Manifest

$ rpki-client -vvf rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft
File:                     4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft (raw, json)
Hash identifier:          iamFhqUp2W+dUG9yaGsUpMXGl836xpH+YzXfVCTBcyE=
Subject key identifier:   65:16:85:5E:EE:26:0E:05:2E:2C:D3:20:22:37:29:94:0F:2C:4D:81
Authority key identifier: 4E:9A:6C:18:F3:49:B3:95:C3:1C:33:BB:7F:9B:9F:58:17:BD:E9:A8
Certificate issuer:       /CN=4e9a6c18f349b395c31c33bb7f9b9f5817bde9a8
Certificate serial:       296724E17C139795BA4F0A330B504DE410E15454
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TppsGPNJs5XDHDO7f5ufWBe96ag.cer
Subject info access:      rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft
Manifest number:          033E
Signing time:             Thu 13 Aug 2026 04:04:00 +0000
Manifest this update:     Thu 13 Aug 2026 03:59:00 +0000
Manifest next update:     Fri 14 Aug 2026 06:47:00 +0000
Files and hashes:         1: 323030313a3637383a3565343a3a2f34382d3438203d3e2037303130.roa (hash: NgMsiuiWolklNu0dHOm4jeyy4AZSxHgK7gSzz1LYcr4=)
                          2: 4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.crl (hash: 1IEA+UqAIroeWYcDu0bdsvXyic7bZqKITX7MaML3ruY=)
                          3: 3138352e3230342e31322e302f32332d3234203d3e2037303130.roa (hash: jYTgcOfbk9bjq+6wsdfbqqj91vyiJUyqR79FO1mbmrc=)
                          4: 326130613a663034303a3a2f32392d3239203d3e2037303130.roa (hash: axOAY/addUVO+GjS/O49vvKsNcuSOeEME1u8NtFgMAw=)
                          5: 3138352e3230342e31342e302f32332d3234203d3e20323033393339.roa (hash: JQwkT1z8uimpbN2Jt8jPn0T3yATPeIOHsQosuzjWZdg=)
Validation:               OK
Signature path:           rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.crl
                          rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TppsGPNJs5XDHDO7f5ufWBe96ag.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Aug 2026 01:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:67:24:e1:7c:13:97:95:ba:4f:0a:33:0b:50:4d:e4:10:e1:54:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e9a6c18f349b395c31c33bb7f9b9f5817bde9a8
        Validity
            Not Before: Aug 13 03:59:00 2026 GMT
            Not After : Aug 14 06:47:00 2026 GMT
        Subject: CN=6516855EEE260E052E2CD320223729940F2C4D81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:97:f4:bc:08:56:78:71:c7:a5:f1:f4:67:62:
                    03:95:05:62:ba:c9:bd:5e:0e:9d:3d:cd:84:2a:cf:
                    d5:7a:a0:43:a4:28:f5:af:32:d8:47:43:61:40:76:
                    f4:22:f6:0d:03:0e:a9:08:ca:2a:d7:dc:6e:f9:55:
                    e0:d2:a4:f6:a1:58:2e:8b:aa:a2:43:c4:e7:2b:04:
                    16:3f:68:bd:c5:23:bf:12:f1:5d:6c:7d:e0:a6:3d:
                    d6:08:fe:c4:ff:c3:a6:52:2d:b3:36:cc:ee:dd:75:
                    70:1c:da:ce:7f:e6:2e:f2:ff:b3:e8:c4:24:97:79:
                    27:9b:83:0a:34:b9:5b:d6:92:60:ae:ea:6a:cd:57:
                    18:79:9a:15:f1:66:d1:a6:ac:f5:f0:a5:41:c8:7f:
                    06:e1:03:05:e1:17:22:6b:ac:30:0f:df:e3:57:8e:
                    40:e9:85:55:87:da:5c:9e:50:e6:81:69:b5:c8:55:
                    ff:0d:0f:65:89:43:6a:89:f4:07:bf:8b:a9:d4:8e:
                    39:4d:11:71:42:92:b4:60:bb:3b:bb:65:a8:f1:18:
                    50:61:c1:28:22:65:7a:d2:0d:af:ed:bc:74:3b:13:
                    23:ca:b8:0c:2a:94:38:de:b0:cf:b1:c3:2e:d2:9a:
                    51:2e:85:ab:e5:12:67:37:5d:87:cb:9f:6d:56:db:
                    9d:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:16:85:5E:EE:26:0E:05:2E:2C:D3:20:22:37:29:94:0F:2C:4D:81
            X509v3 Authority Key Identifier:
                keyid:4E:9A:6C:18:F3:49:B3:95:C3:1C:33:BB:7F:9B:9F:58:17:BD:E9:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TppsGPNJs5XDHDO7f5ufWBe96ag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:45:72:d5:df:99:2d:29:78:35:cd:75:ea:4b:c7:b4:d0:04:
         34:d9:09:98:e4:9a:6f:2f:97:cd:e0:18:fa:1b:ac:0b:7e:c0:
         1d:5f:72:fb:1a:ff:ec:2c:f6:55:b6:7b:42:45:37:52:9a:4e:
         e0:c5:3a:75:54:8b:ed:3b:41:20:ba:c4:b0:38:98:a5:4e:d0:
         3e:80:f5:24:b7:45:dd:3b:83:57:cc:c7:8c:0e:2c:74:30:62:
         13:ec:be:6b:0d:e9:61:65:80:7d:0d:0a:02:e7:8d:16:66:84:
         fa:23:37:68:ca:ac:60:62:3e:90:c3:93:3b:7c:fa:b8:e1:d0:
         97:82:a2:fe:a0:85:f2:b3:82:f7:ee:35:69:da:3e:68:9d:c7:
         0f:2e:73:82:d9:3f:78:da:dc:ed:ef:d5:e2:4e:27:85:b6:ff:
         74:0d:cf:50:56:aa:54:c7:fd:79:88:a0:27:e2:bc:7f:90:6e:
         83:a4:65:46:7f:4f:32:f3:d5:a1:d2:92:0d:bd:27:ce:15:a1:
         c9:2a:b8:d4:dc:04:c6:d1:1b:d8:15:cd:40:ac:de:6b:3e:29:
         ec:8d:6e:63:98:aa:dd:d1:95:03:3f:f9:3e:e2:1a:21:20:f6:
         9d:6a:4b:13:02:64:9c:bf:64:05:ed:a6:6d:3e:3f:35:37:b2:
         bb:1e:5a:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 09:00:25 2026 by rpki-client