Manifest

$ rpki-client -vvvf rpki.nellicus.net/repo/nellicus/3/DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.mft
File:                     DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.mft (raw, json)
Hash identifier:          9M++D6s7knXgFoEOMEqCQuHOZPODF0tqSkJxleK9wcw=
Subject key identifier:   F7:7E:12:53:D9:59:AB:A8:9F:B8:CE:91:04:7C:57:E3:E5:FE:40:94
Authority key identifier: DD:17:5B:D4:FB:7F:1D:C2:36:DB:13:CD:2B:42:A6:45:90:AF:EC:5C
Certificate issuer:       /CN=7f9c05420b55c3ede703521d14d813758898042260f078b24d
Certificate serial:       5EA7D0DE17A59F2EC82944CEB162CE32B9FC5F17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864/7f9c05420b55c3ede703521d14d813758898042260f078b24d.cer
Subject info access:      rsync://rpki.nellicus.net/repo/nellicus/3/DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.mft
Manifest number:          0195
Signing time:             Wed 23 Sep 2026 02:13:02 +0000
Manifest this update:     Wed 23 Sep 2026 02:08:02 +0000
Manifest next update:     Thu 24 Sep 2026 02:25:02 +0000
Files and hashes:         1: DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.crl (hash: Sdwm7XX2lx2JXycZoU050+W882oT7TOboNDpvBtQoi0=)
                          2: 323630323a663438623a3a2f33362d3438203d3e2037303130.roa (hash: Xb+aPiHNR5Ln915Gz5HbUVinqXFh6cSM0aLUbQZXqZY=)
                          3: 3139382e3230322e3139352e302f32342d3234203d3e2037303130.roa (hash: ijdjhUA/W8GrEHjWCkpsTOyiMWFsOJ2kKaXbr1wTlms=)
                          4: 32332e3135312e3133322e302f32342d3234203d3e2037303130.roa (hash: tctQKM2NsEf1NWEg9XqqGOTDGObWKmiIUoceijkBKhI=)
Validation:               OK
Signature path:           rsync://rpki.nellicus.net/repo/nellicus/3/DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.crl
                          rsync://rpki.nellicus.net/repo/nellicus/3/DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864/7f9c05420b55c3ede703521d14d813758898042260f078b24d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864/f0e3e332-2e13-47b7-be3c-bd2f40db6864.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864/f0e3e332-2e13-47b7-be3c-bd2f40db6864.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 02:25:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:a7:d0:de:17:a5:9f:2e:c8:29:44:ce:b1:62:ce:32:b9:fc:5f:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f9c05420b55c3ede703521d14d813758898042260f078b24d
        Validity
            Not Before: Sep 23 02:08:02 2026 GMT
            Not After : Sep 24 02:25:02 2026 GMT
        Subject: CN=F77E1253D959ABA89FB8CE91047C57E3E5FE4094
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:16:20:53:82:c9:8f:16:6d:f7:da:5a:1f:96:
                    e6:52:67:0b:02:0f:16:5e:40:1d:e1:36:4d:cd:c8:
                    76:52:44:c5:e5:e8:5c:13:4a:82:02:22:17:03:ae:
                    4a:12:c9:81:a2:a0:c3:6f:3e:40:fc:d6:e1:b4:b2:
                    4e:dd:d5:00:82:54:42:c0:e4:6a:a8:18:e1:b2:68:
                    03:33:f3:9b:f9:c9:8f:35:31:9b:e5:e8:37:ba:dd:
                    63:13:09:fd:44:fe:5e:e6:6a:2c:73:4c:3c:5c:6e:
                    b0:57:d3:9e:8d:51:b7:da:a1:4c:54:bf:49:8c:e5:
                    fc:4b:a2:3e:5a:09:88:a3:10:87:25:50:73:b9:9f:
                    cb:6f:6c:89:25:d1:a8:0c:47:49:3e:34:57:f6:ab:
                    45:ae:65:2a:84:d6:ee:14:83:9f:97:32:c2:a7:c8:
                    32:11:98:17:71:73:70:2b:df:90:19:8d:45:ad:c7:
                    3f:9b:d9:6a:97:67:2b:ce:62:7a:d9:73:de:98:42:
                    ec:4f:c2:9c:5e:0e:9b:32:31:0a:12:63:df:22:f3:
                    78:d8:64:e3:f9:d5:f0:6b:5c:3f:18:df:9f:5f:0f:
                    68:b5:f4:86:3a:7e:12:fa:5e:65:59:11:c1:f8:d3:
                    35:cb:d1:3c:12:2f:24:68:71:b4:11:8d:f5:9a:cf:
                    3a:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:7E:12:53:D9:59:AB:A8:9F:B8:CE:91:04:7C:57:E3:E5:FE:40:94
            X509v3 Authority Key Identifier:
                keyid:DD:17:5B:D4:FB:7F:1D:C2:36:DB:13:CD:2B:42:A6:45:90:AF:EC:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.nellicus.net/repo/nellicus/3/DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864/7f9c05420b55c3ede703521d14d813758898042260f078b24d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.nellicus.net/repo/nellicus/3/DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:c3:d4:bf:59:60:24:f4:69:5d:2b:4f:2c:67:22:a2:60:95:
         01:54:fb:7f:9e:78:25:9c:96:e5:54:8d:42:04:95:fd:9c:37:
         12:5c:40:2d:6f:db:fa:d1:f4:3b:de:27:b6:bb:7d:ea:8b:ca:
         f6:88:02:ff:ca:18:a7:df:53:23:45:58:03:29:86:81:a1:ef:
         32:69:6d:ce:6b:de:30:32:b7:4a:a3:cf:e9:4e:f5:e2:71:cd:
         f3:38:b3:e4:ea:df:e1:46:25:91:0f:1f:0c:17:63:6e:8d:b5:
         be:8b:75:25:8a:64:5a:02:d1:d4:61:b7:1e:09:16:ae:ef:0f:
         2c:50:4c:b8:f3:ce:18:7a:58:9e:cb:80:d6:e9:4b:6d:b6:a6:
         92:6a:e7:db:54:3a:09:6c:8a:c6:13:ed:38:1d:5a:cd:0d:de:
         19:fc:6a:e8:59:f1:b3:fc:b5:06:e0:c7:0f:68:b2:b9:b2:cf:
         ca:91:e4:0b:10:02:61:bb:4d:fd:be:87:44:63:89:4c:bf:5d:
         19:9b:3b:2d:00:f4:3d:93:b2:a4:ec:ae:c6:08:0f:43:c4:82:
         c8:4b:3d:e6:3c:9b:8f:0b:8e:64:e8:14:e5:d4:86:c5:b2:f3:
         85:03:05:8f:be:5b:3a:77:dc:a3:2d:54:86:12:cf:9a:d2:53:
         44:ce:a2:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 13:01:32 2026 by rpki-client