Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/5872c2-d53e-48aa-b581-bb44a828cea7/1/tel_vmfZXfbkqAZeJnXgQNboDvw.mft
File:                     tel_vmfZXfbkqAZeJnXgQNboDvw.mft (raw, json)
Hash identifier:          K2s7MTuAiBohQIqRTezHvF4n4KV9sPySQIcR9T/jzB0=
Subject key identifier:   AF:E1:4A:1D:D0:22:EE:E0:40:8E:B0:C3:2A:BD:5B:7E:14:0C:F1:90
Authority key identifier: B5:E9:7F:BE:67:D9:5D:F6:E4:A8:06:5E:26:75:E0:40:D6:E8:0E:FC
Certificate issuer:       /CN=b5e97fbe67d95df6e4a8065e2675e040d6e80efc
Certificate serial:       019D389BE1B877356C4508CFB0E68F1B3F29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tel_vmfZXfbkqAZeJnXgQNboDvw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/5872c2-d53e-48aa-b581-bb44a828cea7/1/tel_vmfZXfbkqAZeJnXgQNboDvw.mft
Manifest number:          0893
Signing time:             Sun 29 Mar 2026 08:00:33 +0000
Manifest this update:     Sun 29 Mar 2026 08:00:33 +0000
Manifest next update:     Mon 30 Mar 2026 08:00:33 +0000
Files and hashes:         1: lRduZBk6nEvsRYZfzYBZ3PoPmqI.roa (hash: ct9EeHxmTMuFDeIK11XJPdvpcrbj5c+nN/xoGkmQQ44=)
                          2: tel_vmfZXfbkqAZeJnXgQNboDvw.crl (hash: deamLSHzRoKPAAaAkeWwC7dsrhMT8lIIIOl2IIfoCnM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/5872c2-d53e-48aa-b581-bb44a828cea7/1/tel_vmfZXfbkqAZeJnXgQNboDvw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/5872c2-d53e-48aa-b581-bb44a828cea7/1/tel_vmfZXfbkqAZeJnXgQNboDvw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tel_vmfZXfbkqAZeJnXgQNboDvw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:9b:e1:b8:77:35:6c:45:08:cf:b0:e6:8f:1b:3f:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5e97fbe67d95df6e4a8065e2675e040d6e80efc
        Validity
            Not Before: Mar 29 08:00:33 2026 GMT
            Not After : Mar 30 08:00:33 2026 GMT
        Subject: CN=afe14a1dd022eee0408eb0c32abd5b7e140cf190
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:48:e3:bd:4a:04:17:90:a2:18:ac:79:f8:4d:
                    25:1d:01:28:21:12:a5:aa:ab:7e:0c:40:c8:1e:6e:
                    55:d1:04:4a:45:ed:a8:0d:8c:91:95:f9:5b:60:74:
                    91:fe:b2:3c:bc:01:c5:96:49:c2:0e:57:00:30:83:
                    6d:02:d7:8f:f7:38:da:9e:f8:f4:ac:93:94:0a:78:
                    81:51:b9:44:1a:f4:53:ec:99:6e:a5:e3:9f:5a:ca:
                    a6:8f:2b:56:09:a9:8b:2a:64:1b:c9:04:e0:8e:cf:
                    f8:76:38:67:df:03:50:28:dd:c5:9a:ad:03:95:84:
                    19:c5:29:0f:51:e6:a7:b1:16:91:89:b5:a4:6c:2f:
                    01:0a:a0:f9:47:1e:dc:13:f9:32:b7:e7:19:e3:3b:
                    ae:00:2b:38:1e:8e:d6:28:1d:aa:61:28:ca:79:4d:
                    f2:57:87:a6:f9:70:84:c5:3f:7d:f6:78:8a:33:29:
                    ea:3d:7f:2b:e6:e9:f1:9f:f7:0c:60:17:fa:a2:ab:
                    47:95:c0:ec:cb:f5:18:74:3a:e9:ef:a8:0f:9f:5e:
                    4b:e4:e0:70:d0:3b:69:a3:c6:7e:89:da:98:cf:be:
                    ef:d1:e3:b8:29:4a:50:37:7c:83:c9:18:bc:c9:4d:
                    86:2f:a7:cc:21:6b:f0:2b:c4:ef:30:f8:d7:cb:61:
                    bd:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:E1:4A:1D:D0:22:EE:E0:40:8E:B0:C3:2A:BD:5B:7E:14:0C:F1:90
            X509v3 Authority Key Identifier:
                keyid:B5:E9:7F:BE:67:D9:5D:F6:E4:A8:06:5E:26:75:E0:40:D6:E8:0E:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tel_vmfZXfbkqAZeJnXgQNboDvw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/5872c2-d53e-48aa-b581-bb44a828cea7/1/tel_vmfZXfbkqAZeJnXgQNboDvw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/5872c2-d53e-48aa-b581-bb44a828cea7/1/tel_vmfZXfbkqAZeJnXgQNboDvw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:31:90:3b:c9:46:37:2d:56:3f:96:9e:d9:17:fd:ad:d7:62:
         4c:17:01:34:e9:d4:69:8d:c6:63:c2:80:31:e7:38:60:81:64:
         ef:31:ff:01:4b:29:85:39:f7:9f:a1:24:3b:f0:9e:94:11:d2:
         cc:89:34:ba:ba:7a:9d:51:6e:0f:8d:f6:46:1f:0a:e7:21:95:
         6b:b1:d9:cd:d2:ac:72:bd:35:2e:9b:f8:77:2b:44:65:9c:01:
         85:af:ef:1a:48:e3:25:69:43:56:ea:0a:bc:97:50:08:02:44:
         cd:62:c7:7e:19:9f:c4:f1:96:1e:52:85:d0:40:b1:91:46:e8:
         f1:77:20:2c:21:1a:a8:4e:ba:e7:7a:c9:d3:f2:b9:f6:ef:53:
         ea:87:e4:1b:dd:aa:48:a3:71:87:90:c7:ad:35:25:93:0b:68:
         0c:50:96:99:92:45:82:c9:7b:c6:90:db:e1:ac:68:78:35:be:
         1f:de:20:d8:f5:1b:55:2b:15:6f:6e:c1:cf:40:a6:ad:d4:7b:
         46:f6:d9:30:4e:a7:6d:b8:15:e3:8d:09:ca:5a:36:95:1b:35:
         ca:df:9a:80:5a:ae:7f:b2:43:d9:c0:8f:2b:2d:3a:06:a4:5f:
         3c:f3:14:d4:07:01:f4:cf:63:22:ef:1f:c7:09:3a:ec:fc:1c:
         5a:31:5f:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:55:48 2026 by rpki-client