Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3619C8C/DE28B16C5FDA11EF8ACEB9A9762E951A/D1pm1nbRb8eSfE4kaUoejHekQGs.mft
File:                     D1pm1nbRb8eSfE4kaUoejHekQGs.mft (raw, json)
Hash identifier:          nplGf8JW97yWa5nkFFLHKrgOMJzsihfgNwCkrtIaHlk=
Subject key identifier:   44:12:EA:7E:D9:0C:43:D1:6C:5D:EE:8D:29:50:36:F0:44:3F:D5:0D
Authority key identifier: 0F:5A:66:D6:76:D1:6F:C7:92:7C:4E:24:69:4A:1E:8C:77:A4:40:6B
Certificate issuer:       /CN=F3619C8CRI/serialNumber=0F5A66D676D16FC7927C4E24694A1E8C77A4406B
Certificate serial:       02AB
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/D1pm1nbRb8eSfE4kaUoejHekQGs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3619C8C/DE28B16C5FDA11EF8ACEB9A9762E951A/D1pm1nbRb8eSfE4kaUoejHekQGs.mft
Manifest number:          02AA
Signing time:             Sat 13 Jun 2026 04:25:33 +0000
Manifest this update:     Sat 13 Jun 2026 04:25:32 +0000
Manifest next update:     Mon 15 Jun 2026 04:25:32 +0000
Files and hashes:         1: D1pm1nbRb8eSfE4kaUoejHekQGs.crl (hash: 9hYE+zGkBGkM0dFGmevK+5BWY+mHCJCO62jtBDv3Gx8=)
                          2: 556811145FEA11EF84A2058A762E951A.roa (hash: P0gvfxM0hcVTDkEmLqEkHZpP55/CRPi31FOdnN+KXYg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3619C8C/DE28B16C5FDA11EF8ACEB9A9762E951A/D1pm1nbRb8eSfE4kaUoejHekQGs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3619C8C/DE28B16C5FDA11EF8ACEB9A9762E951A/D1pm1nbRb8eSfE4kaUoejHekQGs.mft
                          rsync://rpki.afrinic.net/repository/ripe/D1pm1nbRb8eSfE4kaUoejHekQGs.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 15 Jun 2026 00:45:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 683 (0x2ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3619C8CRI, serialNumber=0F5A66D676D16FC7927C4E24694A1E8C77A4406B
        Validity
            Not Before: Jun 13 04:25:32 2026 GMT
            Not After : Jun 15 04:25:32 2026 GMT
        Subject: CN=6a2cdbbd-ee44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a4:fa:c0:05:a0:fd:16:5f:c2:dc:3e:c5:9f:
                    2f:64:1e:55:5a:ce:50:b2:0b:bf:19:ed:72:73:3d:
                    54:8c:fb:ee:11:26:14:c5:65:8c:ff:14:dd:cb:23:
                    0c:71:d1:fe:bd:e3:ee:f4:d4:86:6e:df:f7:1b:dd:
                    5e:a0:d1:e6:02:39:d1:a9:7a:e7:04:b9:76:fc:29:
                    dd:ab:45:fc:78:f6:ed:b0:38:c2:2f:e4:40:d1:df:
                    d0:6c:16:f0:36:97:18:cd:4e:de:e1:13:8d:07:28:
                    cc:7c:1c:1f:9b:e9:90:80:d8:cb:8b:2f:7d:31:28:
                    34:a6:1f:84:f9:c3:a0:b3:b1:b0:d7:f1:5e:af:2e:
                    6a:0d:db:5b:0a:c1:d9:5d:25:6f:38:93:84:5f:6d:
                    d9:50:33:50:af:49:92:55:1c:27:d8:f8:08:92:3e:
                    ac:e1:d1:f1:09:d7:52:ad:22:0f:b7:68:58:e9:f0:
                    fa:c1:d5:3b:28:b8:52:d0:75:1c:d4:a2:e7:58:02:
                    86:66:5c:49:4f:cb:68:87:ea:e3:4f:b1:48:c3:43:
                    9b:37:50:d4:3c:a6:21:26:26:fa:f7:42:2f:35:1b:
                    6b:e7:a0:22:dc:bc:86:c7:d9:c7:d9:6f:5a:fc:fd:
                    eb:02:57:90:e5:9e:26:92:3a:03:33:44:bc:71:8c:
                    3c:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:12:EA:7E:D9:0C:43:D1:6C:5D:EE:8D:29:50:36:F0:44:3F:D5:0D
            X509v3 Authority Key Identifier:
                keyid:0F:5A:66:D6:76:D1:6F:C7:92:7C:4E:24:69:4A:1E:8C:77:A4:40:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3619C8C/DE28B16C5FDA11EF8ACEB9A9762E951A/D1pm1nbRb8eSfE4kaUoejHekQGs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/D1pm1nbRb8eSfE4kaUoejHekQGs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3619C8C/DE28B16C5FDA11EF8ACEB9A9762E951A/D1pm1nbRb8eSfE4kaUoejHekQGs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:14:24:20:be:48:32:a8:f3:b1:c2:0e:e7:fd:86:23:12:db:
         e8:c5:05:2d:cc:ca:96:02:24:07:50:53:db:86:64:3a:54:06:
         25:fe:dd:08:9f:14:fb:31:6d:ae:6f:aa:30:59:e4:2f:6d:0c:
         2e:94:d6:0d:d3:cc:9f:09:6a:1f:ea:c3:86:c5:28:c5:4a:01:
         40:cf:61:bf:b0:b5:bd:20:fe:9a:5c:6e:5a:2b:f3:94:69:55:
         6b:31:ea:58:2d:18:13:b0:9f:e7:1b:e1:50:62:18:1d:de:e1:
         ef:d8:1f:df:5a:f5:45:f5:15:85:6f:c5:b1:b8:14:ad:4f:35:
         cf:0d:14:d9:b8:91:b0:8d:21:df:39:fe:8b:8f:b7:6c:94:24:
         a3:cb:2d:29:a4:6b:25:2c:94:9f:8d:44:99:29:c0:d6:9c:80:
         32:45:87:66:e8:dd:ef:f3:ae:89:3d:a0:80:d9:5d:a1:29:c8:
         45:f1:34:14:1b:77:ae:17:b3:51:b8:a1:51:46:2e:3e:b0:62:
         f0:30:c1:a2:8d:e1:90:31:91:15:f1:5f:5a:97:d1:18:e3:3b:
         28:c1:e7:12:4c:70:5e:b7:84:bc:16:f9:03:8d:f3:f4:2f:49:
         35:f5:7d:a8:68:10:f6:13:69:7b:b7:53:f4:0a:46:94:b9:f4:
         35:fb:5d:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:15:28 2026 by rpki-client