Manifest

$ rpki-client -vvf rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft
File:                     4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft (raw, json)
Hash identifier:          Mjq+LFucpsfnkYbtS4mZNgG6DB+N1BjhdbhCyKeWOJQ=
Subject key identifier:   FE:19:11:00:BB:15:9B:04:B6:DB:2F:31:24:3F:F9:1A:72:1E:5B:62
Authority key identifier: 4E:9A:6C:18:F3:49:B3:95:C3:1C:33:BB:7F:9B:9F:58:17:BD:E9:A8
Certificate issuer:       /CN=4e9a6c18f349b395c31c33bb7f9b9f5817bde9a8
Certificate serial:       2119C71007E829AD6D2F9D876E2BAC527581CA36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TppsGPNJs5XDHDO7f5ufWBe96ag.cer
Subject info access:      rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft
Manifest number:          0323
Signing time:             Thu 23 Jul 2026 15:09:26 +0000
Manifest this update:     Thu 23 Jul 2026 15:04:26 +0000
Manifest next update:     Fri 24 Jul 2026 16:03:26 +0000
Files and hashes:         1: 323030313a3637383a3565343a3a2f34382d3438203d3e2037303130.roa (hash: NgMsiuiWolklNu0dHOm4jeyy4AZSxHgK7gSzz1LYcr4=)
                          2: 4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.crl (hash: oikQJTigAzJyW0OZdaVsiWC7WRuXAgEZCftzxSPqDRI=)
                          3: 326130613a663034303a3a2f32392d3239203d3e2037303130.roa (hash: axOAY/addUVO+GjS/O49vvKsNcuSOeEME1u8NtFgMAw=)
                          4: 3138352e3230342e31322e302f32332d3234203d3e2037303130.roa (hash: jYTgcOfbk9bjq+6wsdfbqqj91vyiJUyqR79FO1mbmrc=)
                          5: 3138352e3230342e31342e302f32332d3234203d3e20323033393339.roa (hash: JQwkT1z8uimpbN2Jt8jPn0T3yATPeIOHsQosuzjWZdg=)
Validation:               OK
Signature path:           rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.crl
                          rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TppsGPNJs5XDHDO7f5ufWBe96ag.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:19:c7:10:07:e8:29:ad:6d:2f:9d:87:6e:2b:ac:52:75:81:ca:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e9a6c18f349b395c31c33bb7f9b9f5817bde9a8
        Validity
            Not Before: Jul 23 15:04:26 2026 GMT
            Not After : Jul 24 16:03:26 2026 GMT
        Subject: CN=FE191100BB159B04B6DB2F31243FF91A721E5B62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:93:4b:42:04:61:d2:81:10:20:24:ee:d5:22:
                    59:ca:d5:f8:5f:fd:ee:65:0d:d2:25:d8:e1:89:d9:
                    6d:71:6c:9d:e2:72:2f:8d:d0:69:c1:be:a0:4d:fa:
                    8b:e7:c4:7d:27:ca:08:d2:38:0e:f8:c4:7a:aa:52:
                    14:f7:ea:c8:b0:11:6f:41:12:c1:36:f2:11:90:fa:
                    01:11:d2:33:da:22:03:5e:56:80:f4:85:fc:08:c7:
                    55:6b:0f:b5:95:3f:06:0b:52:a7:47:8d:46:55:9c:
                    97:f7:68:fd:31:28:24:5e:93:fe:41:59:b2:76:02:
                    a6:56:76:96:4d:6e:ad:b2:10:ff:ec:59:6c:f3:90:
                    e6:43:06:db:87:74:cf:b2:95:92:6a:15:e4:49:b4:
                    d2:3f:6d:21:cc:27:2a:84:30:b0:d8:78:e1:8e:e8:
                    21:70:60:57:4a:1b:6a:01:3d:29:53:e6:7b:8e:8b:
                    4a:e2:53:ab:ad:18:3c:f6:fc:df:fa:7c:0d:a9:ff:
                    e0:72:33:28:ce:8c:da:fb:9f:ca:3f:dd:ad:47:f3:
                    84:e5:89:13:e8:19:d5:3d:e0:d3:0b:0a:63:5f:7b:
                    f0:db:79:8e:63:3b:ed:dc:22:ec:94:af:35:a8:6e:
                    9f:9c:8e:d1:4b:a4:30:ea:76:67:b4:f7:03:43:eb:
                    e3:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:19:11:00:BB:15:9B:04:B6:DB:2F:31:24:3F:F9:1A:72:1E:5B:62
            X509v3 Authority Key Identifier:
                keyid:4E:9A:6C:18:F3:49:B3:95:C3:1C:33:BB:7F:9B:9F:58:17:BD:E9:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TppsGPNJs5XDHDO7f5ufWBe96ag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:1f:1c:7c:4f:45:fd:b5:cc:a2:ba:13:fb:05:7d:5f:76:a8:
         4c:64:aa:98:10:2b:a3:4b:43:f6:22:dc:fe:e1:92:d4:e3:e5:
         6b:04:8b:b9:eb:25:d6:37:0b:19:01:24:0d:40:8b:83:0d:72:
         fa:18:e1:b9:9a:72:0a:98:22:9d:63:e0:8b:1d:8b:6b:05:80:
         c8:07:7d:11:d3:68:76:39:2c:55:60:10:0e:cd:89:bc:b2:d9:
         5e:11:88:db:6b:1e:6f:79:5c:56:c8:a5:96:a9:7a:19:48:b5:
         ba:cd:0a:5b:ce:71:ea:c2:5d:8b:83:3c:aa:4a:1e:8f:b6:68:
         0b:1b:99:1a:6f:30:e7:ec:dc:47:ad:cc:d3:6a:fb:d7:a8:ae:
         c3:3b:32:7d:a8:e7:75:73:2a:bd:e8:6f:63:73:a8:97:b9:d1:
         07:83:65:f6:f5:df:d6:df:7f:1c:a2:db:07:ed:20:93:d7:8d:
         7f:da:3b:82:bb:b0:74:e9:5c:91:1a:fb:9a:0b:ca:56:81:0c:
         72:04:88:bf:de:30:72:af:ff:76:ca:d2:f0:3c:53:8f:7c:20:
         91:04:a3:0f:ca:2f:65:9e:8c:51:a0:d1:0a:c6:ff:1c:b4:33:
         16:2f:bc:ca:44:8d:88:4d:38:a7:d5:14:5f:64:7e:01:c8:73:
         e9:21:69:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:06:44 2026 by rpki-client