Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/ec592f-2434-4d1c-b775-99b9f33de3b0/1/NuFTPD_5SxjDCPGxyVukTrHw7Hc.mft
File:                     NuFTPD_5SxjDCPGxyVukTrHw7Hc.mft (raw, json)
Hash identifier:          YrLUzNWhHm1X2mkAosszU3nN6KOUFX8lBtBijD6Dd24=
Subject key identifier:   97:B0:7F:89:DB:F6:2D:1F:38:5C:8D:17:48:69:ED:84:05:68:79:D2
Authority key identifier: 36:E1:53:3C:3F:F9:4B:18:C3:08:F1:B1:C9:5B:A4:4E:B1:F0:EC:77
Certificate issuer:       /CN=36e1533c3ff94b18c308f1b1c95ba44eb1f0ec77
Certificate serial:       0199FBEBEC7DD432C0D98E17D64365CE123B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NuFTPD_5SxjDCPGxyVukTrHw7Hc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/ec592f-2434-4d1c-b775-99b9f33de3b0/1/NuFTPD_5SxjDCPGxyVukTrHw7Hc.mft
Manifest number:          1635
Signing time:             Sun 19 Oct 2025 10:02:46 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:46 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:46 +0000
Files and hashes:         1: 1lVPkkjQFhK0hASM76LaKqMw8Zs.roa (hash: XOFVSZleZP5fsRci6+Onq4xznm5gGBHazy8lj9Vtasc=)
                          2: NuFTPD_5SxjDCPGxyVukTrHw7Hc.crl (hash: 0XVyXXnltPE0hi+cHwyxID0OqMjJBusWpwiOrjVPZus=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/ec592f-2434-4d1c-b775-99b9f33de3b0/1/NuFTPD_5SxjDCPGxyVukTrHw7Hc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/ec592f-2434-4d1c-b775-99b9f33de3b0/1/NuFTPD_5SxjDCPGxyVukTrHw7Hc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NuFTPD_5SxjDCPGxyVukTrHw7Hc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 10:02:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:ec:7d:d4:32:c0:d9:8e:17:d6:43:65:ce:12:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36e1533c3ff94b18c308f1b1c95ba44eb1f0ec77
        Validity
            Not Before: Oct 19 10:02:46 2025 GMT
            Not After : Oct 20 10:02:46 2025 GMT
        Subject: CN=97b07f89dbf62d1f385c8d174869ed84056879d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:58:52:1f:c6:d2:de:49:72:e4:23:67:24:aa:
                    dd:ea:16:1e:b6:86:cd:dd:0c:e2:94:5c:ea:6f:39:
                    ef:db:73:95:8f:79:1e:a9:2e:0d:e7:f1:30:2e:4c:
                    8d:7b:16:96:0b:7b:61:49:46:a4:68:26:e2:4e:56:
                    ac:58:97:35:6d:fd:9e:0f:5b:a7:0c:87:c2:eb:06:
                    17:6f:89:bd:db:c0:f2:29:61:da:d2:c5:e4:ed:79:
                    ff:b4:eb:9f:f0:5d:84:0d:ea:b6:47:5f:b6:22:10:
                    01:e8:79:9b:9e:68:c6:63:cc:1b:27:7c:d0:84:f7:
                    11:56:36:f1:36:21:b9:9e:d6:86:4d:b9:fc:6b:b9:
                    5d:ad:34:c1:25:c4:4e:f3:9f:71:d4:55:d9:a3:83:
                    05:7a:9d:20:64:ba:39:8c:28:9c:94:4e:69:8c:2d:
                    f6:53:f4:0e:c5:2a:8e:6c:87:d1:4d:c9:9b:d8:8a:
                    c7:15:3d:87:59:6e:ea:d1:a2:b2:28:ff:39:b4:1a:
                    cc:d0:99:26:5e:db:88:c3:2e:e1:9e:22:6e:c7:03:
                    b6:61:f6:15:61:91:6b:df:10:e6:f0:84:99:6b:c6:
                    cb:4a:a2:ee:1e:0a:3e:06:bb:57:34:40:33:ce:0e:
                    a7:32:49:c1:3d:30:52:8c:36:d7:23:5c:89:ed:03:
                    06:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:B0:7F:89:DB:F6:2D:1F:38:5C:8D:17:48:69:ED:84:05:68:79:D2
            X509v3 Authority Key Identifier:
                keyid:36:E1:53:3C:3F:F9:4B:18:C3:08:F1:B1:C9:5B:A4:4E:B1:F0:EC:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NuFTPD_5SxjDCPGxyVukTrHw7Hc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ec592f-2434-4d1c-b775-99b9f33de3b0/1/NuFTPD_5SxjDCPGxyVukTrHw7Hc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ec592f-2434-4d1c-b775-99b9f33de3b0/1/NuFTPD_5SxjDCPGxyVukTrHw7Hc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:59:67:30:e6:9b:77:9c:e1:ef:2a:36:08:56:dd:40:cc:85:
         51:70:99:ff:b9:fc:2b:ac:31:9b:c7:64:a7:47:7e:6f:5b:e2:
         d7:4e:0e:47:3c:a3:72:89:cc:eb:65:75:fc:d6:da:41:8f:ca:
         13:0d:47:2b:00:80:2a:80:cd:c4:12:7b:0a:5b:b6:b9:28:dc:
         42:6d:bf:cd:be:3d:e2:81:77:9b:d9:6e:58:aa:3f:40:32:a3:
         1f:9c:6d:f0:e2:da:42:02:c6:8d:24:a9:2d:00:db:52:9b:64:
         c3:2b:f7:ee:fe:4b:65:ad:3e:23:08:be:c2:31:1a:40:75:ed:
         7e:26:cf:1f:ae:ea:28:8a:f6:fc:37:fc:26:7b:69:65:f7:f4:
         2d:1e:32:df:29:d7:43:0a:23:d0:05:c2:84:c3:65:a3:94:24:
         42:c9:ea:b2:63:dd:b6:a6:4b:91:3a:77:49:c6:df:34:8c:96:
         70:ea:c4:6a:c7:5a:c6:83:0c:af:cf:e6:0a:0d:3e:13:25:76:
         62:6d:53:e6:72:7e:1e:6e:d6:58:9e:2d:d7:aa:78:f2:c5:96:
         5f:79:94:6c:f2:b3:78:9d:5b:f6:13:b7:82:69:a8:f6:eb:cc:
         99:c4:26:3c:71:03:2a:ba:b8:97:0b:76:4c:f1:2d:01:2a:ad:
         b1:8a:86:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76+x91DLA2Y4X1kNlzhI7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2ZTE1MzNjM2ZmOTRiMThjMzA4ZjFiMWM5NWJhNDRlYjFm
MGVjNzcwHhcNMjUxMDE5MTAwMjQ2WhcNMjUxMDIwMTAwMjQ2WjAzMTEwLwYDVQQD
Eyg5N2IwN2Y4OWRiZjYyZDFmMzg1YzhkMTc0ODY5ZWQ4NDA1Njg3OWQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA91hSH8bS3kly5CNnJKrd6hYetobN
3QzilFzqbznv23OVj3keqS4N5/EwLkyNexaWC3thSUakaCbiTlasWJc1bf2eD1un
DIfC6wYXb4m928DyKWHa0sXk7Xn/tOuf8F2EDeq2R1+2IhAB6HmbnmjGY8wbJ3zQ
hPcRVjbxNiG5ntaGTbn8a7ldrTTBJcRO859x1FXZo4MFep0gZLo5jCiclE5pjC32
U/QOxSqObIfRTcmb2IrHFT2HWW7q0aKyKP85tBrM0JkmXtuIwy7hniJuxwO2YfYV
YZFr3xDm8ISZa8bLSqLuHgo+BrtXNEAzzg6nMknBPTBSjDbXI1yJ7QMGZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJewf4nb9i0fOFyNF0hp7YQFaHnSMB8GA1UdIwQY
MBaAFDbhUzw/+UsYwwjxsclbpE6x8Ox3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnVGVFBEXzVTeGpEQ1BHeHlWdWtUckh3N0hjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9lYzU5MmYtMjQzNC00ZDFjLWI3NzUt
OTliOWYzM2RlM2IwLzEvTnVGVFBEXzVTeGpEQ1BHeHlWdWtUckh3N0hjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My9lYzU5MmYtMjQzNC00ZDFjLWI3NzUtOTliOWYzM2RlM2Iw
LzEvTnVGVFBEXzVTeGpEQ1BHeHlWdWtUckh3N0hjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARVlnMOab
d5zh7yo2CFbdQMyFUXCZ/7n8K6wxm8dkp0d+b1vi104ORzyjconM62V1/NbaQY/K
Ew1HKwCAKoDNxBJ7Clu2uSjcQm2/zb494oF3m9luWKo/QDKjH5xt8OLaQgLGjSSp
LQDbUptkwyv37v5LZa0+Iwi+wjEaQHXtfibPH67qKIr2/Df8JntpZff0LR4y3ynX
Qwoj0AXChMNlo5QkQsnqsmPdtqZLkTp3ScbfNIyWcOrEasdaxoMMr8/mCg0+EyV2
Ym1T5nJ+Hm7WWJ4t16p48sWWX3mUbPKzeJ1b9hO3gmmo9uvMmcQmPHEDKrq4lwt2
TPEtASqtsYqG9A==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:27:31 2025 by rpki-client