Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/5872c2-d53e-48aa-b581-bb44a828cea7/1/tel_vmfZXfbkqAZeJnXgQNboDvw.mft
File:                     tel_vmfZXfbkqAZeJnXgQNboDvw.mft (raw, json)
Hash identifier:          SpP203DkU1fYuUYzE+WyequTO2AVs80Q+ucHsCb5i2Y=
Subject key identifier:   4C:AD:64:81:DA:34:57:93:38:1B:EB:93:07:20:EB:E7:EE:88:A5:8C
Authority key identifier: B5:E9:7F:BE:67:D9:5D:F6:E4:A8:06:5E:26:75:E0:40:D6:E8:0E:FC
Certificate issuer:       /CN=b5e97fbe67d95df6e4a8065e2675e040d6e80efc
Certificate serial:       0196A5410F41FF84C470A511034BCFC703CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tel_vmfZXfbkqAZeJnXgQNboDvw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/5872c2-d53e-48aa-b581-bb44a828cea7/1/tel_vmfZXfbkqAZeJnXgQNboDvw.mft
Manifest number:          052B
Signing time:             Tue 06 May 2025 11:00:26 +0000
Manifest this update:     Tue 06 May 2025 11:00:26 +0000
Manifest next update:     Wed 07 May 2025 11:00:26 +0000
Files and hashes:         1: jq_DhvsvzcmCaUw_lDmYlqXK-R4.roa (hash: KOvHH56ipvWyjeOuOBdWhq6OhJFqmAAlbbCXs8yab8k=)
                          2: tel_vmfZXfbkqAZeJnXgQNboDvw.crl (hash: 5F1xjQE4GU3lbHoWgvDlCMJVWWvm+Qy/GegqJbVgzeU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/5872c2-d53e-48aa-b581-bb44a828cea7/1/tel_vmfZXfbkqAZeJnXgQNboDvw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/5872c2-d53e-48aa-b581-bb44a828cea7/1/tel_vmfZXfbkqAZeJnXgQNboDvw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tel_vmfZXfbkqAZeJnXgQNboDvw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 11:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a5:41:0f:41:ff:84:c4:70:a5:11:03:4b:cf:c7:03:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5e97fbe67d95df6e4a8065e2675e040d6e80efc
        Validity
            Not Before: May  6 11:00:26 2025 GMT
            Not After : May  7 11:00:26 2025 GMT
        Subject: CN=4cad6481da345793381beb930720ebe7ee88a58c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:cc:3a:74:5b:c7:48:06:dc:e8:00:d9:d5:e5:
                    8c:4d:8d:10:44:37:bf:cf:eb:ac:12:30:f8:f7:fa:
                    9a:f6:d6:09:48:cf:ea:93:db:89:af:b6:e7:7f:06:
                    4b:9a:52:61:d0:d2:bb:0e:f9:4b:ac:08:c6:de:52:
                    6d:53:be:4a:94:b9:a0:7a:44:e4:8e:87:a1:f7:20:
                    82:72:7d:8f:29:dc:91:26:2a:e2:c5:f4:24:9d:60:
                    e7:6a:21:91:91:98:08:75:40:ad:c9:be:1d:e1:a0:
                    5c:97:80:e6:39:44:50:ed:97:ee:1a:00:cf:47:9c:
                    e7:50:31:6c:96:80:d0:e0:45:57:41:27:03:c9:f8:
                    8a:87:9a:e5:29:58:a1:ae:90:be:63:b3:a6:91:a5:
                    03:aa:19:d5:1b:a7:9a:d6:00:80:b5:34:b9:cf:79:
                    cf:d3:c8:f0:78:b2:a4:0f:d1:ff:e2:ef:83:c0:8f:
                    6c:ec:72:db:3c:41:e5:77:6d:a0:50:02:5c:4a:89:
                    5a:85:49:f7:71:37:65:36:27:de:71:2a:37:ff:6d:
                    35:ef:1e:1b:e7:04:e3:c2:23:21:4f:21:0b:49:da:
                    52:92:54:bf:92:1b:fe:91:8f:eb:26:37:88:c4:23:
                    05:e8:3e:87:54:4d:53:f7:a6:17:c4:d6:89:09:66:
                    57:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:AD:64:81:DA:34:57:93:38:1B:EB:93:07:20:EB:E7:EE:88:A5:8C
            X509v3 Authority Key Identifier:
                keyid:B5:E9:7F:BE:67:D9:5D:F6:E4:A8:06:5E:26:75:E0:40:D6:E8:0E:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tel_vmfZXfbkqAZeJnXgQNboDvw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/5872c2-d53e-48aa-b581-bb44a828cea7/1/tel_vmfZXfbkqAZeJnXgQNboDvw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/5872c2-d53e-48aa-b581-bb44a828cea7/1/tel_vmfZXfbkqAZeJnXgQNboDvw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:2c:85:16:94:40:27:60:a1:01:cb:39:92:c0:ec:38:56:cf:
         f0:1d:0e:4a:4e:90:47:31:4d:3f:4f:11:89:3a:ff:02:87:f6:
         16:ab:44:22:07:88:55:6b:01:e8:eb:dd:08:9c:61:ac:7e:fa:
         5f:ce:5a:bd:23:7f:83:56:63:7c:82:e0:5b:3d:ad:91:b3:52:
         ac:a3:02:ae:3a:ef:7c:c8:9d:ed:cd:6f:26:6d:58:65:56:44:
         61:2e:ae:13:c2:c6:1a:fb:ad:cd:da:3d:de:e1:10:de:d6:f4:
         0c:97:32:70:b9:1a:6d:74:8b:ae:b2:08:ae:f7:23:77:49:39:
         b0:95:c4:e6:aa:2d:bf:c0:a1:cb:4a:11:33:80:a8:8b:a6:48:
         38:6f:b4:60:db:93:52:21:c8:5f:43:77:68:5d:5a:2b:d0:2a:
         bc:db:ac:b8:f9:e7:26:18:31:9e:b0:3b:a9:78:c0:d0:d5:f7:
         de:85:fe:22:41:f4:91:83:b7:30:29:3c:92:ea:94:e0:fb:e6:
         32:01:6b:eb:89:9d:bd:46:3d:fa:57:8d:b2:fe:f4:7f:6e:ce:
         16:0a:8f:97:fe:a1:3c:e6:d4:0a:39:3f:b6:f6:7c:bb:3c:d7:
         c4:3c:e5:f5:d3:96:5f:dd:3e:8b:11:3d:e1:43:dd:73:ea:61:
         38:07:03:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 18:22:23 2025 by rpki-client