Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/5872c2-d53e-48aa-b581-bb44a828cea7/1/tel_vmfZXfbkqAZeJnXgQNboDvw.mft
File:                     tel_vmfZXfbkqAZeJnXgQNboDvw.mft (raw, json)
Hash identifier:          /Nl8pAhyOUkqbVt6dUJxr2mrwB/3/5dysgtGVWPxRPw=
Subject key identifier:   47:FD:2D:19:47:7C:10:BF:77:3A:9B:42:B9:3A:6C:8F:63:91:C6:28
Authority key identifier: B5:E9:7F:BE:67:D9:5D:F6:E4:A8:06:5E:26:75:E0:40:D6:E8:0E:FC
Certificate issuer:       /CN=b5e97fbe67d95df6e4a8065e2675e040d6e80efc
Certificate serial:       01A104001DA9F0C29B97C5F5BBA1AFCF6A91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tel_vmfZXfbkqAZeJnXgQNboDvw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/5872c2-d53e-48aa-b581-bb44a828cea7/1/tel_vmfZXfbkqAZeJnXgQNboDvw.mft
Manifest number:          0A8A
Signing time:             Sat 03 Oct 2026 23:01:18 +0000
Manifest this update:     Sat 03 Oct 2026 23:01:18 +0000
Manifest next update:     Sun 04 Oct 2026 23:01:18 +0000
Files and hashes:         1: lRduZBk6nEvsRYZfzYBZ3PoPmqI.roa (hash: ct9EeHxmTMuFDeIK11XJPdvpcrbj5c+nN/xoGkmQQ44=)
                          2: tel_vmfZXfbkqAZeJnXgQNboDvw.crl (hash: GG6oog8ShXPNpUrxNiqn2UZ/SOyggPqobsKfsS0w3so=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/5872c2-d53e-48aa-b581-bb44a828cea7/1/tel_vmfZXfbkqAZeJnXgQNboDvw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/5872c2-d53e-48aa-b581-bb44a828cea7/1/tel_vmfZXfbkqAZeJnXgQNboDvw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tel_vmfZXfbkqAZeJnXgQNboDvw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 Oct 2026 20:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:04:00:1d:a9:f0:c2:9b:97:c5:f5:bb:a1:af:cf:6a:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5e97fbe67d95df6e4a8065e2675e040d6e80efc
        Validity
            Not Before: Oct  3 23:01:18 2026 GMT
            Not After : Oct  4 23:01:18 2026 GMT
        Subject: CN=47fd2d19477c10bf773a9b42b93a6c8f6391c628
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:8d:5c:c8:ca:96:e9:de:be:be:94:7c:22:dc:
                    d7:c3:1f:34:6c:b5:70:85:6f:fe:b3:06:ba:a9:bd:
                    79:a2:3b:16:96:bd:48:22:bc:1c:d3:e7:dd:b7:31:
                    6f:c9:06:98:ec:a8:2b:cf:1b:5a:00:21:b7:47:a7:
                    24:46:f8:f3:f2:63:e9:93:46:5c:02:98:43:b0:2a:
                    5d:8d:cf:1e:b4:83:9e:3b:95:7a:0f:65:23:0e:e4:
                    32:35:81:9c:17:52:7f:40:ac:4d:c1:7c:27:2e:fb:
                    a0:6f:17:0e:5d:d8:7f:4f:fa:76:cd:dd:22:f7:db:
                    a8:9f:f8:20:25:45:34:25:c6:8d:99:ab:0c:d0:96:
                    16:b7:1a:b0:0e:f2:55:f2:a5:b9:b7:fa:a0:ab:f4:
                    16:12:0e:6a:72:87:96:63:c6:ac:08:13:13:60:56:
                    4d:3c:f9:57:5d:e9:a6:6f:5b:e7:a3:89:ee:c2:42:
                    6a:c6:ce:f4:bf:ae:a6:96:5c:39:b3:a6:d2:24:da:
                    d9:8a:58:b3:00:b9:1d:7f:bd:c6:f7:8d:ef:a3:26:
                    bf:27:fc:67:a3:17:3e:42:a7:19:2b:c7:ec:3f:c2:
                    b8:64:9f:cd:9e:95:0b:b5:ce:e3:95:a0:f9:83:c7:
                    e9:89:aa:db:d1:e3:2c:5d:ba:a2:13:58:41:f5:01:
                    dd:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:FD:2D:19:47:7C:10:BF:77:3A:9B:42:B9:3A:6C:8F:63:91:C6:28
            X509v3 Authority Key Identifier:
                keyid:B5:E9:7F:BE:67:D9:5D:F6:E4:A8:06:5E:26:75:E0:40:D6:E8:0E:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tel_vmfZXfbkqAZeJnXgQNboDvw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/5872c2-d53e-48aa-b581-bb44a828cea7/1/tel_vmfZXfbkqAZeJnXgQNboDvw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/5872c2-d53e-48aa-b581-bb44a828cea7/1/tel_vmfZXfbkqAZeJnXgQNboDvw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:94:d4:d1:35:41:5c:b8:8a:96:66:28:23:73:ab:c9:15:d4:
         35:08:f1:b7:86:84:a9:29:18:46:37:d4:5f:e5:c0:c1:35:5b:
         96:5a:39:51:ec:1b:cd:29:c6:9f:e0:0a:80:c0:d3:f9:8b:1d:
         4e:1d:46:e2:da:20:30:85:cc:67:b8:6e:1f:f7:30:50:38:8e:
         f6:83:eb:d2:da:48:16:40:30:af:d4:e1:2e:00:03:f9:7e:ef:
         bc:e0:0d:ee:3e:15:69:d4:1d:9a:df:c2:3f:17:82:c8:9e:bb:
         65:4e:87:14:bd:c8:27:b9:15:71:9b:fe:87:d9:ef:72:1d:55:
         bc:c8:0a:8d:41:f9:48:28:ed:9b:f7:98:e6:d7:f6:2d:a8:6c:
         dc:d5:d0:67:4e:40:de:46:66:8c:ce:a5:0d:94:6d:9e:d7:1c:
         b2:f2:eb:97:d8:26:1d:e4:e3:07:66:6d:36:d2:e1:c1:a8:0c:
         3d:36:e8:a8:f4:f6:42:62:5e:9c:97:f9:3a:de:8f:54:af:b9:
         9c:9d:6c:71:ee:1c:9e:00:9c:a0:a2:07:a0:d9:df:f1:51:42:
         f4:2e:b2:16:78:0d:e1:e8:1c:d3:4f:c3:6d:03:09:b5:e4:15:
         39:c1:95:3f:07:4f:4d:69:d5:95:5d:2e:52:4f:2d:34:ac:de:
         7c:5a:2f:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 06:38:58 2026 by rpki-client