Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3619C8C/DE28B16C5FDA11EF8ACEB9A9762E951A/D1pm1nbRb8eSfE4kaUoejHekQGs.mft
File:                     D1pm1nbRb8eSfE4kaUoejHekQGs.mft (raw, json)
Hash identifier:          sUCYHyClM52iTxJfGpPJ5104X8maOvK+dXsOuPrWuyc=
Subject key identifier:   D4:1C:D3:0E:A4:E8:0C:90:FB:E5:E2:6D:3C:2C:E6:54:57:89:85:1A
Authority key identifier: 0F:5A:66:D6:76:D1:6F:C7:92:7C:4E:24:69:4A:1E:8C:77:A4:40:6B
Certificate issuer:       /CN=F3619C8CRI/serialNumber=0F5A66D676D16FC7927C4E24694A1E8C77A4406B
Certificate serial:       0243
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/D1pm1nbRb8eSfE4kaUoejHekQGs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3619C8C/DE28B16C5FDA11EF8ACEB9A9762E951A/D1pm1nbRb8eSfE4kaUoejHekQGs.mft
Manifest number:          0242
Signing time:             Mon 02 Mar 2026 03:03:04 +0000
Manifest this update:     Mon 02 Mar 2026 03:03:03 +0000
Manifest next update:     Wed 04 Mar 2026 03:03:03 +0000
Files and hashes:         1: D1pm1nbRb8eSfE4kaUoejHekQGs.crl (hash: JTJI9U+O0VFAyzsn3sNTtOBNsQI1peHsWeKsx1ZTBks=)
                          2: 556811145FEA11EF84A2058A762E951A.roa (hash: P0gvfxM0hcVTDkEmLqEkHZpP55/CRPi31FOdnN+KXYg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3619C8C/DE28B16C5FDA11EF8ACEB9A9762E951A/D1pm1nbRb8eSfE4kaUoejHekQGs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3619C8C/DE28B16C5FDA11EF8ACEB9A9762E951A/D1pm1nbRb8eSfE4kaUoejHekQGs.mft
                          rsync://rpki.afrinic.net/repository/ripe/D1pm1nbRb8eSfE4kaUoejHekQGs.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Mar 2026 00:45:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 579 (0x243)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3619C8CRI, serialNumber=0F5A66D676D16FC7927C4E24694A1E8C77A4406B
        Validity
            Not Before: Mar  2 03:03:03 2026 GMT
            Not After : Mar  4 03:03:03 2026 GMT
        Subject: CN=69a4fde8-8fc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:22:3f:cc:b3:94:dd:40:6a:60:6e:20:b3:5d:
                    bd:13:a7:6b:cd:eb:96:b5:77:c4:41:d7:86:0b:79:
                    f3:5c:a6:81:1e:e5:33:04:4e:8e:c5:4b:67:c1:68:
                    f1:9e:59:0c:a2:2e:c3:38:a4:46:65:c1:12:dc:61:
                    74:d8:ab:82:6f:03:b7:f8:cc:76:80:9c:92:ea:cb:
                    e5:51:51:66:f4:91:83:70:b1:dc:be:e7:54:c4:90:
                    4c:55:a6:40:16:59:e4:4e:8d:67:c5:e9:74:36:a7:
                    54:1e:20:44:71:24:48:76:9e:45:e7:21:3d:4c:6b:
                    a0:ac:20:dd:10:5f:51:b4:01:28:a2:73:48:d9:1a:
                    e0:c3:32:9c:e3:5a:37:96:88:16:8a:0c:ff:7b:bc:
                    c5:04:dc:03:14:9e:e6:fa:84:81:7a:2e:7a:de:1f:
                    1f:7a:a6:a6:c5:2e:8d:1b:3d:ac:8e:de:f6:0d:f6:
                    b8:3d:97:f8:6e:54:86:d2:15:02:d0:81:af:aa:c7:
                    71:0c:19:0e:7f:05:a7:e6:90:4b:fb:0f:db:92:de:
                    0c:86:ca:8f:b2:79:4f:d6:af:2f:18:51:dc:74:37:
                    2f:9a:dc:31:d0:e2:18:54:95:b9:4b:cf:b1:a9:77:
                    d3:8b:3f:20:72:b1:47:37:bb:9a:41:a2:4d:85:5b:
                    f7:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:1C:D3:0E:A4:E8:0C:90:FB:E5:E2:6D:3C:2C:E6:54:57:89:85:1A
            X509v3 Authority Key Identifier:
                keyid:0F:5A:66:D6:76:D1:6F:C7:92:7C:4E:24:69:4A:1E:8C:77:A4:40:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3619C8C/DE28B16C5FDA11EF8ACEB9A9762E951A/D1pm1nbRb8eSfE4kaUoejHekQGs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/D1pm1nbRb8eSfE4kaUoejHekQGs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3619C8C/DE28B16C5FDA11EF8ACEB9A9762E951A/D1pm1nbRb8eSfE4kaUoejHekQGs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:ed:80:e6:9f:2b:6a:b4:00:e1:ba:40:dc:0e:80:6a:7f:90:
         f0:a8:46:d5:35:9d:e3:61:56:cc:95:41:0d:28:61:9e:34:37:
         61:e0:87:24:99:35:29:6b:70:76:e2:58:24:7e:e3:c5:7b:fb:
         96:89:32:48:05:fc:29:7a:97:66:52:a6:28:44:d6:f5:b5:13:
         01:3e:ec:82:c5:e1:b6:5a:16:1f:ea:2c:7d:81:ed:77:bb:f4:
         ef:0c:9f:b8:5d:91:7f:c1:f4:b0:e8:b7:8e:44:9d:41:d0:89:
         ec:29:ad:ad:8c:43:74:0c:d3:1e:d2:3e:ef:4e:70:23:17:69:
         50:68:df:82:06:18:5d:4d:47:0e:4e:36:9c:e3:29:37:1c:a8:
         e4:51:ff:39:d1:b0:40:36:57:90:51:a7:bf:f0:b4:26:1f:72:
         ae:d2:e9:3b:4e:d6:3e:1e:d4:ca:a2:6e:ca:09:a0:fe:0d:db:
         e6:ee:11:ca:42:c6:aa:b6:14:f2:a3:ea:ee:4f:13:3e:71:fe:
         7e:af:7a:d2:0b:cf:0a:25:00:72:2b:ee:16:20:fa:50:e3:ed:
         0c:5f:cb:e0:46:5a:28:5e:b3:37:c2:d2:76:19:eb:1a:e2:f1:
         19:b0:8f:5e:74:5f:9e:3a:1a:d6:41:6c:63:87:e4:a8:05:74:
         f6:d7:13:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:32:09 2026 by rpki-client