Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/5872c2-d53e-48aa-b581-bb44a828cea7/1/tel_vmfZXfbkqAZeJnXgQNboDvw.mft
File:                     tel_vmfZXfbkqAZeJnXgQNboDvw.mft (raw, json)
Hash identifier:          OVHYxqpKSgL2wzsnvjQ6xGkQ5b5jh1+JEGLctE+Z0xM=
Subject key identifier:   D6:AA:E1:67:DE:B2:FC:D9:77:FD:B0:71:23:39:78:79:39:E9:82:04
Authority key identifier: B5:E9:7F:BE:67:D9:5D:F6:E4:A8:06:5E:26:75:E0:40:D6:E8:0E:FC
Certificate issuer:       /CN=b5e97fbe67d95df6e4a8065e2675e040d6e80efc
Certificate serial:       019EB6FBE3CABE3C09ACE526EE5697B42EE3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tel_vmfZXfbkqAZeJnXgQNboDvw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/5872c2-d53e-48aa-b581-bb44a828cea7/1/tel_vmfZXfbkqAZeJnXgQNboDvw.mft
Manifest number:          0959
Signing time:             Thu 11 Jun 2026 14:00:21 +0000
Manifest this update:     Thu 11 Jun 2026 14:00:21 +0000
Manifest next update:     Fri 12 Jun 2026 14:00:21 +0000
Files and hashes:         1: lRduZBk6nEvsRYZfzYBZ3PoPmqI.roa (hash: ct9EeHxmTMuFDeIK11XJPdvpcrbj5c+nN/xoGkmQQ44=)
                          2: tel_vmfZXfbkqAZeJnXgQNboDvw.crl (hash: XOdwxWcaTe3juTb6ULKayDhky1bmNMqh8JT0A5l8vK8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/5872c2-d53e-48aa-b581-bb44a828cea7/1/tel_vmfZXfbkqAZeJnXgQNboDvw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/5872c2-d53e-48aa-b581-bb44a828cea7/1/tel_vmfZXfbkqAZeJnXgQNboDvw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tel_vmfZXfbkqAZeJnXgQNboDvw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b6:fb:e3:ca:be:3c:09:ac:e5:26:ee:56:97:b4:2e:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5e97fbe67d95df6e4a8065e2675e040d6e80efc
        Validity
            Not Before: Jun 11 14:00:21 2026 GMT
            Not After : Jun 12 14:00:21 2026 GMT
        Subject: CN=d6aae167deb2fcd977fdb0712339787939e98204
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:7d:53:b2:60:b4:02:0b:05:b4:76:7a:34:d4:
                    36:c7:fb:18:c8:19:63:cc:7e:30:34:fd:1a:01:18:
                    c5:e6:03:f5:a6:7f:0c:71:ac:00:bd:12:40:f4:8e:
                    22:55:94:5b:4c:80:7b:6b:5d:e5:9e:e1:a4:e1:8d:
                    bd:b1:46:d2:e1:4e:2e:60:a4:8f:7b:f0:5e:d6:8c:
                    93:0e:a5:68:05:6c:2e:d0:25:9e:75:a9:85:05:f5:
                    d0:66:5b:2e:25:d7:01:14:e0:55:12:2b:10:92:76:
                    9c:92:98:5a:3e:5c:e5:f9:1d:91:4d:c0:c1:50:dc:
                    07:22:9f:3a:58:19:a4:54:23:03:12:f4:73:0e:b8:
                    03:74:6b:32:90:b4:39:83:11:bb:a8:e7:2e:93:02:
                    08:6c:1c:20:61:1e:03:6c:d1:dd:79:5c:8f:71:f2:
                    29:53:8a:d7:49:62:8d:4f:05:2e:f7:f7:b4:00:14:
                    d0:4e:b1:5a:e2:98:32:e5:92:5b:9b:00:f9:7a:72:
                    75:d2:c2:0d:5f:02:aa:2e:39:82:b6:bc:b1:cb:c1:
                    6b:a3:61:50:48:13:60:a4:98:e9:2c:c6:b0:6b:44:
                    21:19:7a:f7:08:2b:74:d6:ac:41:ff:72:d0:38:34:
                    fe:90:5a:b7:e7:d3:2b:f3:4b:44:27:58:65:c3:c1:
                    44:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:AA:E1:67:DE:B2:FC:D9:77:FD:B0:71:23:39:78:79:39:E9:82:04
            X509v3 Authority Key Identifier:
                keyid:B5:E9:7F:BE:67:D9:5D:F6:E4:A8:06:5E:26:75:E0:40:D6:E8:0E:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tel_vmfZXfbkqAZeJnXgQNboDvw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/5872c2-d53e-48aa-b581-bb44a828cea7/1/tel_vmfZXfbkqAZeJnXgQNboDvw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/5872c2-d53e-48aa-b581-bb44a828cea7/1/tel_vmfZXfbkqAZeJnXgQNboDvw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:c7:2e:81:6e:16:dc:03:d0:59:9f:a8:4a:f7:c1:33:11:34:
         77:ae:08:b4:a7:c5:e6:8f:f0:d2:30:36:b7:c0:4e:7e:cf:57:
         5c:7e:81:e7:e6:3e:7b:66:4c:c1:f6:99:ce:2a:30:06:7d:56:
         a9:74:91:b9:5c:43:f9:1c:03:56:b5:8a:3a:3f:26:77:74:5c:
         2e:23:9e:fa:83:b4:19:78:65:d6:21:e3:ce:4e:08:b6:3c:42:
         6a:44:ce:ef:6f:5e:e4:77:5d:79:95:68:e5:61:69:d1:4f:7f:
         81:04:53:2c:e5:87:3d:ac:4f:b6:4f:70:19:db:cc:53:c3:86:
         e9:a9:e3:8c:50:8d:61:ae:3d:8a:4b:4b:05:59:bc:47:16:ea:
         0d:0d:3e:f4:b8:63:bb:0e:09:8f:28:08:60:9f:e9:52:40:63:
         bd:19:9e:80:68:d6:c8:2d:c0:c3:b5:f7:c8:b4:fb:61:48:7d:
         a4:8c:a0:37:8d:16:d7:61:68:64:e4:34:1f:f3:2d:c3:98:39:
         af:ce:7c:77:65:8d:91:35:de:cb:8b:ca:61:17:17:6a:6d:31:
         1d:79:d8:aa:a1:9b:b1:5d:e3:ac:d0:77:bf:bf:4a:62:3e:a7:
         99:04:63:71:68:b7:3a:c8:48:6d:74:45:1c:7c:b4:05:1e:65:
         ee:c6:41:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:40:36 2026 by rpki-client