAgeAMGcGA1Ud HwRgMF4wXKBaoFiGVnJzeW5jOi8vcnBraS5uZWxsaWN1cy5uZXQvcmVwby9uZWxs aWN1cy8xLzRFOUE2QzE4RjM0OUIzOTVDMzFDMzNCQjdGOUI5RjU4MTdCREU5QTgu Y3JsMGQGCCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJp cGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9UcHBzR1BOSnM1WERIRE83ZjV1ZldC ZTk2YWcuY2VyMHIGCCsGAQUFBwELBGYwZDBiBggrBgEFBQcwC4ZWcnN5bmM6Ly9y cGtpLm5lbGxpY3VzLm5ldC9yZXBvL25lbGxpY3VzLzEvNEU5QTZDMThGMzQ5QjM5 NUMzMUMzM0JCN0Y5QjlGNTgxN0JERTlBOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsG AQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAK95aiolmzAwUFX1 JN1xDWhheK1GD2ecmeHTqSw4lE/RGTzGDGCTFHapNDifJfGF7OBPkkn8yWqB8tSt DiNl2PH9CYJvpg/zGzOHCT8g+D4VTcFChn8J9jkpZ/q76Wlbr46MDdUvJZXgDcWl e12h/P6u1yLusxgcCq88Rs5VFWYRgEnhxFXOmCnq0KsGQdnzWvh+VoWJzSzKkBkN fDHXy8yanSq1gPRuvMmdQu0nG1+/d54Xy7pYNZCOALnEYykw5vA9W9qfGLuGYdZt f6dh3MaJTDuKUlBlWDyk4c0jLqXfGY6vjmR/vXAhsGfkxwcz42GM+yDSlEXYXWOY Ru3SrZc= -----END CERTIFICATE-----Generated at Sat Mar 28 08:44:25 2026 by rpki-client