Manifest

$ rpki-client -vvvf rpki.nellicus.net/repo/nellicus/3/DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.mft
File:                     DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.mft (raw, json)
Hash identifier:          MSf7eLMXVDnKPvY1RatB8gXWjFyMzxsd393M47JBbQQ=
Subject key identifier:   17:DF:BB:0C:3A:AB:A4:2D:1D:7F:5F:C0:17:44:08:D9:83:C9:48:D2
Authority key identifier: DD:17:5B:D4:FB:7F:1D:C2:36:DB:13:CD:2B:42:A6:45:90:AF:EC:5C
Certificate issuer:       /CN=7f9c05420b55c3ede703521d14d813758898042260f078b24d
Certificate serial:       7B0010B17EBC9AAB32099DB5432701F451FF6F1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864/7f9c05420b55c3ede703521d14d813758898042260f078b24d.cer
Subject info access:      rsync://rpki.nellicus.net/repo/nellicus/3/DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.mft
Manifest number:          016F
Signing time:             Wed 26 Aug 2026 11:31:27 +0000
Manifest this update:     Wed 26 Aug 2026 11:26:27 +0000
Manifest next update:     Thu 27 Aug 2026 13:31:27 +0000
Files and hashes:         1: 323630323a663438623a3a2f33362d3438203d3e2037303130.roa (hash: Xb+aPiHNR5Ln915Gz5HbUVinqXFh6cSM0aLUbQZXqZY=)
                          2: 3139382e3230322e3139352e302f32342d3234203d3e2037303130.roa (hash: ijdjhUA/W8GrEHjWCkpsTOyiMWFsOJ2kKaXbr1wTlms=)
                          3: DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.crl (hash: ZM7iTI0vuiL754iJRFEEDM0ASxeFuLY3U4fZU3z4aSc=)
                          4: 32332e3135312e3133322e302f32342d3234203d3e2037303130.roa (hash: tctQKM2NsEf1NWEg9XqqGOTDGObWKmiIUoceijkBKhI=)
Validation:               OK
Signature path:           rsync://rpki.nellicus.net/repo/nellicus/3/DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.crl
                          rsync://rpki.nellicus.net/repo/nellicus/3/DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864/7f9c05420b55c3ede703521d14d813758898042260f078b24d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864/f0e3e332-2e13-47b7-be3c-bd2f40db6864.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864/f0e3e332-2e13-47b7-be3c-bd2f40db6864.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 13:31:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:00:10:b1:7e:bc:9a:ab:32:09:9d:b5:43:27:01:f4:51:ff:6f:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f9c05420b55c3ede703521d14d813758898042260f078b24d
        Validity
            Not Before: Aug 26 11:26:27 2026 GMT
            Not After : Aug 27 13:31:27 2026 GMT
        Subject: CN=17DFBB0C3AABA42D1D7F5FC0174408D983C948D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:2d:1d:fb:a3:bf:28:95:4c:65:95:6d:b8:9a:
                    65:d0:0e:f4:dc:b1:d2:b8:d8:62:fd:ba:ea:93:78:
                    eb:2c:05:6e:e5:b1:43:85:a8:c1:4d:b9:d3:a0:c2:
                    34:d6:32:ad:38:b2:8b:c5:18:f0:cc:46:26:0c:d4:
                    e7:2e:72:01:b3:cf:94:a2:ef:1b:46:d6:77:96:fd:
                    31:f2:21:3b:22:37:b5:29:7d:20:a3:d7:bf:fe:6e:
                    4a:4b:e1:21:67:7c:de:91:65:c3:b0:04:70:36:c5:
                    36:23:fd:0e:cf:7f:71:76:33:bf:b4:2d:18:3d:11:
                    0b:42:3d:61:0c:ce:84:38:c6:5c:7b:cf:cc:90:c4:
                    cf:e4:24:7e:20:4c:43:39:80:9a:0a:40:67:32:54:
                    fa:42:6a:a5:a3:82:64:41:ac:9b:42:7b:0e:93:23:
                    2c:b3:56:fe:97:d3:6e:94:78:94:f6:06:95:1e:f4:
                    0a:02:71:cc:c2:59:b8:42:98:39:76:28:a1:a0:16:
                    11:af:e8:9d:f7:32:cf:4f:12:b1:d4:aa:dc:2c:5d:
                    e8:dc:ce:29:c8:5b:66:91:e9:03:1d:25:1e:dc:31:
                    15:9c:c8:72:4b:d1:eb:2b:6f:43:49:84:2f:3b:50:
                    4a:38:c9:e0:50:aa:06:b3:0f:e2:f7:51:8d:81:fd:
                    4e:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:DF:BB:0C:3A:AB:A4:2D:1D:7F:5F:C0:17:44:08:D9:83:C9:48:D2
            X509v3 Authority Key Identifier:
                keyid:DD:17:5B:D4:FB:7F:1D:C2:36:DB:13:CD:2B:42:A6:45:90:AF:EC:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.nellicus.net/repo/nellicus/3/DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864/7f9c05420b55c3ede703521d14d813758898042260f078b24d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.nellicus.net/repo/nellicus/3/DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:b5:35:2c:23:ba:ab:fc:fe:10:4c:e7:92:29:e0:2d:99:71:
         29:76:8d:ba:4b:22:88:1b:e9:f4:f4:b1:8a:01:cf:9f:d1:fe:
         15:9b:9c:a2:6a:38:4b:10:df:a9:a6:b2:24:15:d7:ea:25:5a:
         30:d6:06:85:f9:eb:5d:37:44:53:cd:67:d1:d7:2d:8f:69:c7:
         2f:bb:9a:5b:82:45:52:e9:cc:d9:ed:af:0d:fd:81:1a:ad:a0:
         f9:e9:6d:df:19:07:4c:e2:62:76:17:a9:aa:11:c7:ca:19:67:
         81:b0:1e:7f:96:9b:f8:59:e3:25:6a:04:9c:fd:99:2d:b8:ed:
         1d:ae:8f:5d:62:85:e5:c4:58:1c:3a:ac:9b:47:0f:88:7c:d8:
         43:59:d5:c1:eb:3c:47:da:83:37:10:c4:c5:68:f4:89:ec:5a:
         f7:20:2a:32:ac:66:c8:6a:6b:af:89:a5:c8:43:5f:85:6f:d8:
         33:cb:90:3b:30:61:3d:e8:e0:a4:1f:9b:4f:7f:35:4f:3b:68:
         14:f0:df:e9:06:12:c6:69:39:86:3a:49:0d:83:45:ce:4b:5c:
         48:84:76:d9:37:ce:54:74:d3:9b:2e:0f:ea:ea:e5:8f:17:88:
         3f:28:3e:af:5e:f4:b1:81:2b:c0:4e:79:7b:df:57:6f:39:8c:
         70:db:b1:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 06:21:51 2026 by rpki-client