Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/ec592f-2434-4d1c-b775-99b9f33de3b0/1/NuFTPD_5SxjDCPGxyVukTrHw7Hc.mft
File:                     NuFTPD_5SxjDCPGxyVukTrHw7Hc.mft (raw, json)
Hash identifier:          KKoJh2YjTLa6n41rv5lgBGVLBzFAdizdhe0oO4Q5k6E=
Subject key identifier:   6F:F0:DA:96:A4:C7:59:48:0A:87:A1:2F:D0:55:13:5D:77:79:3C:1B
Authority key identifier: 36:E1:53:3C:3F:F9:4B:18:C3:08:F1:B1:C9:5B:A4:4E:B1:F0:EC:77
Certificate issuer:       /CN=36e1533c3ff94b18c308f1b1c95ba44eb1f0ec77
Certificate serial:       019D28165F462AB7FE1975DE75B3DCF5E4D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NuFTPD_5SxjDCPGxyVukTrHw7Hc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/ec592f-2434-4d1c-b775-99b9f33de3b0/1/NuFTPD_5SxjDCPGxyVukTrHw7Hc.mft
Manifest number:          17DA
Signing time:             Thu 26 Mar 2026 03:00:47 +0000
Manifest this update:     Thu 26 Mar 2026 03:00:47 +0000
Manifest next update:     Fri 27 Mar 2026 03:00:47 +0000
Files and hashes:         1: JPfoJXm_mqNYx2eLoY-8aQk43JI.roa (hash: 60bOqqx8tDTM630vxTBXKNLIi5QJRiiJ1Zd2UZ7x0Qo=)
                          2: NuFTPD_5SxjDCPGxyVukTrHw7Hc.crl (hash: bvNys6CpKORtSde9EwBBMRIQhU+V+idTBIGnZ2xKbzM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/ec592f-2434-4d1c-b775-99b9f33de3b0/1/NuFTPD_5SxjDCPGxyVukTrHw7Hc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/ec592f-2434-4d1c-b775-99b9f33de3b0/1/NuFTPD_5SxjDCPGxyVukTrHw7Hc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NuFTPD_5SxjDCPGxyVukTrHw7Hc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:16:5f:46:2a:b7:fe:19:75:de:75:b3:dc:f5:e4:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36e1533c3ff94b18c308f1b1c95ba44eb1f0ec77
        Validity
            Not Before: Mar 26 03:00:47 2026 GMT
            Not After : Mar 27 03:00:47 2026 GMT
        Subject: CN=6ff0da96a4c759480a87a12fd055135d77793c1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:90:20:75:b0:d6:57:9a:57:29:57:da:9b:6c:
                    9d:13:23:38:a8:e5:4f:18:7a:41:bd:7c:f5:ff:e5:
                    88:16:42:03:db:0a:ab:35:8b:2f:65:ce:4d:2c:42:
                    27:dd:f2:21:52:21:78:92:b3:80:4d:62:45:55:24:
                    aa:16:8e:d0:52:a5:e4:1a:aa:22:14:6f:4c:f5:47:
                    e1:fb:20:96:80:2c:da:ab:57:24:bc:63:29:57:b5:
                    ec:0c:17:4c:de:e6:bb:3b:c9:f8:11:d5:27:91:25:
                    e4:1c:42:74:80:5f:6f:a3:99:75:5b:23:fd:78:ad:
                    36:b7:39:6e:7f:2c:fb:0b:77:ec:fe:b7:4c:c1:bc:
                    af:63:24:4e:7f:43:f3:8f:89:bb:86:6a:57:db:86:
                    ea:af:6f:97:05:73:d0:b7:55:b3:4d:d6:85:51:2a:
                    8e:3f:79:95:53:44:b0:f5:22:19:cf:0c:95:49:6c:
                    40:d2:a0:7a:bd:b1:20:da:27:a2:d7:ba:b2:74:63:
                    29:2b:93:01:39:55:01:59:68:bd:47:c5:ac:cb:e8:
                    21:e6:7b:0e:0a:2b:f4:04:5e:51:64:de:0d:e2:ce:
                    2c:cf:2c:ba:a0:37:ca:c8:21:db:a2:ec:d1:cb:1e:
                    e7:ee:99:d3:59:c6:48:c8:e5:f4:45:ce:16:47:b2:
                    e3:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:F0:DA:96:A4:C7:59:48:0A:87:A1:2F:D0:55:13:5D:77:79:3C:1B
            X509v3 Authority Key Identifier:
                keyid:36:E1:53:3C:3F:F9:4B:18:C3:08:F1:B1:C9:5B:A4:4E:B1:F0:EC:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NuFTPD_5SxjDCPGxyVukTrHw7Hc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ec592f-2434-4d1c-b775-99b9f33de3b0/1/NuFTPD_5SxjDCPGxyVukTrHw7Hc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ec592f-2434-4d1c-b775-99b9f33de3b0/1/NuFTPD_5SxjDCPGxyVukTrHw7Hc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:90:9f:e7:33:40:f6:e2:75:fd:f0:71:a0:bd:b3:eb:7e:d5:
         9c:8f:5f:bf:0e:fe:cd:a1:15:34:33:05:d7:73:87:21:c3:3b:
         a0:47:26:e9:da:ca:7e:b6:6d:1a:9c:68:c2:34:a0:97:fc:a2:
         46:64:d8:da:b7:f6:2c:40:1a:c3:ba:42:27:67:d5:e4:a9:ef:
         17:f5:9e:61:de:43:b9:25:fc:a5:b8:b9:5b:b6:74:f3:60:1f:
         7d:4b:17:dc:b3:63:bc:26:12:68:0b:c8:43:f4:dc:c1:e0:f6:
         18:f6:75:c6:07:cd:2b:b0:fe:90:95:89:50:2b:98:bd:0e:ae:
         60:c8:83:e3:5c:fc:d1:00:12:8a:e5:26:5c:95:20:08:a6:5d:
         8d:e0:2a:55:07:e2:2c:2d:e1:8b:30:52:5e:bd:9a:0e:84:b2:
         f0:44:0b:e4:35:0b:43:e9:b3:75:d0:4a:6a:71:42:c4:ae:d6:
         ef:d7:1d:68:3d:6a:16:00:a2:0c:9b:37:25:8d:b0:fa:7b:b5:
         fa:f3:17:99:41:5c:75:33:fc:52:ca:67:38:5c:6f:e8:db:8d:
         11:6a:f4:a7:f5:9e:53:98:34:7c:0d:79:f6:25:f3:dd:11:1b:
         1b:ed:3f:57:5a:4a:56:2e:6b:9b:5e:a7:6f:9f:4e:95:0b:37:
         6f:c4:5f:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:09:49 2026 by rpki-client