Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/5872c2-d53e-48aa-b581-bb44a828cea7/1/tel_vmfZXfbkqAZeJnXgQNboDvw.mft
File:                     tel_vmfZXfbkqAZeJnXgQNboDvw.mft (raw, json)
Hash identifier:          Qjue6MIjq+3yrxhOCaIIegGJzzpeA3NHdYwm1D/VdGA=
Subject key identifier:   52:BB:F9:FD:26:F6:CD:B2:71:7C:C5:7E:98:C8:18:B4:DA:FC:44:E5
Authority key identifier: B5:E9:7F:BE:67:D9:5D:F6:E4:A8:06:5E:26:75:E0:40:D6:E8:0E:FC
Certificate issuer:       /CN=b5e97fbe67d95df6e4a8065e2675e040d6e80efc
Certificate serial:       019CA9B3C107C448ABB4D5B09177500F8991
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tel_vmfZXfbkqAZeJnXgQNboDvw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/5872c2-d53e-48aa-b581-bb44a828cea7/1/tel_vmfZXfbkqAZeJnXgQNboDvw.mft
Manifest number:          0849
Signing time:             Sun 01 Mar 2026 14:00:55 +0000
Manifest this update:     Sun 01 Mar 2026 14:00:55 +0000
Manifest next update:     Mon 02 Mar 2026 14:00:55 +0000
Files and hashes:         1: lRduZBk6nEvsRYZfzYBZ3PoPmqI.roa (hash: ct9EeHxmTMuFDeIK11XJPdvpcrbj5c+nN/xoGkmQQ44=)
                          2: tel_vmfZXfbkqAZeJnXgQNboDvw.crl (hash: WKDptACdHh8ywkxWOTQsj2dcLfpFLEukWflWXyb6L6g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/5872c2-d53e-48aa-b581-bb44a828cea7/1/tel_vmfZXfbkqAZeJnXgQNboDvw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/5872c2-d53e-48aa-b581-bb44a828cea7/1/tel_vmfZXfbkqAZeJnXgQNboDvw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tel_vmfZXfbkqAZeJnXgQNboDvw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 14:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:a9:b3:c1:07:c4:48:ab:b4:d5:b0:91:77:50:0f:89:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5e97fbe67d95df6e4a8065e2675e040d6e80efc
        Validity
            Not Before: Mar  1 14:00:55 2026 GMT
            Not After : Mar  2 14:00:55 2026 GMT
        Subject: CN=52bbf9fd26f6cdb2717cc57e98c818b4dafc44e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:a3:ef:d4:93:f0:dd:ea:e3:32:b0:c5:51:56:
                    5c:9c:3f:70:84:28:78:a3:31:c2:d2:2b:7e:3b:65:
                    a7:73:0d:3b:c8:a7:78:00:ee:8c:45:93:3d:ba:db:
                    a9:b5:9d:61:79:58:97:58:ac:c4:ea:67:0d:49:68:
                    95:f3:c5:53:fc:5c:9a:4e:b3:15:0d:24:aa:0e:6a:
                    00:3a:05:e5:f9:b2:3f:bb:14:37:63:12:dd:de:e3:
                    9b:9d:91:cd:18:3e:c6:61:7a:12:4b:0c:bf:3a:0c:
                    dd:92:e1:8b:3e:7f:78:42:00:ea:d0:56:ea:ab:74:
                    cf:ca:c8:de:d0:96:fd:e4:3b:8e:70:01:c3:7d:7c:
                    d9:12:93:19:7f:72:df:6a:09:56:a8:cc:b0:6d:b1:
                    24:e7:eb:b7:ac:a1:e6:6f:d5:59:f0:72:a4:b5:12:
                    0e:b5:11:bd:a3:98:1b:8c:69:37:53:c1:da:ea:bb:
                    f3:e5:58:77:0b:55:db:fa:e2:2b:bb:c1:fa:23:d0:
                    46:45:52:37:9b:90:53:24:7e:41:3e:88:6c:fe:f2:
                    af:31:85:3f:a3:17:e5:90:d9:26:41:d1:bf:e9:8b:
                    90:10:fe:49:c4:14:af:f9:fb:a7:4a:e8:3f:a7:21:
                    97:6a:b7:13:4a:3b:6c:b4:08:5d:c7:e5:37:d9:a2:
                    96:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:BB:F9:FD:26:F6:CD:B2:71:7C:C5:7E:98:C8:18:B4:DA:FC:44:E5
            X509v3 Authority Key Identifier:
                keyid:B5:E9:7F:BE:67:D9:5D:F6:E4:A8:06:5E:26:75:E0:40:D6:E8:0E:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tel_vmfZXfbkqAZeJnXgQNboDvw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/5872c2-d53e-48aa-b581-bb44a828cea7/1/tel_vmfZXfbkqAZeJnXgQNboDvw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/5872c2-d53e-48aa-b581-bb44a828cea7/1/tel_vmfZXfbkqAZeJnXgQNboDvw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:28:ea:1a:1f:93:ae:63:50:fd:5f:f5:bb:34:fb:78:aa:7c:
         2d:e9:fa:cc:e0:7b:26:fc:c6:5e:ba:0f:18:20:de:f2:fd:f8:
         13:05:41:33:3e:e0:16:3e:87:35:78:de:ca:e8:17:65:f6:35:
         f5:ef:ad:cd:f4:f8:5c:b4:86:9b:a0:f1:67:37:3d:86:7e:74:
         79:58:5d:9c:06:42:db:7a:95:97:ae:09:72:a2:f5:10:1f:04:
         ec:9d:f7:74:4b:ec:22:c9:d1:57:de:de:a6:ae:ce:7e:4e:53:
         9f:4a:b8:27:75:8e:2f:09:66:c5:fe:e2:85:59:81:7e:51:f3:
         f5:57:6d:b0:9b:1d:c6:bd:49:d6:6d:b1:66:2d:0b:6c:6b:ec:
         0e:05:d7:4f:cb:46:40:03:83:79:15:b2:60:ae:b6:b9:e4:aa:
         f0:59:ff:b2:83:f4:30:1f:84:f5:c3:b4:8b:41:79:ff:ae:5d:
         f0:8a:3f:04:74:f3:46:57:4c:b8:c0:25:7e:77:22:1a:b1:b3:
         74:63:6e:fa:45:fb:51:41:b0:94:60:e0:34:cd:f1:ac:28:ab:
         58:6c:59:aa:8f:30:66:92:88:d1:be:6f:0e:2d:4a:da:34:30:
         d1:7f:a9:fc:bd:b8:bc:19:74:01:50:f8:bd:d4:6c:62:e4:7d:
         22:57:86:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:54 2026 by rpki-client