Manifest

$ rpki-client -vvf rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft
File:                     4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft (raw, json)
Hash identifier:          EBFCDWt0Hy5oxy5AMfIdWxNDTtc3IpIyx3dAruP6Sn8=
Subject key identifier:   84:D1:15:08:94:32:77:5F:CA:31:C4:05:F2:45:CF:7D:36:21:7C:D8
Authority key identifier: 4E:9A:6C:18:F3:49:B3:95:C3:1C:33:BB:7F:9B:9F:58:17:BD:E9:A8
Certificate issuer:       /CN=4e9a6c18f349b395c31c33bb7f9b9f5817bde9a8
Certificate serial:       4BD7AEE1F1AAE23E6CDDE70FE581078E9BA1ECEE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TppsGPNJs5XDHDO7f5ufWBe96ag.cer
Subject info access:      rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft
Manifest number:          02E7
Signing time:             Thu 25 Jun 2026 06:52:21 +0000
Manifest this update:     Thu 25 Jun 2026 06:47:21 +0000
Manifest next update:     Fri 26 Jun 2026 10:06:21 +0000
Files and hashes:         1: 4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.crl (hash: Acry3N1sfyhPk3AmSjJrrTVBUnalWX/wODfeFBszkjQ=)
                          2: 3138352e3230342e31342e302f32332d3234203d3e20323033393339.roa (hash: JQwkT1z8uimpbN2Jt8jPn0T3yATPeIOHsQosuzjWZdg=)
                          3: 326130613a663034303a3a2f32392d3239203d3e203631393631.roa (hash: q7WGQJ75bRybHehoGPB487LwawVW780GrlEzs+BTdx4=)
                          4: 3138352e3230342e31322e302f32332d3234203d3e203631393631.roa (hash: d3/k+6QX5UseLeqUWTi+l6cD1s9fc/SSlpG2TVD7AKo=)
                          5: 323030313a3637383a3565343a3a2f34382d3438203d3e20323034303132.roa (hash: fxsQm1q2pmZhASyGNHE1h8SCDsGuI34aljSVVL+enkQ=)
                          6: 323030313a3637383a3565343a3a2f34382d3438203d3e20343031353531.roa (hash: XAuPoyWgqk/2VSGKnl/UxA3UxeQIFy53PwlvcLnn9Pc=)
                          7: 323030313a3637383a3565343a3a2f34382d3438203d3e203631393631.roa (hash: nbAVFkQiqft9sHl9Hh+TY61io/BSlt5tgmWs0gncRuY=)
Validation:               OK
Signature path:           rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.crl
                          rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TppsGPNJs5XDHDO7f5ufWBe96ag.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 25 Jun 2026 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:d7:ae:e1:f1:aa:e2:3e:6c:dd:e7:0f:e5:81:07:8e:9b:a1:ec:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e9a6c18f349b395c31c33bb7f9b9f5817bde9a8
        Validity
            Not Before: Jun 25 06:47:21 2026 GMT
            Not After : Jun 26 10:06:21 2026 GMT
        Subject: CN=84D115089432775FCA31C405F245CF7D36217CD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:46:23:7f:0c:48:17:ba:70:69:cb:08:e9:36:
                    17:ca:d8:85:4d:5f:42:91:ad:93:ca:68:78:b6:5c:
                    be:89:1c:01:66:99:4f:25:03:5a:11:94:b9:0f:10:
                    2a:c9:27:bb:ae:3b:f5:38:5c:b0:f8:cb:57:a7:f5:
                    c5:17:04:ec:60:60:76:9f:83:a3:bc:8f:2d:13:66:
                    31:6b:12:97:df:91:8e:c9:f2:86:41:8d:2e:5c:6e:
                    c9:e8:43:ad:5a:11:42:50:a1:06:16:42:dd:ac:c5:
                    2e:04:96:11:ce:c5:7e:20:d5:de:e9:0b:98:cd:b1:
                    f0:85:bb:34:b8:13:46:53:3c:c4:5f:bf:b9:f1:e3:
                    b8:13:e7:70:c3:c0:61:02:9c:2a:78:80:8b:43:99:
                    50:6c:c8:2b:6b:55:07:5f:6b:17:3f:2d:8c:85:99:
                    d4:60:6c:23:fa:8c:36:cc:cd:37:3f:7b:d7:12:03:
                    9c:7d:6e:7b:1b:bb:e0:1a:59:be:80:c8:17:cf:2b:
                    69:02:4e:f6:21:ab:11:7d:5a:83:2e:13:65:d7:3a:
                    dc:d4:c1:97:78:ae:67:c0:ee:c7:45:9f:16:d6:65:
                    8a:fb:9d:dd:fc:a0:f3:3c:a0:cc:30:27:14:70:e7:
                    ca:9f:c4:a7:8e:9f:1b:52:43:34:cd:3c:6d:92:d0:
                    d0:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:D1:15:08:94:32:77:5F:CA:31:C4:05:F2:45:CF:7D:36:21:7C:D8
            X509v3 Authority Key Identifier:
                keyid:4E:9A:6C:18:F3:49:B3:95:C3:1C:33:BB:7F:9B:9F:58:17:BD:E9:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TppsGPNJs5XDHDO7f5ufWBe96ag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:80:fa:7c:1d:95:aa:55:7f:81:3f:d2:4f:97:a4:cb:0b:ac:
         2c:05:af:04:8f:73:db:55:17:b8:7d:9f:ea:8d:78:99:87:de:
         32:fe:06:89:20:9c:fe:ef:29:87:b7:92:be:8d:42:01:c7:44:
         45:b7:17:8f:3a:7c:2c:b6:76:1c:db:d7:fa:75:1f:de:ad:58:
         80:64:bc:63:a6:ce:06:d0:25:1e:98:8f:f1:a0:fe:53:46:2d:
         d7:c7:c1:0c:22:6d:97:f2:52:68:f8:aa:8d:17:37:8b:d0:50:
         00:ed:cf:5d:52:f3:21:da:6a:68:e6:11:bb:09:90:56:12:b7:
         d9:da:89:15:27:7c:84:ac:98:00:5f:90:a5:d2:30:3e:71:57:
         03:2c:79:2f:9f:f6:48:57:fc:e0:5d:0d:b3:37:6b:6c:c5:88:
         05:6e:f5:f3:3c:49:4b:90:d9:77:c8:70:54:10:7f:59:59:fd:
         87:53:61:6a:26:ce:3f:1f:fe:ac:4d:c6:b6:b5:55:21:8d:17:
         f5:62:4a:81:ae:3a:82:7e:98:21:4c:2a:a7:02:98:a8:33:98:
         96:50:2f:4f:61:32:9e:d1:f3:2a:77:5d:24:89:6d:93:c2:88:
         9b:e7:43:33:71:d0:d4:7e:6e:de:c0:80:78:6b:37:e0:ed:1f:
         b1:b9:5e:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 09:37:20 2026 by rpki-client