Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/ec592f-2434-4d1c-b775-99b9f33de3b0/1/NuFTPD_5SxjDCPGxyVukTrHw7Hc.mft
File:                     NuFTPD_5SxjDCPGxyVukTrHw7Hc.mft (raw, json)
Hash identifier:          zireQQ+v7VXyuttoNSjLrnA+s+dCOWZLU3DpuOeootY=
Subject key identifier:   89:CB:CC:EB:8D:F6:95:7B:3F:5D:2B:29:A2:05:0C:AE:5D:AD:B7:1F
Authority key identifier: 36:E1:53:3C:3F:F9:4B:18:C3:08:F1:B1:C9:5B:A4:4E:B1:F0:EC:77
Certificate issuer:       /CN=36e1533c3ff94b18c308f1b1c95ba44eb1f0ec77
Certificate serial:       019D3977B05D0E3185E2499477EA250D08E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NuFTPD_5SxjDCPGxyVukTrHw7Hc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/ec592f-2434-4d1c-b775-99b9f33de3b0/1/NuFTPD_5SxjDCPGxyVukTrHw7Hc.mft
Manifest number:          17E3
Signing time:             Sun 29 Mar 2026 12:00:38 +0000
Manifest this update:     Sun 29 Mar 2026 12:00:38 +0000
Manifest next update:     Mon 30 Mar 2026 12:00:38 +0000
Files and hashes:         1: JPfoJXm_mqNYx2eLoY-8aQk43JI.roa (hash: 60bOqqx8tDTM630vxTBXKNLIi5QJRiiJ1Zd2UZ7x0Qo=)
                          2: NuFTPD_5SxjDCPGxyVukTrHw7Hc.crl (hash: GP8jFN/cUum5SsUzkIygWKZhDSp7sWgjsBj/lrumj7I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/ec592f-2434-4d1c-b775-99b9f33de3b0/1/NuFTPD_5SxjDCPGxyVukTrHw7Hc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/ec592f-2434-4d1c-b775-99b9f33de3b0/1/NuFTPD_5SxjDCPGxyVukTrHw7Hc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NuFTPD_5SxjDCPGxyVukTrHw7Hc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:77:b0:5d:0e:31:85:e2:49:94:77:ea:25:0d:08:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36e1533c3ff94b18c308f1b1c95ba44eb1f0ec77
        Validity
            Not Before: Mar 29 12:00:38 2026 GMT
            Not After : Mar 30 12:00:38 2026 GMT
        Subject: CN=89cbcceb8df6957b3f5d2b29a2050cae5dadb71f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a7:57:c7:0e:fa:40:43:4d:6c:a9:1b:75:8f:
                    2b:9a:99:26:21:a0:58:d9:8c:21:10:7c:0a:2d:ec:
                    35:fa:f0:5c:53:44:62:f1:d4:a3:e2:15:83:8f:36:
                    e5:70:14:93:83:35:d4:4c:9e:c7:ff:f9:8c:e1:c6:
                    ac:64:92:a0:0d:67:b5:2e:97:53:c5:49:b0:71:ef:
                    da:79:16:e1:3a:be:bf:ab:e1:56:84:3e:ba:90:11:
                    46:54:b4:f3:f6:2b:bd:c7:e8:45:1b:2d:91:b3:17:
                    6b:c4:0e:a9:2f:92:77:90:7e:2e:db:a8:1c:29:63:
                    b8:c3:48:d4:a5:8c:07:be:97:6d:26:9e:44:c1:dd:
                    53:ce:0e:fa:bb:24:67:13:b7:9a:f4:ca:4c:39:79:
                    b1:4e:ac:71:b0:82:e0:21:a3:fd:c0:03:b6:0e:01:
                    94:72:2a:25:23:ab:3b:7a:e4:d6:11:e6:10:b1:56:
                    9d:e5:7f:43:c5:c9:2e:49:2e:bd:1c:02:8e:c7:ab:
                    79:d0:33:76:b5:76:2f:23:0f:00:1f:44:e3:2a:17:
                    e4:4c:a6:ba:6b:65:cf:a4:27:de:fd:9b:1e:a2:0a:
                    72:ec:b1:65:73:5f:69:02:1c:47:f9:cc:77:f7:ba:
                    56:f1:5f:68:50:73:2d:65:37:c7:b4:c5:00:e0:df:
                    a5:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:CB:CC:EB:8D:F6:95:7B:3F:5D:2B:29:A2:05:0C:AE:5D:AD:B7:1F
            X509v3 Authority Key Identifier:
                keyid:36:E1:53:3C:3F:F9:4B:18:C3:08:F1:B1:C9:5B:A4:4E:B1:F0:EC:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NuFTPD_5SxjDCPGxyVukTrHw7Hc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ec592f-2434-4d1c-b775-99b9f33de3b0/1/NuFTPD_5SxjDCPGxyVukTrHw7Hc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ec592f-2434-4d1c-b775-99b9f33de3b0/1/NuFTPD_5SxjDCPGxyVukTrHw7Hc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:90:d5:fa:d7:41:8e:cd:5b:08:fd:90:84:23:cb:88:1a:3d:
         4e:4e:cb:04:e0:03:75:3c:96:87:06:1c:59:62:4e:21:07:b3:
         28:e0:90:72:30:d3:54:fb:4a:f0:a8:7c:a7:62:89:59:70:00:
         4b:aa:90:15:17:c0:4a:9d:0d:fd:47:4c:4d:63:cb:6e:78:d1:
         46:b1:f2:bc:95:a1:a7:c0:ac:16:52:68:87:8c:7d:a0:a0:2a:
         ed:9e:44:9b:97:19:b0:d8:ce:70:3a:32:0b:b1:b1:46:71:df:
         b3:31:c0:f9:5b:a7:40:75:c1:f0:67:15:14:f8:db:b3:1e:2f:
         07:b3:71:69:99:ae:5d:4d:3a:a6:72:1a:d1:f8:92:e8:5f:a2:
         5a:af:a6:b5:6b:83:4d:d3:a5:b9:9c:52:b9:4c:1e:d3:ba:d4:
         ec:94:d9:4b:25:d8:25:f3:1b:89:e2:45:cd:98:e9:78:5d:7f:
         aa:6b:67:63:b6:a5:d0:70:72:ef:b6:4a:78:7e:90:84:b6:cb:
         0f:af:6b:54:4a:63:60:f9:76:4a:80:c5:e3:0d:a0:44:7a:15:
         14:96:0f:f7:c5:76:39:38:ff:41:7e:1e:a5:8a:35:6b:a6:96:
         80:2f:e7:cf:00:d1:26:c7:a6:25:db:4f:57:7d:bc:87:a2:c2:
         1f:b6:9c:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05d7BdDjGF4kmUd+olDQjlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2ZTE1MzNjM2ZmOTRiMThjMzA4ZjFiMWM5NWJhNDRlYjFm
MGVjNzcwHhcNMjYwMzI5MTIwMDM4WhcNMjYwMzMwMTIwMDM4WjAzMTEwLwYDVQQD
Eyg4OWNiY2NlYjhkZjY5NTdiM2Y1ZDJiMjlhMjA1MGNhZTVkYWRiNzFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwadXxw76QENNbKkbdY8rmpkmIaBY
2YwhEHwKLew1+vBcU0Ri8dSj4hWDjzblcBSTgzXUTJ7H//mM4casZJKgDWe1LpdT
xUmwce/aeRbhOr6/q+FWhD66kBFGVLTz9iu9x+hFGy2RsxdrxA6pL5J3kH4u26gc
KWO4w0jUpYwHvpdtJp5Ewd1Tzg76uyRnE7ea9MpMOXmxTqxxsILgIaP9wAO2DgGU
ciolI6s7euTWEeYQsVad5X9DxckuSS69HAKOx6t50DN2tXYvIw8AH0TjKhfkTKa6
a2XPpCfe/Zseogpy7LFlc19pAhxH+cx397pW8V9oUHMtZTfHtMUA4N+lrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFInLzOuN9pV7P10rKaIFDK5drbcfMB8GA1UdIwQY
MBaAFDbhUzw/+UsYwwjxsclbpE6x8Ox3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnVGVFBEXzVTeGpEQ1BHeHlWdWtUckh3N0hjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9lYzU5MmYtMjQzNC00ZDFjLWI3NzUt
OTliOWYzM2RlM2IwLzEvTnVGVFBEXzVTeGpEQ1BHeHlWdWtUckh3N0hjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My9lYzU5MmYtMjQzNC00ZDFjLWI3NzUtOTliOWYzM2RlM2Iw
LzEvTnVGVFBEXzVTeGpEQ1BHeHlWdWtUckh3N0hjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN5DV+tdB
js1bCP2QhCPLiBo9Tk7LBOADdTyWhwYcWWJOIQezKOCQcjDTVPtK8Kh8p2KJWXAA
S6qQFRfASp0N/UdMTWPLbnjRRrHyvJWhp8CsFlJoh4x9oKAq7Z5Em5cZsNjOcDoy
C7GxRnHfszHA+VunQHXB8GcVFPjbsx4vB7NxaZmuXU06pnIa0fiS6F+iWq+mtWuD
TdOluZxSuUwe07rU7JTZSyXYJfMbieJFzZjpeF1/qmtnY7al0HBy77ZKeH6QhLbL
D69rVEpjYPl2SoDF4w2gRHoVFJYP98V2OTj/QX4epYo1a6aWgC/nzwDRJsemJdtP
V328h6LCH7acAQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 16:59:32 2026 by rpki-client