Manifest

$ rpki-client -vvf rpki.nellicus.net/repo/nellicus/3/DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.mft
File:                     DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.mft (raw, json)
Hash identifier:          8gpjgRorHdeBR1GGuuxlI5t8lZNKbb9z6kPgGuzzKfI=
Subject key identifier:   A1:6C:D0:4D:AC:8F:3B:05:9A:18:1C:A6:A3:21:3A:FB:BB:E0:BD:4D
Authority key identifier: DD:17:5B:D4:FB:7F:1D:C2:36:DB:13:CD:2B:42:A6:45:90:AF:EC:5C
Certificate issuer:       /CN=7f9c05420b55c3ede703521d14d813758898042260f078b24d
Certificate serial:       54E4EB8AAD0328A044CCD326572FA611CAC80010
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864/7f9c05420b55c3ede703521d14d813758898042260f078b24d.cer
Subject info access:      rsync://rpki.nellicus.net/repo/nellicus/3/DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.mft
Manifest number:          A5
Signing time:             Mon 13 Apr 2026 06:21:14 +0000
Manifest this update:     Mon 13 Apr 2026 06:16:14 +0000
Manifest next update:     Tue 14 Apr 2026 06:57:14 +0000
Files and hashes:         1: 323630323a663438623a3a2f33362d3438203d3e203631393631.roa (hash: tF1TO5OePBirSA2MxPH7uXQfaSSl0HRibFaeUgy/1P4=)
                          2: DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.crl (hash: 4nXQW3JMRDXpmahgkzxhzZmoHbQVZXAsAEMLGe1xrFw=)
                          3: 32332e3135312e3133322e302f32342d3234203d3e203631393631.roa (hash: v8No20hTrarlcWsm3WcVuQdnMeOU9NeFzlFcrLYahz4=)
Validation:               OK
Signature path:           rsync://rpki.nellicus.net/repo/nellicus/3/DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.crl
                          rsync://rpki.nellicus.net/repo/nellicus/3/DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864/7f9c05420b55c3ede703521d14d813758898042260f078b24d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864/f0e3e332-2e13-47b7-be3c-bd2f40db6864.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864/f0e3e332-2e13-47b7-be3c-bd2f40db6864.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Apr 2026 06:57:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:e4:eb:8a:ad:03:28:a0:44:cc:d3:26:57:2f:a6:11:ca:c8:00:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f9c05420b55c3ede703521d14d813758898042260f078b24d
        Validity
            Not Before: Apr 13 06:16:14 2026 GMT
            Not After : Apr 14 06:57:14 2026 GMT
        Subject: CN=A16CD04DAC8F3B059A181CA6A3213AFBBBE0BD4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:39:27:2f:5e:80:a0:6a:9a:1c:0d:f4:88:e3:
                    4c:4b:02:8f:32:06:54:2f:6f:38:7b:be:50:b2:c5:
                    0d:17:a7:73:03:18:dd:95:7d:1d:32:e9:a7:8e:8d:
                    e9:34:3a:f8:0f:18:6d:30:ef:82:b0:af:2c:d2:f6:
                    22:d2:c4:c7:cc:6f:e2:83:3f:59:e9:05:e7:e5:7c:
                    4b:a9:17:f1:cf:4c:2f:68:f0:11:9d:2f:26:2a:f2:
                    42:25:21:aa:06:22:9e:07:d5:e3:6f:f1:4c:2c:0f:
                    bd:5d:69:13:da:67:eb:bd:cb:1d:da:6e:33:67:da:
                    9f:b5:2b:aa:fc:fc:10:fa:2b:af:b1:58:07:3f:2d:
                    1e:b3:55:01:05:7c:ae:ef:01:2a:0b:49:19:3e:aa:
                    34:60:0c:f0:50:bb:38:9b:e6:2f:c9:84:ac:ba:ef:
                    f1:24:da:13:e6:2a:66:f3:ea:b5:35:0b:77:12:54:
                    90:ec:c6:fc:6c:5a:14:55:c6:b1:8b:42:f6:78:13:
                    8c:a0:0d:c1:80:0b:aa:79:c1:c9:e0:b9:58:cf:a8:
                    c0:3e:49:26:ec:96:ed:f1:1f:6c:c4:12:47:7e:e5:
                    78:b4:d9:48:69:58:bf:09:87:d3:f7:63:a2:d4:24:
                    10:58:fb:09:45:fc:47:d2:48:3d:98:d2:30:11:56:
                    33:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:6C:D0:4D:AC:8F:3B:05:9A:18:1C:A6:A3:21:3A:FB:BB:E0:BD:4D
            X509v3 Authority Key Identifier:
                keyid:DD:17:5B:D4:FB:7F:1D:C2:36:DB:13:CD:2B:42:A6:45:90:AF:EC:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.nellicus.net/repo/nellicus/3/DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864/7f9c05420b55c3ede703521d14d813758898042260f078b24d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.nellicus.net/repo/nellicus/3/DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:63:e1:35:d6:2a:42:1f:a8:05:85:5e:e7:48:54:bc:c8:17:
         84:42:cf:9b:f9:88:c6:97:89:be:07:6f:a2:49:d4:ae:b2:c7:
         61:a7:fe:4b:97:dc:62:86:94:d0:ee:62:d7:96:55:25:ab:a1:
         c5:d3:ca:c8:e3:89:33:52:63:90:2b:b7:a4:49:bb:3c:e8:42:
         01:a7:0c:2a:62:ba:6a:43:99:04:b4:c2:2a:54:2e:7a:f3:15:
         14:83:74:a6:f1:d5:25:e2:56:bb:61:87:ae:6c:87:2b:79:76:
         52:2c:85:30:17:8c:9d:1c:63:19:f9:6a:52:31:78:54:f5:0c:
         a7:4d:6a:58:3b:45:25:1b:86:7c:6d:8a:74:4c:49:6e:f3:5b:
         78:ec:55:b4:65:14:66:2c:ef:b5:a5:f5:0f:74:46:a6:a4:27:
         4f:01:5b:e7:bc:96:f6:59:6d:a6:04:5f:61:6b:29:ac:42:d2:
         8f:cd:79:20:83:aa:4c:db:83:c7:f6:1d:3a:ca:f2:02:2d:65:
         09:03:da:36:11:2f:b7:6e:0f:39:00:5a:23:e6:42:a9:ed:37:
         59:ed:4b:78:59:1a:50:a8:c1:33:4a:66:b6:a7:68:74:6d:a5:
         c0:c2:15:9b:96:58:95:5e:a9:d1:23:06:f1:95:8d:62:0f:43:
         c0:6b:00:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 13:26:36 2026 by rpki-client