Manifest

$ rpki-client -vvf rpki.nellicus.net/repo/nellicus/3/DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.mft
File:                     DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.mft (raw, json)
Hash identifier:          qDkuQF1HEe0UTA5by3vUisx8ZPMVoHsY0GXhc624l9Q=
Subject key identifier:   1C:7D:EA:39:EE:C5:8E:0D:2C:4A:B7:48:A0:60:84:C0:E8:2C:32:4E
Authority key identifier: DD:17:5B:D4:FB:7F:1D:C2:36:DB:13:CD:2B:42:A6:45:90:AF:EC:5C
Certificate issuer:       /CN=7f9c05420b55c3ede703521d14d813758898042260f078b24d
Certificate serial:       51C69D17C68C8E70EF5AB62D06F31D9BFE2110E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864/7f9c05420b55c3ede703521d14d813758898042260f078b24d.cer
Subject info access:      rsync://rpki.nellicus.net/repo/nellicus/3/DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.mft
Manifest number:          CC
Signing time:             Tue 12 May 2026 07:27:39 +0000
Manifest this update:     Tue 12 May 2026 07:22:39 +0000
Manifest next update:     Wed 13 May 2026 09:53:39 +0000
Files and hashes:         1: DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.crl (hash: k/xJkrsoz+tcplVdZJ/bLAbjN8/MJ1PZEx8pnhuwKkA=)
                          2: 323630323a663438623a3a2f33362d3438203d3e203631393631.roa (hash: tF1TO5OePBirSA2MxPH7uXQfaSSl0HRibFaeUgy/1P4=)
                          3: 32332e3135312e3133322e302f32342d3234203d3e203631393631.roa (hash: v8No20hTrarlcWsm3WcVuQdnMeOU9NeFzlFcrLYahz4=)
Validation:               OK
Signature path:           rsync://rpki.nellicus.net/repo/nellicus/3/DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.crl
                          rsync://rpki.nellicus.net/repo/nellicus/3/DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864/7f9c05420b55c3ede703521d14d813758898042260f078b24d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864/f0e3e332-2e13-47b7-be3c-bd2f40db6864.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864/f0e3e332-2e13-47b7-be3c-bd2f40db6864.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 13 May 2026 09:53:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:c6:9d:17:c6:8c:8e:70:ef:5a:b6:2d:06:f3:1d:9b:fe:21:10:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f9c05420b55c3ede703521d14d813758898042260f078b24d
        Validity
            Not Before: May 12 07:22:39 2026 GMT
            Not After : May 13 09:53:39 2026 GMT
        Subject: CN=1C7DEA39EEC58E0D2C4AB748A06084C0E82C324E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:2e:c6:a0:f9:bb:68:01:22:e5:3a:57:e7:ab:
                    a2:87:8f:b9:40:af:68:3f:43:16:c8:e5:98:e7:19:
                    be:6f:5d:b7:14:19:af:c7:5b:b4:ab:63:97:6b:9f:
                    d3:9c:ce:d3:ac:ae:95:2f:f0:72:35:d1:a0:5b:62:
                    59:71:c7:f6:ea:13:c1:3a:3c:a9:15:4f:ba:93:b0:
                    4d:68:27:ef:4d:cd:ee:a1:87:09:ee:4b:c7:7c:31:
                    ba:7e:51:86:d6:64:27:07:c0:63:00:83:7b:2d:ce:
                    da:b3:5d:51:97:20:25:92:05:81:5b:b3:61:ec:b2:
                    90:e3:07:32:fe:ee:d4:50:d1:a7:61:ae:ad:2b:df:
                    af:d5:2e:06:6d:e6:c8:41:f1:25:29:dc:93:b7:b3:
                    c2:39:53:74:3d:ad:13:ec:44:32:9e:3e:bc:a4:47:
                    3f:23:ec:4b:ef:23:ea:72:ff:2b:ff:66:ed:05:d4:
                    ec:13:98:e8:1a:4c:af:30:c6:9c:48:7c:ef:51:c9:
                    af:5d:1f:56:c2:2d:62:04:87:9c:89:41:c4:49:1e:
                    cc:a3:ff:c4:da:ba:ca:0a:41:57:26:91:03:c5:a9:
                    ba:cc:ff:97:16:78:84:a5:f8:5b:77:3f:19:b8:bc:
                    77:6f:ab:5b:c5:9c:39:09:65:dd:e7:4e:9a:ac:47:
                    a3:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:7D:EA:39:EE:C5:8E:0D:2C:4A:B7:48:A0:60:84:C0:E8:2C:32:4E
            X509v3 Authority Key Identifier:
                keyid:DD:17:5B:D4:FB:7F:1D:C2:36:DB:13:CD:2B:42:A6:45:90:AF:EC:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.nellicus.net/repo/nellicus/3/DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864/7f9c05420b55c3ede703521d14d813758898042260f078b24d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.nellicus.net/repo/nellicus/3/DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:ea:3f:f6:29:e5:bc:4a:0d:ea:1f:32:10:05:73:a0:81:5b:
         6c:73:6c:c5:9d:a2:ea:66:00:48:2a:3b:28:54:c5:f8:65:8e:
         1f:16:06:0a:76:e7:59:ea:61:31:1b:ea:9e:34:c4:37:e7:16:
         c4:5b:88:00:b4:58:36:4b:77:fc:a6:3f:30:c6:4a:87:17:7b:
         e8:ac:93:34:46:d9:70:65:1d:76:2c:21:5a:05:a1:80:b9:2d:
         48:35:8e:31:c5:c8:da:dc:41:34:2f:13:8b:f4:df:ed:56:e0:
         8d:6c:56:94:68:cc:00:92:37:fc:45:cb:e5:70:96:44:6e:c9:
         6f:4b:52:2c:07:b2:f9:ad:c2:b2:77:81:aa:0a:40:a6:c2:d0:
         eb:8e:07:17:19:74:c4:b3:24:a4:8a:7d:b8:f2:13:97:59:0f:
         5e:6a:3c:c2:47:13:f7:b8:42:9b:50:e9:0e:0a:d7:61:4a:64:
         1c:26:46:d7:76:9a:b4:e4:78:10:62:a7:ff:7b:6f:dd:a7:06:
         2d:2f:fd:cd:71:de:98:4a:d9:74:fb:f1:1a:28:7d:2c:de:7d:
         ce:f4:70:f5:d4:e7:de:b2:85:85:3b:59:f5:2d:9b:51:a5:8d:
         6e:80:63:15:bd:d2:e4:12:03:e9:d8:cc:62:57:2a:da:23:53:
         f0:c3:85:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:29:49 2026 by rpki-client