Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/5872c2-d53e-48aa-b581-bb44a828cea7/1/tel_vmfZXfbkqAZeJnXgQNboDvw.mft
File:                     tel_vmfZXfbkqAZeJnXgQNboDvw.mft (raw, json)
Hash identifier:          o4TGarFYCe6Zps0wSlxspCDlj4q+xteUkxwGRHUFN/o=
Subject key identifier:   3B:49:38:0E:5E:5D:2D:5F:19:3B:64:A9:E9:37:E8:40:6E:70:4B:85
Authority key identifier: B5:E9:7F:BE:67:D9:5D:F6:E4:A8:06:5E:26:75:E0:40:D6:E8:0E:FC
Certificate issuer:       /CN=b5e97fbe67d95df6e4a8065e2675e040d6e80efc
Certificate serial:       01A0886734FBD53A9BE30A865E71B2964612
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tel_vmfZXfbkqAZeJnXgQNboDvw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/5872c2-d53e-48aa-b581-bb44a828cea7/1/tel_vmfZXfbkqAZeJnXgQNboDvw.mft
Manifest number:          0A4A
Signing time:             Wed 09 Sep 2026 23:01:00 +0000
Manifest this update:     Wed 09 Sep 2026 23:01:00 +0000
Manifest next update:     Thu 10 Sep 2026 23:01:00 +0000
Files and hashes:         1: lRduZBk6nEvsRYZfzYBZ3PoPmqI.roa (hash: ct9EeHxmTMuFDeIK11XJPdvpcrbj5c+nN/xoGkmQQ44=)
                          2: tel_vmfZXfbkqAZeJnXgQNboDvw.crl (hash: O7X4w0Wz54Xsf8NxUOMy7Qb7UXCNN7gPLZiasThCaI0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/5872c2-d53e-48aa-b581-bb44a828cea7/1/tel_vmfZXfbkqAZeJnXgQNboDvw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/5872c2-d53e-48aa-b581-bb44a828cea7/1/tel_vmfZXfbkqAZeJnXgQNboDvw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tel_vmfZXfbkqAZeJnXgQNboDvw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 10 Sep 2026 23:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:88:67:34:fb:d5:3a:9b:e3:0a:86:5e:71:b2:96:46:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5e97fbe67d95df6e4a8065e2675e040d6e80efc
        Validity
            Not Before: Sep  9 23:01:00 2026 GMT
            Not After : Sep 10 23:01:00 2026 GMT
        Subject: CN=3b49380e5e5d2d5f193b64a9e937e8406e704b85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:97:a8:28:9e:13:97:fb:a5:a2:36:da:60:4b:
                    0b:d9:83:f5:b2:ab:88:6b:ef:dd:e1:ed:38:8a:a2:
                    34:f3:1e:48:61:c0:a4:fc:95:04:d6:f4:01:57:76:
                    8d:76:1b:28:f2:a5:80:bb:84:13:cf:c0:ed:54:ac:
                    bc:0c:e1:fc:63:ad:b8:60:6c:33:95:17:74:8c:ee:
                    21:40:70:61:62:a2:9f:6b:9d:bb:1a:fb:e9:0f:2c:
                    14:cf:36:19:4e:6b:bd:bc:0b:55:0c:30:62:84:a4:
                    c5:6f:e1:28:d0:8d:f0:22:52:41:c1:a1:c2:7b:a3:
                    ec:5d:32:fc:14:41:5a:31:7f:89:ac:9f:a2:3d:6e:
                    0d:25:18:bd:86:a9:73:17:19:64:60:25:75:9a:5c:
                    fc:2e:18:ec:61:e0:2c:ad:9f:0f:52:86:3f:60:6b:
                    17:4a:8a:bd:be:2f:1e:c3:b3:55:1a:e6:cd:1b:d1:
                    80:f0:b1:00:37:5e:d4:32:b3:77:81:4f:c0:e2:b9:
                    83:02:e7:f9:ab:ea:5f:d1:a4:6f:5a:ce:e7:ad:25:
                    54:dc:0d:19:98:1e:8e:9a:6f:30:d1:2b:05:98:29:
                    e4:af:2a:26:aa:78:b4:24:08:cd:db:15:4b:fb:24:
                    38:21:0b:92:de:9d:fa:90:a6:f0:b4:92:be:e8:61:
                    a5:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:49:38:0E:5E:5D:2D:5F:19:3B:64:A9:E9:37:E8:40:6E:70:4B:85
            X509v3 Authority Key Identifier:
                keyid:B5:E9:7F:BE:67:D9:5D:F6:E4:A8:06:5E:26:75:E0:40:D6:E8:0E:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tel_vmfZXfbkqAZeJnXgQNboDvw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/5872c2-d53e-48aa-b581-bb44a828cea7/1/tel_vmfZXfbkqAZeJnXgQNboDvw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/5872c2-d53e-48aa-b581-bb44a828cea7/1/tel_vmfZXfbkqAZeJnXgQNboDvw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:d9:67:b9:6d:15:7b:b1:39:bb:a5:c2:e8:07:ee:ae:b8:72:
         a5:b8:b2:dd:86:64:39:e8:bd:ad:f2:3f:79:6c:b9:72:f7:f0:
         50:04:8f:d4:70:86:65:b4:3f:61:4f:02:b6:ba:c4:c9:98:a8:
         ec:99:6a:cb:e7:ec:28:2e:17:54:0c:e1:5b:bd:7d:54:02:9e:
         8d:3c:c5:95:3f:1f:37:cd:6f:3e:da:1b:6f:a8:84:b4:64:95:
         dc:30:34:ec:fb:b3:26:92:86:8a:df:ce:17:21:21:38:b2:72:
         d6:68:d0:29:4a:15:b5:76:29:c0:a2:e3:9d:8e:25:0e:23:ea:
         87:04:0d:fa:11:6c:8d:a4:a4:ad:ba:eb:a1:d3:83:12:c6:6f:
         f0:eb:b2:91:9a:64:93:8c:86:3d:1a:10:14:64:5b:9a:8d:02:
         8d:8d:a6:51:6e:f4:86:fc:b3:1f:a5:25:f3:ec:bd:17:9f:62:
         8e:2f:d1:cf:02:f6:c7:a6:ac:4e:33:6d:da:66:b2:30:93:a1:
         b4:8b:1b:9c:9d:84:d2:0f:12:23:6e:6c:80:07:1f:f5:c1:cd:
         3d:1d:93:93:36:20:4d:79:5b:9d:b8:42:38:31:4f:ef:aa:37:
         9a:bc:69:cc:f4:b1:ee:f6:1d:f6:13:b1:30:31:79:75:0b:0d:
         f3:04:3a:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 08:14:25 2026 by rpki-client