Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/5872c2-d53e-48aa-b581-bb44a828cea7/1/tel_vmfZXfbkqAZeJnXgQNboDvw.mft
File:                     tel_vmfZXfbkqAZeJnXgQNboDvw.mft (raw, json)
Hash identifier:          F9MZQZG4eF8aOrIJupB78TDqhPgB6VKnPJnQDn3ISK4=
Subject key identifier:   E2:96:4B:A5:93:80:19:AF:57:FA:33:E0:3A:B7:4B:08:8C:93:75:BB
Authority key identifier: B5:E9:7F:BE:67:D9:5D:F6:E4:A8:06:5E:26:75:E0:40:D6:E8:0E:FC
Certificate issuer:       /CN=b5e97fbe67d95df6e4a8065e2675e040d6e80efc
Certificate serial:       019676E7D46939A8D6A2D717EFE7AF2752C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tel_vmfZXfbkqAZeJnXgQNboDvw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/5872c2-d53e-48aa-b581-bb44a828cea7/1/tel_vmfZXfbkqAZeJnXgQNboDvw.mft
Manifest number:          0513
Signing time:             Sun 27 Apr 2025 11:00:26 +0000
Manifest this update:     Sun 27 Apr 2025 11:00:26 +0000
Manifest next update:     Mon 28 Apr 2025 11:00:26 +0000
Files and hashes:         1: jq_DhvsvzcmCaUw_lDmYlqXK-R4.roa (hash: KOvHH56ipvWyjeOuOBdWhq6OhJFqmAAlbbCXs8yab8k=)
                          2: tel_vmfZXfbkqAZeJnXgQNboDvw.crl (hash: HMyi2kcfmiJF/yECZqaenrvQBa+J3ghUx87uKXuy53k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/5872c2-d53e-48aa-b581-bb44a828cea7/1/tel_vmfZXfbkqAZeJnXgQNboDvw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/5872c2-d53e-48aa-b581-bb44a828cea7/1/tel_vmfZXfbkqAZeJnXgQNboDvw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tel_vmfZXfbkqAZeJnXgQNboDvw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 05:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:76:e7:d4:69:39:a8:d6:a2:d7:17:ef:e7:af:27:52:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5e97fbe67d95df6e4a8065e2675e040d6e80efc
        Validity
            Not Before: Apr 27 11:00:26 2025 GMT
            Not After : Apr 28 11:00:26 2025 GMT
        Subject: CN=e2964ba5938019af57fa33e03ab74b088c9375bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:8f:10:f1:2a:95:6d:ab:49:2b:3d:ac:a4:2e:
                    e2:8d:59:ce:5c:3a:9c:27:25:ff:85:b9:32:57:ca:
                    39:7f:1a:e3:9b:50:29:b1:f3:86:63:7f:55:ef:a5:
                    9d:34:ee:25:93:c2:d1:4e:97:e8:6c:44:11:65:94:
                    8f:d4:fd:c4:97:eb:4f:43:90:22:c4:2d:3f:0e:1e:
                    91:3a:34:3f:30:84:db:91:54:ee:21:dc:4a:9a:70:
                    11:78:9d:19:b0:49:a7:96:72:a7:14:28:72:41:14:
                    4d:58:62:5a:87:de:87:35:84:27:0f:78:d8:fb:0b:
                    e9:cb:fe:ae:7b:e1:a2:cd:3c:e7:d1:93:48:5c:22:
                    8c:9a:5f:d5:79:01:61:2d:17:d4:76:92:1b:74:bf:
                    bd:35:09:12:ec:f0:d7:72:1a:3e:9f:4e:11:fb:6c:
                    58:e6:2b:cd:e1:18:a1:70:d4:90:7e:e7:4d:d4:ab:
                    e8:57:9e:10:1e:bf:61:b3:2f:f2:b1:20:3a:55:94:
                    91:ae:6d:2b:f6:d9:b0:3f:a8:87:a5:a2:43:1e:df:
                    ea:50:6e:a2:fa:1a:e1:f3:ee:b0:3a:38:1b:de:86:
                    2f:07:d5:0f:d5:88:6d:0a:c3:98:b3:c5:ea:33:5b:
                    e8:de:80:c4:aa:75:d1:ef:f2:34:f7:fe:81:b2:5a:
                    8f:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:96:4B:A5:93:80:19:AF:57:FA:33:E0:3A:B7:4B:08:8C:93:75:BB
            X509v3 Authority Key Identifier:
                keyid:B5:E9:7F:BE:67:D9:5D:F6:E4:A8:06:5E:26:75:E0:40:D6:E8:0E:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tel_vmfZXfbkqAZeJnXgQNboDvw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/5872c2-d53e-48aa-b581-bb44a828cea7/1/tel_vmfZXfbkqAZeJnXgQNboDvw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/5872c2-d53e-48aa-b581-bb44a828cea7/1/tel_vmfZXfbkqAZeJnXgQNboDvw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:90:b3:cf:a7:7b:e5:3a:0e:2b:49:d6:e1:c8:7c:93:09:c1:
         23:3a:c3:98:19:6a:d5:13:7a:cf:7c:2d:f3:bf:7d:82:59:c8:
         7e:71:26:b2:c5:99:f9:db:5c:af:dc:a9:5a:11:93:2e:7c:b8:
         f7:c8:af:2b:ad:58:72:78:83:b7:69:02:d2:96:0d:62:1f:65:
         92:9e:98:3f:40:f6:9c:d2:85:ab:fb:69:f7:8b:2c:dd:29:3b:
         57:b9:38:78:0d:30:93:2a:7b:bf:17:9f:57:00:f9:18:f7:19:
         e1:b7:d0:42:32:15:5e:95:ed:b1:e7:47:fd:17:1d:45:a8:75:
         e8:cb:3d:4c:5b:e6:14:27:16:ef:fe:51:27:e9:e1:ed:90:10:
         64:98:82:70:c6:6e:69:40:44:f1:1c:36:10:1f:d5:5d:ec:43:
         0b:aa:9c:bd:4e:d3:75:a1:2b:b0:8b:d0:d6:0b:ab:6b:5f:66:
         eb:d7:b2:1e:31:f9:ea:7a:86:98:01:e3:41:f1:b3:93:ff:49:
         77:df:1f:cf:01:98:2a:f3:c3:d8:ce:7d:15:a6:35:80:0c:02:
         aa:9c:1e:90:ef:b9:b7:44:43:41:af:52:f6:79:42:55:bb:ea:
         a3:b4:4b:ca:4c:fe:2b:9c:48:f1:5a:5c:9d:fd:5c:99:dd:06:
         4c:a0:da:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ259RpOajWotcX7+evJ1LIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1ZTk3ZmJlNjdkOTVkZjZlNGE4MDY1ZTI2NzVlMDQwZDZl
ODBlZmMwHhcNMjUwNDI3MTEwMDI2WhcNMjUwNDI4MTEwMDI2WjAzMTEwLwYDVQQD
EyhlMjk2NGJhNTkzODAxOWFmNTdmYTMzZTAzYWI3NGIwODhjOTM3NWJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuI8Q8SqVbatJKz2spC7ijVnOXDqc
JyX/hbkyV8o5fxrjm1ApsfOGY39V76WdNO4lk8LRTpfobEQRZZSP1P3El+tPQ5Ai
xC0/Dh6ROjQ/MITbkVTuIdxKmnAReJ0ZsEmnlnKnFChyQRRNWGJah96HNYQnD3jY
+wvpy/6ue+GizTzn0ZNIXCKMml/VeQFhLRfUdpIbdL+9NQkS7PDXcho+n04R+2xY
5ivN4RihcNSQfudN1KvoV54QHr9hsy/ysSA6VZSRrm0r9tmwP6iHpaJDHt/qUG6i
+hrh8+6wOjgb3oYvB9UP1YhtCsOYs8XqM1vo3oDEqnXR7/I09/6BslqPOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOKWS6WTgBmvV/oz4Dq3SwiMk3W7MB8GA1UdIwQY
MBaAFLXpf75n2V325KgGXiZ14EDW6A78MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGVsX3ZtZlpYZmJrcUFaZUpuWGdRTmJvRHZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS81ODcyYzItZDUzZS00OGFhLWI1ODEt
YmI0NGE4MjhjZWE3LzEvdGVsX3ZtZlpYZmJrcUFaZUpuWGdRTmJvRHZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS81ODcyYzItZDUzZS00OGFhLWI1ODEtYmI0NGE4MjhjZWE3
LzEvdGVsX3ZtZlpYZmJrcUFaZUpuWGdRTmJvRHZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB5Czz6d7
5ToOK0nW4ch8kwnBIzrDmBlq1RN6z3wt8799glnIfnEmssWZ+dtcr9ypWhGTLny4
98ivK61YcniDt2kC0pYNYh9lkp6YP0D2nNKFq/tp94ss3Sk7V7k4eA0wkyp7vxef
VwD5GPcZ4bfQQjIVXpXtsedH/RcdRah16Ms9TFvmFCcW7/5RJ+nh7ZAQZJiCcMZu
aUBE8Rw2EB/VXexDC6qcvU7TdaErsIvQ1gura19m69eyHjH56nqGmAHjQfGzk/9J
d98fzwGYKvPD2M59FaY1gAwCqpwekO+5t0RDQa9S9nlCVbvqo7RLykz+K5xI8Vpc
nf1cmd0GTKDabw==
-----END CERTIFICATE-----
Generated at Sun Apr 27 15:36:47 2025 by rpki-client