Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3618B80/FFDBFDAA524811EEB96964164AD9E6FC/E1GrIbf03rgU81lO-IKc3VSFi8g.mft
File:                     E1GrIbf03rgU81lO-IKc3VSFi8g.mft (raw, json)
Hash identifier:          A2gkFefFHtVhTM2Lp6MEzTGtO7D3cIT2QOAg66wvXrM=
Subject key identifier:   29:7A:7A:70:B7:B1:6D:F3:90:98:5E:05:2C:F5:E1:33:20:23:AC:D5
Authority key identifier: 13:51:AB:21:B7:F4:DE:B8:14:F3:59:4E:F8:82:9C:DD:54:85:8B:C8
Certificate issuer:       /CN=F3618B80AF/serialNumber=1351AB21B7F4DEB814F3594EF8829CDD54858BC8
Certificate serial:       0331
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/E1GrIbf03rgU81lO-IKc3VSFi8g.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3618B80/FFDBFDAA524811EEB96964164AD9E6FC/E1GrIbf03rgU81lO-IKc3VSFi8g.mft
Manifest number:          032D
Signing time:             Tue 04 Nov 2025 05:03:44 +0000
Manifest this update:     Tue 04 Nov 2025 05:03:43 +0000
Manifest next update:     Thu 06 Nov 2025 05:03:43 +0000
Files and hashes:         1: E1GrIbf03rgU81lO-IKc3VSFi8g.crl (hash: CUygDErh+8dGqrJ5uwrqi2VvkxeoISlBDRRuT0RhVH8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3618B80/FFDBFDAA524811EEB96964164AD9E6FC/E1GrIbf03rgU81lO-IKc3VSFi8g.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3618B80/FFDBFDAA524811EEB96964164AD9E6FC/E1GrIbf03rgU81lO-IKc3VSFi8g.mft
                          rsync://rpki.afrinic.net/repository/afrinic/E1GrIbf03rgU81lO-IKc3VSFi8g.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 06 Nov 2025 05:03:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 817 (0x331)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3618B80AF, serialNumber=1351AB21B7F4DEB814F3594EF8829CDD54858BC8
        Validity
            Not Before: Nov  4 05:03:43 2025 GMT
            Not After : Nov  6 05:03:43 2025 GMT
        Subject: CN=69098930-4392
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:da:d6:52:c1:b1:05:6c:ea:13:03:21:9b:49:
                    dc:bc:1b:49:1c:08:5f:4b:e5:9f:fe:b3:e2:a3:73:
                    a3:82:0d:dd:41:3e:db:4b:fb:f7:dd:ea:3f:bb:08:
                    4e:e6:74:ef:b0:bc:a5:c0:62:a6:9c:26:1d:95:df:
                    0e:ed:25:ac:01:38:cb:a0:8f:4b:bc:0c:e0:e9:5b:
                    50:a3:e2:b2:c0:7a:57:e1:dd:73:13:6e:5c:10:64:
                    14:dc:51:6c:8f:fc:f3:86:18:56:1e:c2:2a:49:0f:
                    77:91:c5:07:6a:a6:e3:5a:f9:21:cc:7d:89:de:3f:
                    ec:ee:f5:95:50:6c:6c:8f:aa:08:8a:52:63:87:a2:
                    8a:e2:3b:5c:40:b4:77:5a:bf:0e:d6:87:7e:41:fb:
                    7d:d1:65:fc:58:d6:27:63:0b:95:9e:6f:6a:8a:4e:
                    e0:59:90:fd:42:a6:12:12:6b:70:6b:e8:a9:1b:74:
                    d5:3e:fe:3e:b4:6e:2a:be:e3:34:89:ac:b7:43:14:
                    02:bf:f6:a9:5a:2f:e8:1a:21:40:7e:69:dd:08:92:
                    6a:ec:59:fd:77:a6:b8:db:2e:95:cb:fc:3e:9e:ff:
                    15:d0:0f:29:4c:f8:33:a4:e9:f7:e1:05:53:58:85:
                    95:f8:f3:e7:12:da:09:3a:71:e8:ac:27:3c:be:33:
                    91:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:7A:7A:70:B7:B1:6D:F3:90:98:5E:05:2C:F5:E1:33:20:23:AC:D5
            X509v3 Authority Key Identifier:
                keyid:13:51:AB:21:B7:F4:DE:B8:14:F3:59:4E:F8:82:9C:DD:54:85:8B:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3618B80/FFDBFDAA524811EEB96964164AD9E6FC/E1GrIbf03rgU81lO-IKc3VSFi8g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/E1GrIbf03rgU81lO-IKc3VSFi8g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3618B80/FFDBFDAA524811EEB96964164AD9E6FC/E1GrIbf03rgU81lO-IKc3VSFi8g.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:2c:ca:59:96:56:64:27:d8:de:dd:5b:86:66:9e:02:49:6c:
         a7:41:2b:9c:50:d1:8c:7c:75:ef:71:25:41:59:e2:0a:2e:a3:
         bd:de:89:45:a6:5b:e0:c8:4f:dd:1f:a9:d2:77:c3:c3:f2:bb:
         3a:a5:96:eb:91:67:34:0e:4e:27:ee:aa:4b:05:7c:01:1f:a8:
         79:f6:b2:12:1f:36:06:25:b7:96:39:7d:9e:a6:b6:a4:bc:f0:
         10:fe:96:cd:e2:9b:d3:08:33:82:a8:30:4f:93:9b:b6:56:c7:
         85:26:e7:62:8f:35:a1:52:66:5c:90:9a:18:ed:55:66:3e:c3:
         b7:29:c0:0b:7b:02:35:2f:ee:74:33:fb:4b:3b:c1:c8:5a:75:
         4f:66:05:ef:b7:94:d3:8c:45:cc:3e:70:18:ba:ff:99:09:fd:
         89:83:20:f8:19:7e:5a:07:0c:a8:ae:03:e4:61:9a:40:4b:6f:
         e0:51:0d:6c:4e:53:9f:8b:f0:9a:dc:61:76:37:df:b0:cf:e1:
         09:ea:5f:f1:c1:b9:68:e6:6c:49:63:be:49:54:22:8d:09:bf:
         f6:20:c2:11:b8:a3:95:3c:a6:5b:81:cd:f6:a8:f7:c2:90:43:
         d3:85:fe:43:30:77:58:46:17:20:2f:33:de:5f:0f:2c:1e:ff:
         e6:78:72:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:44:30 2025 by rpki-client