Manifest

$ rpki-client -vvf rpki.nellicus.net/repo/nellicus/3/DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.mft
File:                     DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.mft (raw, json)
Hash identifier:          +WfHbbS7KZJ8SvQs2nH2XdQwnUd+YvbYc9Ii076ELlo=
Subject key identifier:   89:14:A4:FB:F7:96:C0:35:C4:53:43:DC:9E:1D:23:A7:BA:23:4A:51
Authority key identifier: DD:17:5B:D4:FB:7F:1D:C2:36:DB:13:CD:2B:42:A6:45:90:AF:EC:5C
Certificate issuer:       /CN=7f9c05420b55c3ede703521d14d813758898042260f078b24d
Certificate serial:       2157021C77FCB361CDC024D838A683559D6E1198
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864/7f9c05420b55c3ede703521d14d813758898042260f078b24d.cer
Subject info access:      rsync://rpki.nellicus.net/repo/nellicus/3/DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.mft
Manifest number:          0142
Signing time:             Thu 23 Jul 2026 15:14:26 +0000
Manifest this update:     Thu 23 Jul 2026 15:09:26 +0000
Manifest next update:     Fri 24 Jul 2026 16:40:26 +0000
Files and hashes:         1: 3139382e3230322e3139352e302f32342d3234203d3e2037303130.roa (hash: ijdjhUA/W8GrEHjWCkpsTOyiMWFsOJ2kKaXbr1wTlms=)
                          2: 32332e3135312e3133322e302f32342d3234203d3e2037303130.roa (hash: tctQKM2NsEf1NWEg9XqqGOTDGObWKmiIUoceijkBKhI=)
                          3: DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.crl (hash: i+BcvcvK/ZGfPLwd+bZXKNsuqLcqwZ4RsjRig9RVVbU=)
                          4: 323630323a663438623a3a2f33362d3438203d3e2037303130.roa (hash: Xb+aPiHNR5Ln915Gz5HbUVinqXFh6cSM0aLUbQZXqZY=)
Validation:               OK
Signature path:           rsync://rpki.nellicus.net/repo/nellicus/3/DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.crl
                          rsync://rpki.nellicus.net/repo/nellicus/3/DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864/7f9c05420b55c3ede703521d14d813758898042260f078b24d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864/f0e3e332-2e13-47b7-be3c-bd2f40db6864.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864/f0e3e332-2e13-47b7-be3c-bd2f40db6864.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:40:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:57:02:1c:77:fc:b3:61:cd:c0:24:d8:38:a6:83:55:9d:6e:11:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f9c05420b55c3ede703521d14d813758898042260f078b24d
        Validity
            Not Before: Jul 23 15:09:26 2026 GMT
            Not After : Jul 24 16:40:26 2026 GMT
        Subject: CN=8914A4FBF796C035C45343DC9E1D23A7BA234A51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:9b:02:06:05:b7:d7:16:94:58:61:42:90:70:
                    4a:aa:21:23:29:86:87:8d:00:1d:15:28:f1:b8:50:
                    4e:7f:4d:39:f2:26:0f:a5:ed:73:ee:cb:06:8b:71:
                    7b:36:45:58:53:3a:06:13:2c:f7:15:0c:c1:95:d9:
                    12:25:e5:8a:fe:28:f6:51:5e:2a:4a:2a:e3:48:e8:
                    bd:a1:7f:0b:fc:eb:00:82:ab:77:f7:f8:4b:f1:47:
                    8c:7e:51:57:1b:8b:91:39:c5:43:f7:a4:25:ea:d8:
                    93:05:ec:38:5f:6f:e1:50:4c:56:70:ad:c8:50:36:
                    42:b8:59:72:4a:de:e6:cd:78:f0:32:72:e9:b9:be:
                    fc:e8:a6:22:22:40:98:bf:ca:c9:d5:54:22:df:d2:
                    9e:ca:c6:99:1c:c8:1f:c7:82:32:88:b1:b3:7d:70:
                    4d:56:c5:9e:97:bd:e2:18:f2:12:34:3a:63:35:bf:
                    5a:31:1d:46:3d:65:df:05:46:0f:0e:23:c7:a2:a9:
                    31:e9:6d:a5:91:38:99:9b:11:c8:c8:7f:df:f1:b8:
                    b2:24:3b:34:48:45:56:5e:47:7c:f8:2d:88:e7:f6:
                    24:d9:f4:08:b0:cc:b4:b0:6e:9e:3a:06:e0:e2:cb:
                    20:07:20:23:6f:59:98:27:e6:98:ab:25:74:54:37:
                    7d:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:14:A4:FB:F7:96:C0:35:C4:53:43:DC:9E:1D:23:A7:BA:23:4A:51
            X509v3 Authority Key Identifier:
                keyid:DD:17:5B:D4:FB:7F:1D:C2:36:DB:13:CD:2B:42:A6:45:90:AF:EC:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.nellicus.net/repo/nellicus/3/DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864/7f9c05420b55c3ede703521d14d813758898042260f078b24d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.nellicus.net/repo/nellicus/3/DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:08:d0:bc:5a:c1:53:e9:6b:12:51:26:4f:dc:45:5a:51:c5:
         aa:d2:9f:d0:08:a0:12:3b:3d:90:88:55:db:fd:90:f7:08:44:
         04:5c:77:31:64:6e:bc:97:21:ec:cd:fa:48:96:59:37:4e:0c:
         8f:ac:33:07:9f:dd:81:e2:1d:ea:98:fe:87:02:9d:b8:2e:7c:
         b3:67:69:d6:91:fe:91:c2:0d:a1:44:0d:fa:15:90:07:91:a2:
         b3:16:2b:5d:57:61:82:32:1a:ea:d6:02:48:15:5d:7b:8f:f5:
         48:00:05:1f:bd:33:02:8f:40:98:3f:d5:99:43:30:12:d5:9c:
         10:93:fc:da:f2:6f:af:ce:86:93:4b:0d:2c:cb:ff:b2:7e:a9:
         9e:09:85:96:d5:30:5b:08:16:2f:97:1f:bd:5d:ad:1a:09:a5:
         d2:54:0a:6c:5c:2b:13:62:f4:17:b3:ad:21:fa:cd:46:fb:8b:
         43:a4:4a:e9:b7:63:e4:48:d7:72:42:f5:e1:f3:8e:a7:3c:2a:
         f1:da:db:2f:68:c4:a4:25:55:74:93:66:89:9a:a3:85:d3:70:
         eb:89:3e:e4:79:cd:4c:06:95:42:81:93:dc:b8:bc:06:8c:8d:
         45:a9:50:14:88:64:f4:cd:1c:a4:48:1d:b3:2f:a6:6e:14:6e:
         b8:e4:97:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:05:56 2026 by rpki-client