Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/ec592f-2434-4d1c-b775-99b9f33de3b0/1/NuFTPD_5SxjDCPGxyVukTrHw7Hc.mft
File:                     NuFTPD_5SxjDCPGxyVukTrHw7Hc.mft (raw, json)
Hash identifier:          R6lLm3hioWUikLqa9vApQ9Dzmk/WtUJWV7buvmhQFYE=
Subject key identifier:   31:61:39:2B:3D:91:A2:91:81:F2:8F:A9:02:A0:CE:C6:6B:3A:0F:45
Authority key identifier: 36:E1:53:3C:3F:F9:4B:18:C3:08:F1:B1:C9:5B:A4:4E:B1:F0:EC:77
Certificate issuer:       /CN=36e1533c3ff94b18c308f1b1c95ba44eb1f0ec77
Certificate serial:       019A54C1134B0A243D5336A55F91CDAC5D59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NuFTPD_5SxjDCPGxyVukTrHw7Hc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/ec592f-2434-4d1c-b775-99b9f33de3b0/1/NuFTPD_5SxjDCPGxyVukTrHw7Hc.mft
Manifest number:          1663
Signing time:             Wed 05 Nov 2025 16:02:10 +0000
Manifest this update:     Wed 05 Nov 2025 16:02:10 +0000
Manifest next update:     Thu 06 Nov 2025 16:02:10 +0000
Files and hashes:         1: 1lVPkkjQFhK0hASM76LaKqMw8Zs.roa (hash: XOFVSZleZP5fsRci6+Onq4xznm5gGBHazy8lj9Vtasc=)
                          2: NuFTPD_5SxjDCPGxyVukTrHw7Hc.crl (hash: YVSfS5MaZj/OvBgV2IfGcUfYgXS2e0m95yqxw65Cobs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/ec592f-2434-4d1c-b775-99b9f33de3b0/1/NuFTPD_5SxjDCPGxyVukTrHw7Hc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/ec592f-2434-4d1c-b775-99b9f33de3b0/1/NuFTPD_5SxjDCPGxyVukTrHw7Hc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NuFTPD_5SxjDCPGxyVukTrHw7Hc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 06 Nov 2025 12:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:54:c1:13:4b:0a:24:3d:53:36:a5:5f:91:cd:ac:5d:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36e1533c3ff94b18c308f1b1c95ba44eb1f0ec77
        Validity
            Not Before: Nov  5 16:02:10 2025 GMT
            Not After : Nov  6 16:02:10 2025 GMT
        Subject: CN=3161392b3d91a29181f28fa902a0cec66b3a0f45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e8:8f:17:b6:5a:94:55:ec:3e:bd:ca:67:d7:
                    51:6d:b9:8a:b0:8e:3b:02:6d:d6:76:17:46:31:78:
                    fd:01:e3:15:e2:bd:ac:06:5e:10:7e:e3:0c:8f:f5:
                    08:38:85:d0:9a:73:5a:8b:c3:1e:23:37:8f:9a:69:
                    38:77:9b:8c:d9:fd:8e:01:9c:ad:11:86:cf:65:2d:
                    a6:59:7a:e0:43:5d:a7:44:7f:3d:a8:0c:c8:0e:19:
                    38:0f:e5:ce:32:78:b4:89:23:de:2e:df:52:f7:b8:
                    9c:de:3c:97:bf:12:4b:16:c1:0b:3b:05:2a:11:d3:
                    40:bc:05:c8:50:80:6a:cf:5d:03:de:7b:9f:3f:c3:
                    bc:5a:ae:79:e9:99:e3:c4:97:47:76:cc:6a:0b:dd:
                    41:9f:0a:2c:91:50:cb:3f:a6:cc:70:fc:88:dd:da:
                    4c:a9:d7:04:74:ba:38:77:bc:57:42:b2:bc:c5:95:
                    72:8e:71:15:8b:4a:b8:1b:1b:93:57:c4:14:8b:30:
                    21:af:67:6e:49:41:25:8b:6c:65:d2:c8:b0:00:46:
                    2a:f2:fc:29:3b:3d:f9:93:72:d1:d9:fe:70:ea:d5:
                    71:63:61:85:48:e8:f3:e1:a6:03:5d:1a:a7:02:e0:
                    b8:45:e1:d4:13:1f:5c:32:94:04:e0:bf:9e:03:c3:
                    e8:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:61:39:2B:3D:91:A2:91:81:F2:8F:A9:02:A0:CE:C6:6B:3A:0F:45
            X509v3 Authority Key Identifier:
                keyid:36:E1:53:3C:3F:F9:4B:18:C3:08:F1:B1:C9:5B:A4:4E:B1:F0:EC:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NuFTPD_5SxjDCPGxyVukTrHw7Hc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ec592f-2434-4d1c-b775-99b9f33de3b0/1/NuFTPD_5SxjDCPGxyVukTrHw7Hc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ec592f-2434-4d1c-b775-99b9f33de3b0/1/NuFTPD_5SxjDCPGxyVukTrHw7Hc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:57:d7:a5:b7:7e:a8:af:44:82:04:68:38:47:2d:6d:0f:b4:
         3e:a6:9a:b1:ab:bb:9d:f1:16:8f:e6:5e:67:84:97:43:46:69:
         fc:19:4f:14:79:32:c2:c8:66:26:f3:17:b2:ee:e3:8b:62:f7:
         dd:ae:7b:20:55:54:4b:ac:df:16:7a:f7:ab:75:ea:0a:aa:9a:
         e1:50:89:d0:f7:a7:6a:aa:f5:dd:09:73:86:c4:5c:03:b0:fa:
         7d:34:46:5b:6b:6a:01:2f:c8:91:b6:7f:b0:30:8f:62:bc:52:
         19:9c:10:7b:73:8a:ef:b6:03:18:27:7d:c6:c9:22:30:b7:52:
         e6:ab:db:0b:37:bc:a8:07:99:a4:c6:f8:73:a7:c7:3c:e4:42:
         bd:51:69:3a:82:b3:33:a1:b7:9e:90:96:7b:33:d9:51:e5:cd:
         98:cd:56:52:78:88:92:c3:ea:2d:9c:20:c2:2b:a1:eb:af:1a:
         5d:9e:a8:a1:c2:cd:03:b8:60:2c:bf:b6:f8:46:2f:29:bc:c4:
         0b:d5:7f:62:84:39:f4:19:ec:7b:20:c1:fb:0c:44:49:9c:35:
         80:0e:62:a7:48:ef:0a:c2:d6:1a:79:5d:1c:3b:a1:a1:9b:ac:
         34:32:01:04:e1:99:7b:7b:a2:ec:94:96:a8:d7:2a:23:73:d8:
         d3:2e:0a:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:00:08 2025 by rpki-client