Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/5872c2-d53e-48aa-b581-bb44a828cea7/1/tel_vmfZXfbkqAZeJnXgQNboDvw.mft
File:                     tel_vmfZXfbkqAZeJnXgQNboDvw.mft (raw, json)
Hash identifier:          FlocYXik+R4ICOC7nt8LTOGd+DJCvCSiVgYYEIJoRRk=
Subject key identifier:   B9:39:67:99:CD:27:7C:2A:EA:A4:BE:23:D2:6D:F5:C2:4E:E1:AF:56
Authority key identifier: B5:E9:7F:BE:67:D9:5D:F6:E4:A8:06:5E:26:75:E0:40:D6:E8:0E:FC
Certificate issuer:       /CN=b5e97fbe67d95df6e4a8065e2675e040d6e80efc
Certificate serial:       019FAE2D72DF1E1C00C908F07EC518CC5C07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tel_vmfZXfbkqAZeJnXgQNboDvw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/5872c2-d53e-48aa-b581-bb44a828cea7/1/tel_vmfZXfbkqAZeJnXgQNboDvw.mft
Manifest number:          09D9
Signing time:             Wed 29 Jul 2026 14:00:41 +0000
Manifest this update:     Wed 29 Jul 2026 14:00:41 +0000
Manifest next update:     Thu 30 Jul 2026 14:00:41 +0000
Files and hashes:         1: lRduZBk6nEvsRYZfzYBZ3PoPmqI.roa (hash: ct9EeHxmTMuFDeIK11XJPdvpcrbj5c+nN/xoGkmQQ44=)
                          2: tel_vmfZXfbkqAZeJnXgQNboDvw.crl (hash: bAXIf7a98/bCFUJZNw3GUmQescyL1ml5FJhsez9EZHY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/5872c2-d53e-48aa-b581-bb44a828cea7/1/tel_vmfZXfbkqAZeJnXgQNboDvw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/5872c2-d53e-48aa-b581-bb44a828cea7/1/tel_vmfZXfbkqAZeJnXgQNboDvw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tel_vmfZXfbkqAZeJnXgQNboDvw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ae:2d:72:df:1e:1c:00:c9:08:f0:7e:c5:18:cc:5c:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5e97fbe67d95df6e4a8065e2675e040d6e80efc
        Validity
            Not Before: Jul 29 14:00:41 2026 GMT
            Not After : Jul 30 14:00:41 2026 GMT
        Subject: CN=b9396799cd277c2aeaa4be23d26df5c24ee1af56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ee:d5:4f:9c:4a:78:cb:d2:99:15:73:2d:5e:
                    0e:2b:a1:be:7e:90:41:8d:d8:1b:5f:80:7e:47:b9:
                    26:99:3d:28:13:92:0f:05:2a:7c:95:a2:a1:5f:04:
                    a1:3b:30:c4:12:61:85:c9:39:bf:b7:7d:fe:91:7e:
                    1b:ea:2a:eb:a4:77:68:4b:8c:dd:6c:4d:41:43:3e:
                    6f:f3:4f:d9:b6:57:d0:29:b4:cb:d2:3e:55:91:05:
                    51:ff:98:2e:30:f7:c4:d5:13:6e:3a:9f:ab:f2:0f:
                    cf:0f:a0:42:8a:af:d9:53:84:37:ca:e7:cc:11:77:
                    5c:b6:9c:4c:22:7f:6e:4d:97:01:26:4f:ae:f5:5c:
                    5f:af:72:96:d8:da:d9:40:e2:6b:4c:9b:06:df:60:
                    aa:d3:44:5a:1c:9b:3e:bb:06:10:17:43:2c:5b:38:
                    3b:5c:d2:c6:05:d5:c1:fa:cf:96:10:75:9c:19:b1:
                    82:3b:85:3c:67:96:8f:7a:c3:b4:cd:16:86:c7:a2:
                    88:30:aa:56:06:e0:db:f8:40:dc:ed:85:50:7e:48:
                    62:3f:cb:61:1b:5b:a0:90:48:07:9f:15:8a:70:84:
                    3a:5a:04:b4:9c:05:6d:47:34:5e:4f:9f:47:0f:df:
                    f3:29:03:ac:17:58:01:51:1c:d7:cf:9b:3e:fd:08:
                    ea:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:39:67:99:CD:27:7C:2A:EA:A4:BE:23:D2:6D:F5:C2:4E:E1:AF:56
            X509v3 Authority Key Identifier:
                keyid:B5:E9:7F:BE:67:D9:5D:F6:E4:A8:06:5E:26:75:E0:40:D6:E8:0E:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tel_vmfZXfbkqAZeJnXgQNboDvw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/5872c2-d53e-48aa-b581-bb44a828cea7/1/tel_vmfZXfbkqAZeJnXgQNboDvw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/5872c2-d53e-48aa-b581-bb44a828cea7/1/tel_vmfZXfbkqAZeJnXgQNboDvw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:ce:be:77:6e:99:c1:c9:31:ec:1f:66:e4:61:b7:9a:fe:8e:
         3b:c7:bc:4c:04:c6:ac:bc:a9:7d:e5:74:31:03:73:15:91:6e:
         66:b7:67:c9:b8:4a:67:ba:50:e0:92:dd:f0:b2:ca:33:5a:b6:
         67:e3:43:56:92:e7:aa:58:b1:49:72:e1:8c:af:c8:d9:3a:08:
         54:eb:ef:26:45:b3:37:23:0c:25:cc:31:eb:3b:e6:7e:32:8d:
         15:11:f0:c9:bb:15:1b:fe:5b:a3:63:02:c3:5e:da:48:b4:7f:
         d0:0a:70:44:fa:ac:ec:0d:73:f4:63:d0:81:22:25:6f:35:fe:
         a4:c6:23:10:c9:fa:9c:e0:f1:1c:e2:83:5e:f7:26:2d:83:7b:
         fc:b3:60:8a:10:f9:3d:63:7a:e0:b5:09:8c:df:77:d4:fe:6f:
         66:34:2a:56:4d:b0:69:bb:38:fb:d3:a7:08:01:ef:67:77:b5:
         a0:9e:02:b5:46:69:41:49:87:f7:1c:12:60:bb:8d:e1:5a:6e:
         c4:92:93:86:5f:73:22:a9:8d:41:45:d8:42:68:7e:4a:3c:ad:
         fc:5d:fb:7a:c5:15:35:e1:93:29:d1:7d:39:41:63:dd:aa:57:
         80:44:31:69:f8:f4:d4:78:da:a9:18:7f:5a:57:18:69:e5:af:
         10:aa:db:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 16:09:57 2026 by rpki-client