Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/ec592f-2434-4d1c-b775-99b9f33de3b0/1/NuFTPD_5SxjDCPGxyVukTrHw7Hc.mft
File:                     NuFTPD_5SxjDCPGxyVukTrHw7Hc.mft (raw, json)
Hash identifier:          JYgoK28RROFj8HgqZS2TaIuLt3sohTKUVLcje0LWpI4=
Subject key identifier:   6E:E3:B7:B3:73:26:06:24:73:86:94:B6:87:A0:27:8C:75:2A:2D:85
Authority key identifier: 36:E1:53:3C:3F:F9:4B:18:C3:08:F1:B1:C9:5B:A4:4E:B1:F0:EC:77
Certificate issuer:       /CN=36e1533c3ff94b18c308f1b1c95ba44eb1f0ec77
Certificate serial:       0198D660C584CF84B91D7B74F39651001127
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NuFTPD_5SxjDCPGxyVukTrHw7Hc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/ec592f-2434-4d1c-b775-99b9f33de3b0/1/NuFTPD_5SxjDCPGxyVukTrHw7Hc.mft
Manifest number:          159D
Signing time:             Sat 23 Aug 2025 10:02:02 +0000
Manifest this update:     Sat 23 Aug 2025 10:02:02 +0000
Manifest next update:     Sun 24 Aug 2025 10:02:02 +0000
Files and hashes:         1: 1lVPkkjQFhK0hASM76LaKqMw8Zs.roa (hash: XOFVSZleZP5fsRci6+Onq4xznm5gGBHazy8lj9Vtasc=)
                          2: NuFTPD_5SxjDCPGxyVukTrHw7Hc.crl (hash: PubS4K5kV3fywGEiG0FdqS/L/XDeROS2EihZjBIpLr8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/ec592f-2434-4d1c-b775-99b9f33de3b0/1/NuFTPD_5SxjDCPGxyVukTrHw7Hc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/ec592f-2434-4d1c-b775-99b9f33de3b0/1/NuFTPD_5SxjDCPGxyVukTrHw7Hc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NuFTPD_5SxjDCPGxyVukTrHw7Hc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 10:02:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:60:c5:84:cf:84:b9:1d:7b:74:f3:96:51:00:11:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36e1533c3ff94b18c308f1b1c95ba44eb1f0ec77
        Validity
            Not Before: Aug 23 10:02:02 2025 GMT
            Not After : Aug 24 10:02:02 2025 GMT
        Subject: CN=6ee3b7b373260624738694b687a0278c752a2d85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:27:76:09:14:cd:1f:1f:43:ab:55:c4:42:73:
                    32:5d:e5:eb:93:6b:1a:53:d6:cd:25:73:c7:38:e7:
                    f6:34:c2:fa:fe:82:00:3d:40:bc:52:ab:24:6e:e1:
                    14:28:1a:38:2c:07:60:9c:63:11:1c:ea:d9:91:be:
                    f9:94:20:66:e4:fb:fe:af:0e:d8:6c:af:e4:da:1d:
                    35:dd:fb:b8:0d:01:55:5a:c4:55:6f:50:89:54:68:
                    d2:8c:15:19:ed:39:71:65:07:b7:b7:53:df:01:f1:
                    10:26:41:7b:fa:13:1c:ad:d9:a8:33:9e:6f:96:25:
                    a6:ec:30:70:54:ee:57:57:95:13:16:7a:a5:61:01:
                    47:c3:83:b4:e2:7f:dd:04:a5:80:f8:f4:12:41:58:
                    af:64:bf:82:af:36:90:96:a8:fa:4a:49:b1:54:d2:
                    a1:46:65:9b:dd:51:3b:25:88:80:53:b5:95:ed:39:
                    07:c3:5a:de:ce:aa:70:2a:4a:3b:2f:f9:82:44:34:
                    b0:cf:b1:f5:16:22:91:0e:1d:a4:49:a5:37:c8:37:
                    6c:98:19:da:de:11:e9:8d:c8:60:98:12:bd:56:6e:
                    b8:3e:35:07:10:06:11:b4:07:8e:5b:05:ea:fa:de:
                    66:50:f3:d5:29:3f:b4:10:91:3f:c2:a8:91:5c:bf:
                    e3:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:E3:B7:B3:73:26:06:24:73:86:94:B6:87:A0:27:8C:75:2A:2D:85
            X509v3 Authority Key Identifier:
                keyid:36:E1:53:3C:3F:F9:4B:18:C3:08:F1:B1:C9:5B:A4:4E:B1:F0:EC:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NuFTPD_5SxjDCPGxyVukTrHw7Hc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ec592f-2434-4d1c-b775-99b9f33de3b0/1/NuFTPD_5SxjDCPGxyVukTrHw7Hc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ec592f-2434-4d1c-b775-99b9f33de3b0/1/NuFTPD_5SxjDCPGxyVukTrHw7Hc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:39:e1:ff:ac:bc:7a:76:f3:e0:12:fe:7e:dd:f7:67:9e:aa:
         3a:3a:ed:d4:e4:f5:05:15:9a:f2:30:c1:6f:16:83:16:a6:7b:
         7d:32:68:ba:6e:ad:b2:a6:e0:3b:a0:30:d4:a6:ad:60:be:d5:
         4a:e3:a9:31:fc:5c:3b:4f:c3:13:8b:b5:12:fe:75:96:45:18:
         37:f2:fc:d5:cf:48:da:82:2b:fe:91:ed:b4:b9:6e:e6:81:07:
         97:45:07:4a:ca:4a:79:5f:43:61:d3:b6:6e:f6:8c:b4:c8:21:
         31:2c:7f:99:30:30:39:69:4e:bf:21:50:24:e9:60:d7:47:45:
         3a:37:0b:f0:05:05:15:2e:fa:28:cf:1d:36:9e:19:d3:ed:d3:
         2f:16:3d:49:7f:8f:10:9e:e5:c8:ae:f0:e4:72:a0:52:b5:d8:
         d9:d6:c3:74:3a:e4:fd:b8:58:a2:49:49:42:69:f1:7c:63:d0:
         eb:2d:99:0c:2f:76:61:58:f7:3d:a4:a5:b6:bb:cd:4b:c7:86:
         a9:41:e0:b3:75:6d:7f:90:bb:2a:5c:1b:75:27:80:c9:77:93:
         6e:37:b9:e3:c5:65:20:b1:63:2a:d2:c6:2f:2a:6c:ac:6f:a1:
         d0:e5:2e:15:ee:1f:62:43:ef:b5:a9:78:9e:6f:a1:94:58:e3:
         77:b8:9e:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYMWEz4S5HXt085ZRABEnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2ZTE1MzNjM2ZmOTRiMThjMzA4ZjFiMWM5NWJhNDRlYjFm
MGVjNzcwHhcNMjUwODIzMTAwMjAyWhcNMjUwODI0MTAwMjAyWjAzMTEwLwYDVQQD
Eyg2ZWUzYjdiMzczMjYwNjI0NzM4Njk0YjY4N2EwMjc4Yzc1MmEyZDg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCd2CRTNHx9Dq1XEQnMyXeXrk2sa
U9bNJXPHOOf2NML6/oIAPUC8UqskbuEUKBo4LAdgnGMRHOrZkb75lCBm5Pv+rw7Y
bK/k2h013fu4DQFVWsRVb1CJVGjSjBUZ7TlxZQe3t1PfAfEQJkF7+hMcrdmoM55v
liWm7DBwVO5XV5UTFnqlYQFHw4O04n/dBKWA+PQSQVivZL+CrzaQlqj6SkmxVNKh
RmWb3VE7JYiAU7WV7TkHw1rezqpwKko7L/mCRDSwz7H1FiKRDh2kSaU3yDdsmBna
3hHpjchgmBK9Vm64PjUHEAYRtAeOWwXq+t5mUPPVKT+0EJE/wqiRXL/jwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG7jt7NzJgYkc4aUtoegJ4x1Ki2FMB8GA1UdIwQY
MBaAFDbhUzw/+UsYwwjxsclbpE6x8Ox3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnVGVFBEXzVTeGpEQ1BHeHlWdWtUckh3N0hjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9lYzU5MmYtMjQzNC00ZDFjLWI3NzUt
OTliOWYzM2RlM2IwLzEvTnVGVFBEXzVTeGpEQ1BHeHlWdWtUckh3N0hjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My9lYzU5MmYtMjQzNC00ZDFjLWI3NzUtOTliOWYzM2RlM2Iw
LzEvTnVGVFBEXzVTeGpEQ1BHeHlWdWtUckh3N0hjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATjnh/6y8
enbz4BL+ft33Z56qOjrt1OT1BRWa8jDBbxaDFqZ7fTJoum6tsqbgO6Aw1KatYL7V
SuOpMfxcO0/DE4u1Ev51lkUYN/L81c9I2oIr/pHttLlu5oEHl0UHSspKeV9DYdO2
bvaMtMghMSx/mTAwOWlOvyFQJOlg10dFOjcL8AUFFS76KM8dNp4Z0+3TLxY9SX+P
EJ7lyK7w5HKgUrXY2dbDdDrk/bhYoklJQmnxfGPQ6y2ZDC92YVj3PaSltrvNS8eG
qUHgs3Vtf5C7KlwbdSeAyXeTbje548VlILFjKtLGLypsrG+h0OUuFe4fYkPvtal4
nm+hlFjjd7ieEA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 18:43:09 2025 by rpki-client