$ rpki-client -vvf rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft File: 4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft (raw, json) Hash identifier: SX+Ct8kUCK9pAgpTmupHNOFD5NB2kTkvePtTajwAlgM= Subject key identifier: B2:19:44:9A:87:C2:36:5D:C1:FF:60:F7:8C:50:AC:B5:DD:82:46:19 Authority key identifier: 4E:9A:6C:18:F3:49:B3:95:C3:1C:33:BB:7F:9B:9F:58:17:BD:E9:A8 Certificate issuer: /CN=4e9a6c18f349b395c31c33bb7f9b9f5817bde9a8 Certificate serial: 68F37FF226FE9FFC4D11E2ACE58249CEA7D74742 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TppsGPNJs5XDHDO7f5ufWBe96ag.cer Subject info access: rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft Manifest number: 011F Signing time: Tue 29 Jul 2025 16:27:03 +0000 Manifest this update: Tue 29 Jul 2025 16:22:03 +0000 Manifest next update: Wed 30 Jul 2025 17:05:03 +0000 Files and hashes: 1: 3138352e3230342e31342e302f32332d3233203d3e20323033393339.roa (hash: 0iU1VE4oIBeR0g+kEvaxFQYjnK8h1fW0reMHFIiSAYk=) 2: 323030313a3637383a3565343a3a2f34382d3438203d3e20343031353531.roa (hash: 4UYrDw3R1HMApdgBpMB/GcyfbyVxIeygboeA0NGcRKA=) 3: 326130613a663034303a3a2f32392d3239203d3e203631393631.roa (hash: n9oD82N/Oc74KjefJWuXbdniXyTRuYdzVFV6P1uLFxM=) 4: 323030313a3637383a3565343a3a2f34382d3438203d3e203631393631.roa (hash: 9lXsRq2vH27QU6oONZHHcOI2KgKrR7I1qDb4jmPN0NI=) 5: 3138352e3230342e31322e302f32332d3233203d3e203631393631.roa (hash: 05KBv20ho05+9nNhARljl3KvN1w1xbUcP6YBmhidjZI=) 6: 323030313a3637383a3565343a3a2f34382d3438203d3e20323034303132.roa (hash: aQtSJ+DrPdjI6tdPjH35DjDz8hbObLwmapnYguKW8IE=) 7: 4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.crl (hash: z72pf3+QYU0+dxI7sAir5isCyksKK1wNw5U1V0NENV0=) Validation: OK Signature path: rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.crl rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft rsync://rpki.ripe.net/repository/DEFAULT/TppsGPNJs5XDHDO7f5ufWBe96ag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 30 Jul 2025 14:07:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:f3:7f:f2:26:fe:9f:fc:4d:11:e2:ac:e5:82:49:ce:a7:d7:47:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e9a6c18f349b395c31c33bb7f9b9f5817bde9a8 Validity Not Before: Jul 29 16:22:03 2025 GMT Not After : Jul 30 17:05:03 2025 GMT Subject: CN=B219449A87C2365DC1FF60F78C50ACB5DD824619 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:74:91:d5:b0:41:e3:93:08:b2:aa:08:14:b8: 83:86:e2:36:dd:b5:f2:88:53:33:3c:a2:e9:de:86: d0:71:28:7d:12:31:c5:cf:65:f6:f2:2a:13:45:80: b8:b5:1f:fe:72:02:1f:ab:11:47:05:94:88:b3:92: 15:21:c3:84:2f:da:25:5b:5c:c2:b5:01:93:64:69: a0:87:f6:e2:64:e9:8b:c0:49:52:11:f6:af:41:a4: 1d:b4:19:40:78:54:e1:e7:21:f2:17:97:7c:f5:1c: 17:e0:5c:bd:a3:9d:be:e9:39:71:29:52:82:ac:55: eb:37:1b:93:df:6f:0c:83:dc:95:f6:a0:d0:9f:26: 57:4d:17:04:a3:2b:74:a7:d2:be:d6:5f:91:af:8d: 48:58:84:48:de:77:0b:66:aa:6f:75:f1:7d:1c:25: 9e:bb:3d:da:40:e5:6a:99:7a:61:71:9e:5c:ea:36: f3:86:1f:98:f2:10:ea:dd:02:3e:e7:89:68:b7:17: 9a:b4:f6:52:ce:59:09:6b:f1:83:9e:57:f1:42:d3: 56:f6:fa:fc:fc:32:ab:1a:5a:44:60:af:11:8b:39: 72:7b:8f:96:f5:f6:a3:14:8b:f9:80:eb:a7:35:54: cd:2e:14:10:ce:4e:48:6b:e6:60:db:f6:f4:a6:25: 28:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:19:44:9A:87:C2:36:5D:C1:FF:60:F7:8C:50:AC:B5:DD:82:46:19 X509v3 Authority Key Identifier: keyid:4E:9A:6C:18:F3:49:B3:95:C3:1C:33:BB:7F:9B:9F:58:17:BD:E9:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TppsGPNJs5XDHDO7f5ufWBe96ag.cer Subject Information Access: Signed Object - URI:rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:9b:af:07:1e:c6:95:e9:71:8c:6c:9a:f3:4f:21:40:24:a1: 99:0c:ad:27:24:fe:78:97:e4:10:c1:1e:28:77:c6:a8:d7:f7: 0e:75:bd:e9:da:eb:6e:1a:38:92:0b:3c:8e:4b:32:91:91:a9: 60:c7:04:f1:4a:1b:ad:96:7e:0a:38:96:26:3f:74:80:f0:f6: 86:bb:40:e0:67:dc:18:bf:a5:2c:99:6e:47:c9:a2:d1:9d:a0: 69:46:fc:72:96:6c:8f:cf:ba:8c:ad:84:19:23:e0:18:1c:49: 15:51:69:89:18:5c:26:7b:1e:08:10:6a:c0:dd:f4:2b:21:a7: ba:78:8b:14:e4:72:a5:9f:32:df:64:2c:be:39:e7:cc:4f:b3: 7a:75:60:b4:5b:f7:78:9b:07:01:bf:40:fd:e9:eb:18:55:87: 8a:93:50:00:38:4b:03:4f:80:db:ac:7e:d1:22:d2:de:16:e8: 0a:ff:e5:8a:56:e0:2b:c9:4c:7e:13:51:45:13:41:a9:93:ae: 7e:2e:89:25:ab:ee:33:78:78:65:05:52:3e:23:64:15:7f:c2: 1c:d1:86:c5:11:50:46:21:2b:cf:59:a2:19:f5:df:5f:09:8c: 17:bf:23:88:b5:27:0c:48:e1:99:19:e7:87:d8:ca:d3:45:2b: ec:ea:37:97 -----BEGIN CERTIFICATE----- MIIE4TCCA8mgAwIBAgIUaPN/8ib+n/xNEeKs5YJJzqfXR0IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGU5YTZjMThmMzQ5YjM5NWMzMWMzM2JiN2Y5YjlmNTgx N2JkZTlhODAeFw0yNTA3MjkxNjIyMDNaFw0yNTA3MzAxNzA1MDNaMDMxMTAvBgNV BAMTKEIyMTk0NDlBODdDMjM2NURDMUZGNjBGNzhDNTBBQ0I1REQ4MjQ2MTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHdJHVsEHjkwiyqggUuIOG4jbd tfKIUzM8ounehtBxKH0SMcXPZfbyKhNFgLi1H/5yAh+rEUcFlIizkhUhw4Qv2iVb XMK1AZNkaaCH9uJk6YvASVIR9q9BpB20GUB4VOHnIfIXl3z1HBfgXL2jnb7pOXEp UoKsVes3G5PfbwyD3JX2oNCfJldNFwSjK3Sn0r7WX5GvjUhYhEjedwtmqm918X0c JZ67PdpA5WqZemFxnlzqNvOGH5jyEOrdAj7niWi3F5q09lLOWQlr8YOeV/FC01b2 +vz8MqsaWkRgrxGLOXJ7j5b19qMUi/mA66c1VM0uFBDOTkhr5mDb9vSmJSjNAgMB AAGjggHrMIIB5zAdBgNVHQ4EFgQUshlEmofCNl3B/2D3jFCstd2CRhkwHwYDVR0j BBgwFoAUTppsGPNJs5XDHDO7f5ufWBe96agwDgYDVR0PAQH/BAQDAgeAMGcGA1Ud HwRgMF4wXKBaoFiGVnJzeW5jOi8vcnBraS5uZWxsaWN1cy5uZXQvcmVwby9uZWxs aWN1cy8xLzRFOUE2QzE4RjM0OUIzOTVDMzFDMzNCQjdGOUI5RjU4MTdCREU5QTgu Y3JsMGQGCCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJp cGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9UcHBzR1BOSnM1WERIRE83ZjV1ZldC ZTk2YWcuY2VyMHIGCCsGAQUFBwELBGYwZDBiBggrBgEFBQcwC4ZWcnN5bmM6Ly9y cGtpLm5lbGxpY3VzLm5ldC9yZXBvL25lbGxpY3VzLzEvNEU5QTZDMThGMzQ5QjM5 NUMzMUMzM0JCN0Y5QjlGNTgxN0JERTlBOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsG AQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAH+brwcexpXpcYxs mvNPIUAkoZkMrSck/niX5BDBHih3xqjX9w51vena624aOJILPI5LMpGRqWDHBPFK G62Wfgo4liY/dIDw9oa7QOBn3Bi/pSyZbkfJotGdoGlG/HKWbI/PuoythBkj4Bgc SRVRaYkYXCZ7HggQasDd9Cshp7p4ixTkcqWfMt9kLL4558xPs3p1YLRb93ibBwG/ QP3p6xhVh4qTUAA4SwNPgNusftEi0t4W6Ar/5YpW4CvJTH4TUUUTQamTrn4uiSWr 7jN4eGUFUj4jZBV/whzRhsURUEYhK89Zohn1318JjBe/I4i1JwxI4ZkZ54fYytNF K+zqN5c= -----END CERTIFICATE-----Generated at Tue Jul 29 23:43:57 2025 by rpki-client