Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3619C8C/DE28B16C5FDA11EF8ACEB9A9762E951A/D1pm1nbRb8eSfE4kaUoejHekQGs.mft
File:                     D1pm1nbRb8eSfE4kaUoejHekQGs.mft (raw, json)
Hash identifier:          /fu/Z0cOnKbooIaW9kDTSTbJQmEvTIurjh1kPb0xzBs=
Subject key identifier:   EA:77:94:5D:60:DD:24:B4:8F:9F:91:FE:D9:F0:9D:A7:E0:6F:53:9E
Authority key identifier: 0F:5A:66:D6:76:D1:6F:C7:92:7C:4E:24:69:4A:1E:8C:77:A4:40:6B
Certificate issuer:       /CN=F3619C8CRI/serialNumber=0F5A66D676D16FC7927C4E24694A1E8C77A4406B
Certificate serial:       01CC
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/D1pm1nbRb8eSfE4kaUoejHekQGs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3619C8C/DE28B16C5FDA11EF8ACEB9A9762E951A/D1pm1nbRb8eSfE4kaUoejHekQGs.mft
Manifest number:          01CB
Signing time:             Wed 05 Nov 2025 04:48:55 +0000
Manifest this update:     Wed 05 Nov 2025 04:48:54 +0000
Manifest next update:     Fri 07 Nov 2025 04:48:54 +0000
Files and hashes:         1: D1pm1nbRb8eSfE4kaUoejHekQGs.crl (hash: mqMO/rd9+QLfVmesZXybEBxJ+58krW3vJNm+ejC5/Qw=)
                          2: 556811145FEA11EF84A2058A762E951A.roa (hash: P0gvfxM0hcVTDkEmLqEkHZpP55/CRPi31FOdnN+KXYg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3619C8C/DE28B16C5FDA11EF8ACEB9A9762E951A/D1pm1nbRb8eSfE4kaUoejHekQGs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3619C8C/DE28B16C5FDA11EF8ACEB9A9762E951A/D1pm1nbRb8eSfE4kaUoejHekQGs.mft
                          rsync://rpki.afrinic.net/repository/ripe/D1pm1nbRb8eSfE4kaUoejHekQGs.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 07 Nov 2025 00:45:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 460 (0x1cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3619C8CRI, serialNumber=0F5A66D676D16FC7927C4E24694A1E8C77A4406B
        Validity
            Not Before: Nov  5 04:48:54 2025 GMT
            Not After : Nov  7 04:48:54 2025 GMT
        Subject: CN=690ad737-28aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:23:6f:33:8b:77:cf:41:8d:29:01:8c:f7:93:
                    5b:12:75:37:d9:08:46:60:b4:0f:06:5e:e6:3b:1a:
                    44:c1:15:42:b0:c1:ca:d8:f6:d8:65:aa:14:60:14:
                    94:e6:61:3c:37:85:95:65:23:0f:63:17:a0:69:39:
                    71:9b:2b:86:1e:69:f7:8a:5c:ea:18:96:4a:4c:e5:
                    a5:d8:9b:16:ff:73:f4:5a:20:e7:0e:3b:f2:f3:db:
                    0a:c5:66:c4:fb:dc:3a:5b:8b:63:7a:60:8e:12:1c:
                    92:d8:77:66:06:12:27:14:27:dd:6c:e0:51:e5:44:
                    b1:5c:16:95:14:c5:46:29:76:4d:c8:fb:3d:88:5e:
                    f0:a2:97:b6:42:18:d1:e0:4f:ea:18:26:1a:a2:6e:
                    8e:49:11:47:10:0c:bb:37:92:35:89:de:62:7b:ce:
                    51:4f:b4:2e:87:e8:41:73:73:58:bc:22:60:01:70:
                    b3:ca:ff:c4:d7:bf:24:aa:be:6d:7f:59:94:45:c9:
                    7f:df:5e:4e:b8:5f:c2:e5:28:03:0a:03:0d:08:08:
                    8c:81:c4:bc:0d:17:66:bf:df:29:42:9e:14:97:a0:
                    04:bc:75:18:96:76:9d:5e:6f:92:a0:23:1a:c6:21:
                    06:34:1e:f6:cb:03:ea:e5:55:3e:c7:e5:9a:6a:e0:
                    ca:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:77:94:5D:60:DD:24:B4:8F:9F:91:FE:D9:F0:9D:A7:E0:6F:53:9E
            X509v3 Authority Key Identifier:
                keyid:0F:5A:66:D6:76:D1:6F:C7:92:7C:4E:24:69:4A:1E:8C:77:A4:40:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3619C8C/DE28B16C5FDA11EF8ACEB9A9762E951A/D1pm1nbRb8eSfE4kaUoejHekQGs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/D1pm1nbRb8eSfE4kaUoejHekQGs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3619C8C/DE28B16C5FDA11EF8ACEB9A9762E951A/D1pm1nbRb8eSfE4kaUoejHekQGs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:a1:75:63:7d:cc:e8:9c:46:eb:29:6c:ab:3b:3e:70:33:a8:
         31:0c:db:d4:15:17:b1:d0:a7:fe:92:cb:27:ef:f1:f9:0a:bb:
         f2:7f:81:70:b6:48:82:d6:92:63:69:d8:ad:6e:f5:76:49:f8:
         5a:c8:d9:58:15:88:6a:b6:2b:ec:3d:ce:5f:92:d7:ce:c5:0a:
         1f:9d:38:fa:46:d3:30:f2:ba:56:b5:8b:cf:37:32:3f:0c:03:
         b7:88:b2:13:01:52:86:1e:fc:d1:25:4f:1f:8c:57:54:07:b7:
         15:3b:5f:8e:25:79:5f:14:2c:5c:f4:ee:d1:20:b6:16:20:84:
         60:68:9f:a1:ca:7f:84:b0:d5:b6:b9:11:48:a8:2d:a4:52:d5:
         6d:74:35:3b:24:5f:f4:36:01:ba:d3:30:a0:2e:ac:da:1f:a3:
         ba:3c:20:56:09:f2:25:a2:a0:7e:46:65:a1:76:0a:8d:5b:d5:
         04:dd:1e:df:ad:89:94:9c:75:72:9a:0e:11:09:f9:f0:98:8b:
         b3:41:d9:5c:e9:e3:49:68:b6:50:48:48:0b:8b:01:34:cb:fc:
         03:e9:8a:f7:06:16:68:cc:ae:af:2c:fc:72:8d:b2:a1:34:16:
         f8:aa:5f:f2:13:57:1e:f5:f0:ed:9d:51:12:d5:cc:b0:94:bd:
         09:e3:aa:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:28:16 2025 by rpki-client