Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/ec592f-2434-4d1c-b775-99b9f33de3b0/1/NuFTPD_5SxjDCPGxyVukTrHw7Hc.mft
File:                     NuFTPD_5SxjDCPGxyVukTrHw7Hc.mft (raw, json)
Hash identifier:          tqEefgmFEPSDfSK9A7RSubahMkD03M6PvNeZnxMAxPI=
Subject key identifier:   18:12:4C:F0:22:47:47:BA:E8:B4:5E:77:4C:04:90:4C:D5:E9:F2:4C
Authority key identifier: 36:E1:53:3C:3F:F9:4B:18:C3:08:F1:B1:C9:5B:A4:4E:B1:F0:EC:77
Certificate issuer:       /CN=36e1533c3ff94b18c308f1b1c95ba44eb1f0ec77
Certificate serial:       0197B6A1021729B96CD47ACA44120B0A33A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NuFTPD_5SxjDCPGxyVukTrHw7Hc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/ec592f-2434-4d1c-b775-99b9f33de3b0/1/NuFTPD_5SxjDCPGxyVukTrHw7Hc.mft
Manifest number:          1508
Signing time:             Sat 28 Jun 2025 13:01:34 +0000
Manifest this update:     Sat 28 Jun 2025 13:01:34 +0000
Manifest next update:     Sun 29 Jun 2025 13:01:34 +0000
Files and hashes:         1: 1lVPkkjQFhK0hASM76LaKqMw8Zs.roa (hash: XOFVSZleZP5fsRci6+Onq4xznm5gGBHazy8lj9Vtasc=)
                          2: NuFTPD_5SxjDCPGxyVukTrHw7Hc.crl (hash: +0kphB40kda3zVPuqhjfsd+BDtQ6jy1CuZJfp9L8f6U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/ec592f-2434-4d1c-b775-99b9f33de3b0/1/NuFTPD_5SxjDCPGxyVukTrHw7Hc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/ec592f-2434-4d1c-b775-99b9f33de3b0/1/NuFTPD_5SxjDCPGxyVukTrHw7Hc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NuFTPD_5SxjDCPGxyVukTrHw7Hc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a1:02:17:29:b9:6c:d4:7a:ca:44:12:0b:0a:33:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36e1533c3ff94b18c308f1b1c95ba44eb1f0ec77
        Validity
            Not Before: Jun 28 13:01:34 2025 GMT
            Not After : Jun 29 13:01:34 2025 GMT
        Subject: CN=18124cf0224747bae8b45e774c04904cd5e9f24c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e0:76:d9:0e:7d:92:b2:c2:08:d6:39:03:93:
                    53:d1:f8:9f:ba:a6:54:6e:a6:8c:39:10:ef:e6:9d:
                    81:c4:3f:fc:d6:86:21:bb:8f:84:17:ae:db:6e:3e:
                    1a:7d:32:09:ef:11:f6:f6:a6:55:50:91:c0:78:1d:
                    6e:64:ff:02:fe:79:2c:0c:2a:a1:0e:09:7e:49:62:
                    47:55:e0:06:5c:4c:4c:c6:f1:87:ff:fd:ac:9e:c9:
                    c9:19:53:b8:24:4d:7f:51:a1:4d:12:1f:d2:75:26:
                    53:97:95:d2:93:dd:c5:31:90:75:c4:c2:5c:25:bc:
                    cc:66:22:62:88:0a:36:eb:02:78:a5:d6:4e:f5:79:
                    2f:44:f2:f0:3f:46:7e:40:82:a9:ad:f1:43:7b:cf:
                    4a:e3:32:63:11:bd:e5:ae:c2:ab:41:7c:9a:e4:a2:
                    4c:27:35:ff:52:db:e0:1b:eb:53:9c:29:36:32:77:
                    fc:9a:b2:e0:b7:db:ab:bb:db:f9:1d:b5:82:b9:17:
                    6d:02:a0:f2:a2:2d:8e:65:8c:42:a2:42:4a:81:06:
                    52:f1:d2:3c:e9:de:30:de:8f:76:dc:04:a0:aa:4f:
                    fa:02:22:22:97:cd:b3:6b:32:e5:18:93:69:64:82:
                    63:a7:59:78:1e:03:96:36:84:37:8f:e0:d9:7b:f1:
                    39:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:12:4C:F0:22:47:47:BA:E8:B4:5E:77:4C:04:90:4C:D5:E9:F2:4C
            X509v3 Authority Key Identifier:
                keyid:36:E1:53:3C:3F:F9:4B:18:C3:08:F1:B1:C9:5B:A4:4E:B1:F0:EC:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NuFTPD_5SxjDCPGxyVukTrHw7Hc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ec592f-2434-4d1c-b775-99b9f33de3b0/1/NuFTPD_5SxjDCPGxyVukTrHw7Hc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ec592f-2434-4d1c-b775-99b9f33de3b0/1/NuFTPD_5SxjDCPGxyVukTrHw7Hc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:14:9b:26:a6:f6:a7:23:62:18:a0:cf:d6:e8:81:e5:cf:40:
         ce:8c:b0:a5:9f:44:28:95:c8:5b:68:fe:f8:19:25:9a:e8:e3:
         0f:1d:a7:94:de:c9:81:01:3e:3f:0e:74:ea:7d:8d:f0:33:49:
         28:ec:fa:4d:57:06:81:79:86:ff:9e:6d:28:99:83:d2:84:25:
         73:19:a5:d7:f8:ee:4e:74:b3:84:8c:72:8b:5a:8d:d7:46:ed:
         4e:2b:47:2a:ce:29:cb:2e:3c:61:81:1c:7d:fa:0d:7a:48:6d:
         80:6d:91:b0:0d:94:cf:22:ff:d4:1d:3b:73:ed:e3:93:76:35:
         e5:a5:8e:02:e9:1f:30:52:76:98:78:0b:81:9f:b0:68:1e:c5:
         a8:00:bb:cc:57:67:73:d7:8d:90:61:18:c9:33:8a:e4:4c:42:
         10:b7:5e:b7:4c:38:26:e2:c7:78:2c:96:bc:f6:f4:a1:60:48:
         4f:4b:ef:f4:0d:32:5b:bf:72:c5:fd:47:c1:db:55:ee:dc:83:
         3d:82:d0:dd:9c:60:90:9b:d4:15:70:03:3f:84:85:d3:ac:d6:
         f2:67:0f:27:0d:5e:11:bc:ae:4d:2e:42:6b:f5:6f:af:9d:03:
         8e:72:2d:65:5f:99:b2:03:78:53:4e:51:e3:84:28:fd:a7:4e:
         76:6e:12:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:49:27 2025 by rpki-client