Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/5872c2-d53e-48aa-b581-bb44a828cea7/1/tel_vmfZXfbkqAZeJnXgQNboDvw.mft
File:                     tel_vmfZXfbkqAZeJnXgQNboDvw.mft (raw, json)
Hash identifier:          gQlvH+qKd7p1s6oxP7HaP7O8yM7Pp4PCheKNvkfzpak=
Subject key identifier:   9A:0C:63:49:D3:11:41:E7:FC:3E:9B:1F:51:F2:E6:15:99:EC:5C:0A
Authority key identifier: B5:E9:7F:BE:67:D9:5D:F6:E4:A8:06:5E:26:75:E0:40:D6:E8:0E:FC
Certificate issuer:       /CN=b5e97fbe67d95df6e4a8065e2675e040d6e80efc
Certificate serial:       019D992B0991BA32D39BACD071704AD4484F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tel_vmfZXfbkqAZeJnXgQNboDvw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/5872c2-d53e-48aa-b581-bb44a828cea7/1/tel_vmfZXfbkqAZeJnXgQNboDvw.mft
Manifest number:          08C5
Signing time:             Fri 17 Apr 2026 02:00:27 +0000
Manifest this update:     Fri 17 Apr 2026 02:00:27 +0000
Manifest next update:     Sat 18 Apr 2026 02:00:27 +0000
Files and hashes:         1: lRduZBk6nEvsRYZfzYBZ3PoPmqI.roa (hash: ct9EeHxmTMuFDeIK11XJPdvpcrbj5c+nN/xoGkmQQ44=)
                          2: tel_vmfZXfbkqAZeJnXgQNboDvw.crl (hash: sJG5GIu5FZCXt9bId4P2edtOnOkwx9N0ZPBJlpkoBm8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/5872c2-d53e-48aa-b581-bb44a828cea7/1/tel_vmfZXfbkqAZeJnXgQNboDvw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/5872c2-d53e-48aa-b581-bb44a828cea7/1/tel_vmfZXfbkqAZeJnXgQNboDvw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tel_vmfZXfbkqAZeJnXgQNboDvw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 02:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:2b:09:91:ba:32:d3:9b:ac:d0:71:70:4a:d4:48:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5e97fbe67d95df6e4a8065e2675e040d6e80efc
        Validity
            Not Before: Apr 17 02:00:27 2026 GMT
            Not After : Apr 18 02:00:27 2026 GMT
        Subject: CN=9a0c6349d31141e7fc3e9b1f51f2e61599ec5c0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f9:9e:64:4a:6c:15:1e:25:fa:c5:cf:b3:c8:
                    89:da:e4:eb:57:57:c6:93:94:23:b1:46:b4:f2:55:
                    fb:b1:82:d1:9c:19:24:f9:04:7d:af:c8:91:0a:c7:
                    4a:0c:aa:05:b6:7a:f7:5b:f5:06:9b:69:83:cb:f7:
                    e4:50:37:0c:1e:f9:e0:19:db:5a:54:09:73:98:a0:
                    43:4a:a2:7f:9b:13:1e:3c:5c:bb:06:38:36:24:25:
                    22:b6:42:9c:66:5b:79:e4:9c:af:be:cf:54:82:06:
                    56:18:7c:53:e6:ce:57:08:3e:80:d1:03:15:90:fe:
                    e6:34:4b:ce:af:a3:af:ec:4f:32:6b:9b:c9:1b:17:
                    d2:38:96:f5:ad:91:3b:9e:c6:22:e9:65:5a:4c:36:
                    1d:70:9d:6a:e3:86:24:df:3d:31:be:f3:9c:b0:90:
                    77:c8:64:a4:7f:84:23:32:35:18:96:31:44:e5:30:
                    9e:81:56:0a:98:55:ff:f0:4c:b1:b5:fd:a8:ac:12:
                    ac:32:84:a2:85:2a:c4:af:51:50:3c:15:c9:dd:ae:
                    66:ea:6e:36:20:92:65:63:71:f5:5f:81:cb:19:3f:
                    aa:df:37:2d:a7:94:f1:56:92:66:66:c9:52:c0:51:
                    83:ce:7f:df:43:65:b1:40:56:36:6e:ea:89:40:97:
                    08:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:0C:63:49:D3:11:41:E7:FC:3E:9B:1F:51:F2:E6:15:99:EC:5C:0A
            X509v3 Authority Key Identifier:
                keyid:B5:E9:7F:BE:67:D9:5D:F6:E4:A8:06:5E:26:75:E0:40:D6:E8:0E:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tel_vmfZXfbkqAZeJnXgQNboDvw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/5872c2-d53e-48aa-b581-bb44a828cea7/1/tel_vmfZXfbkqAZeJnXgQNboDvw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/5872c2-d53e-48aa-b581-bb44a828cea7/1/tel_vmfZXfbkqAZeJnXgQNboDvw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:11:28:08:22:8d:4c:ca:87:26:7e:cc:e1:76:d2:c6:8b:0a:
         e6:ef:9a:8f:69:fe:a9:cb:81:6f:a0:e4:76:9b:94:d2:ba:80:
         c1:ee:e6:00:b7:95:f4:a6:43:6b:b6:51:7c:87:78:d6:d5:81:
         43:c6:cb:d9:71:53:e3:de:c5:e3:4a:05:18:27:60:ca:65:94:
         35:b1:ab:3f:8c:06:6d:c0:5c:08:0e:25:69:a0:ad:fe:25:ad:
         64:29:d5:47:75:33:c8:24:d7:00:6b:45:54:2e:cb:ad:0c:36:
         ee:0d:13:05:91:d5:ef:f8:96:2f:a4:25:bd:b7:37:94:ee:51:
         a1:77:66:60:6b:fd:fd:e9:7b:a0:11:79:d4:89:01:e2:48:8b:
         6c:a8:9a:eb:15:b6:bb:c4:28:9d:67:1c:3c:52:9c:77:39:5d:
         57:63:94:2c:cb:55:23:a4:54:3c:06:1c:4d:2c:97:2c:c6:4c:
         3a:b3:29:cc:26:e1:3a:ec:35:df:af:46:81:00:2c:1e:1b:46:
         37:15:60:62:07:ee:a2:62:b1:49:18:39:02:3b:19:6a:dc:67:
         d6:98:11:2a:9f:28:15:e1:f3:33:ae:a0:25:47:17:30:81:b0:
         c9:8d:29:46:5d:d4:d8:78:7d:04:fd:ed:98:5c:eb:aa:e4:05:
         47:0e:60:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:45:04 2026 by rpki-client