Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/5872c2-d53e-48aa-b581-bb44a828cea7/1/tel_vmfZXfbkqAZeJnXgQNboDvw.mft
File:                     tel_vmfZXfbkqAZeJnXgQNboDvw.mft (raw, json)
Hash identifier:          WclUfE2LqPkCsc27CJ2x9U7qQI151Ln7gGmFUUgt/Tc=
Subject key identifier:   62:93:1E:10:8E:DF:F9:4C:A8:FC:3D:BE:99:5B:B0:A4:D2:F5:01:EE
Authority key identifier: B5:E9:7F:BE:67:D9:5D:F6:E4:A8:06:5E:26:75:E0:40:D6:E8:0E:FC
Certificate issuer:       /CN=b5e97fbe67d95df6e4a8065e2675e040d6e80efc
Certificate serial:       0199FCC62C296DA1E85A62DCA6A3F79F9495
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tel_vmfZXfbkqAZeJnXgQNboDvw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/5872c2-d53e-48aa-b581-bb44a828cea7/1/tel_vmfZXfbkqAZeJnXgQNboDvw.mft
Manifest number:          06E6
Signing time:             Sun 19 Oct 2025 14:01:09 +0000
Manifest this update:     Sun 19 Oct 2025 14:01:09 +0000
Manifest next update:     Mon 20 Oct 2025 14:01:09 +0000
Files and hashes:         1: jq_DhvsvzcmCaUw_lDmYlqXK-R4.roa (hash: KOvHH56ipvWyjeOuOBdWhq6OhJFqmAAlbbCXs8yab8k=)
                          2: tel_vmfZXfbkqAZeJnXgQNboDvw.crl (hash: XTSp70NGDGqnDSKAyT0PSiVUnF21l/lT/ynwktTfOSc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/5872c2-d53e-48aa-b581-bb44a828cea7/1/tel_vmfZXfbkqAZeJnXgQNboDvw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/5872c2-d53e-48aa-b581-bb44a828cea7/1/tel_vmfZXfbkqAZeJnXgQNboDvw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tel_vmfZXfbkqAZeJnXgQNboDvw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 14:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:c6:2c:29:6d:a1:e8:5a:62:dc:a6:a3:f7:9f:94:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5e97fbe67d95df6e4a8065e2675e040d6e80efc
        Validity
            Not Before: Oct 19 14:01:09 2025 GMT
            Not After : Oct 20 14:01:09 2025 GMT
        Subject: CN=62931e108edff94ca8fc3dbe995bb0a4d2f501ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:01:e9:b2:04:f6:ed:78:ba:0f:5e:64:7b:b3:
                    03:33:80:a3:50:9f:df:50:bb:f5:d0:ce:de:62:15:
                    5d:03:d7:e8:fd:2e:93:a0:0c:1e:be:08:3b:76:df:
                    e5:29:ef:33:c6:a1:c8:44:58:82:ee:73:17:8a:e4:
                    59:1e:9f:d1:5e:41:c4:a1:0c:9e:11:50:b1:d4:e1:
                    c8:b6:15:16:2a:40:57:0b:4c:b6:5c:be:4c:47:11:
                    fd:5a:60:ae:cc:b6:42:40:82:73:15:b1:41:b7:ae:
                    b4:7a:c1:39:d2:e0:3f:e2:8b:6f:54:d4:10:74:8c:
                    dd:58:ed:12:05:c4:0b:d8:a4:84:12:b2:2f:e7:6b:
                    0c:e0:60:0e:13:5d:09:08:23:a9:36:0c:bd:54:6f:
                    d5:4d:dd:23:21:b5:9f:d8:41:b8:f2:5a:5f:ce:23:
                    c7:44:4f:59:82:28:1b:d7:54:ee:1d:98:af:68:14:
                    6b:97:d8:9e:29:1d:97:be:42:f9:3e:fa:b1:c8:52:
                    95:13:fe:48:3f:fa:c7:5d:d6:87:98:c0:bb:4a:df:
                    aa:d8:ff:45:82:11:ea:73:8b:12:43:97:10:39:d6:
                    03:c1:2f:68:60:cd:02:ca:85:1d:d7:3b:74:c0:fd:
                    fc:29:c6:e2:56:da:39:42:f1:3d:a9:a4:cf:a2:22:
                    25:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:93:1E:10:8E:DF:F9:4C:A8:FC:3D:BE:99:5B:B0:A4:D2:F5:01:EE
            X509v3 Authority Key Identifier:
                keyid:B5:E9:7F:BE:67:D9:5D:F6:E4:A8:06:5E:26:75:E0:40:D6:E8:0E:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tel_vmfZXfbkqAZeJnXgQNboDvw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/5872c2-d53e-48aa-b581-bb44a828cea7/1/tel_vmfZXfbkqAZeJnXgQNboDvw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/5872c2-d53e-48aa-b581-bb44a828cea7/1/tel_vmfZXfbkqAZeJnXgQNboDvw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:0c:ee:04:75:57:06:cd:c4:20:ba:1d:ba:d5:ed:c6:4e:65:
         ec:b9:f0:be:0f:8f:31:70:2d:3d:09:b1:0a:19:35:45:17:98:
         0e:7f:8a:d0:9d:85:01:26:d3:ef:da:c2:c9:b9:f0:8e:b2:2a:
         09:4c:f9:98:a9:e1:4c:08:8d:bc:b3:ca:cd:de:08:1c:90:be:
         72:fe:dc:45:ee:9c:df:fa:82:20:29:dc:2a:87:de:66:7a:9a:
         d0:7f:eb:b6:32:dc:00:4f:14:af:be:d9:94:2a:b9:67:03:78:
         5f:be:f6:a7:59:f9:0e:98:ae:df:4c:15:79:e0:05:4a:b8:53:
         8d:b8:6d:d7:9f:d2:b9:1a:25:03:d4:2c:f9:ef:e0:04:46:a9:
         96:46:0b:5b:6d:87:45:65:24:78:44:83:eb:56:fb:e3:9f:b0:
         cb:2e:47:2a:47:e2:03:19:5d:17:ec:54:73:f9:8e:aa:9d:64:
         98:61:c6:0c:4c:19:7e:d4:74:33:34:39:fc:07:24:f9:ad:4d:
         e4:b3:91:3e:cb:50:c3:f8:b9:a2:72:b2:09:03:7b:fe:cc:77:
         e6:7a:af:34:2c:55:56:71:1c:d5:07:f7:bb:65:17:88:52:3f:
         86:f1:a3:f7:2b:60:d8:48:95:3e:2b:50:be:af:4c:13:2a:79:
         2f:96:0d:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:07:16 2025 by rpki-client