Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3620C16/B52E9370052311EE873C2D364AD9E6FC/FdMWS-J5kLCFK0i2ahVDO3cZAIw.mft
File:                     FdMWS-J5kLCFK0i2ahVDO3cZAIw.mft (raw, json)
Hash identifier:          Map7FV8YnugfAzTFh8O/m43NXB1Nm7hFmAgVLQ5s2cA=
Subject key identifier:   98:C8:2D:91:02:C8:5C:FE:A8:4B:66:CD:3E:F2:57:2D:46:97:33:A3
Authority key identifier: 15:D3:16:4B:E2:79:90:B0:85:2B:48:B6:6A:15:43:3B:77:19:00:8C
Certificate issuer:       /CN=F3620C16AF/serialNumber=15D3164BE27990B0852B48B66A15433B7719008C
Certificate serial:       0331
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/FdMWS-J5kLCFK0i2ahVDO3cZAIw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3620C16/B52E9370052311EE873C2D364AD9E6FC/FdMWS-J5kLCFK0i2ahVDO3cZAIw.mft
Manifest number:          0331
Signing time:             Sat 09 Aug 2025 03:53:35 +0000
Manifest this update:     Sat 09 Aug 2025 03:53:34 +0000
Manifest next update:     Mon 11 Aug 2025 03:53:34 +0000
Files and hashes:         1: FdMWS-J5kLCFK0i2ahVDO3cZAIw.crl (hash: TOnrQJl5fz3Wq9HrdvXwgerpalEFXkRy1rIDtRZz/V4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3620C16/B52E9370052311EE873C2D364AD9E6FC/FdMWS-J5kLCFK0i2ahVDO3cZAIw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3620C16/B52E9370052311EE873C2D364AD9E6FC/FdMWS-J5kLCFK0i2ahVDO3cZAIw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/FdMWS-J5kLCFK0i2ahVDO3cZAIw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 11 Aug 2025 00:06:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 817 (0x331)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3620C16AF, serialNumber=15D3164BE27990B0852B48B66A15433B7719008C
        Validity
            Not Before: Aug  9 03:53:34 2025 GMT
            Not After : Aug 11 03:53:34 2025 GMT
        Subject: CN=6896c63f-e5c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ae:56:7a:a2:f4:f6:ac:a8:86:b0:bc:59:6f:
                    ba:00:9a:35:f2:ab:4e:f2:fb:01:24:c3:c3:91:56:
                    7f:f9:2d:4e:04:33:80:94:cf:c2:5e:fc:fd:05:33:
                    bd:af:8e:aa:cb:e8:61:83:00:94:8e:4e:48:3a:fa:
                    57:2d:5c:18:7c:a3:14:67:32:d5:ca:5c:3c:6c:2e:
                    0c:c8:93:70:cc:59:59:4a:2a:ed:28:04:26:33:5a:
                    12:78:04:5b:c9:8a:09:10:fc:c8:62:d7:31:cd:93:
                    fd:22:5c:0a:21:38:b2:d9:b6:75:76:dd:ff:04:b4:
                    54:15:04:c5:24:4d:ba:30:aa:4c:12:09:d1:28:6b:
                    da:b9:c7:94:e3:d3:a0:03:c0:76:f4:f2:c8:8b:47:
                    b8:bb:05:7a:d2:b7:38:4f:0d:b6:25:71:5d:c6:ee:
                    bf:57:18:4e:2e:fa:32:46:9d:ea:2a:0d:96:03:a4:
                    75:a4:3d:c5:d3:b0:86:5e:ca:e0:5d:62:e1:30:60:
                    bd:63:f5:c4:d0:2a:03:cd:68:e3:79:9a:97:35:18:
                    27:92:43:af:43:f3:17:89:7d:67:f4:c4:60:7d:39:
                    52:43:4b:39:46:d3:4d:76:f8:b3:a5:b4:c5:90:9b:
                    b9:bf:3c:d4:a3:88:80:69:8e:e1:d5:7f:bf:01:93:
                    44:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:C8:2D:91:02:C8:5C:FE:A8:4B:66:CD:3E:F2:57:2D:46:97:33:A3
            X509v3 Authority Key Identifier:
                keyid:15:D3:16:4B:E2:79:90:B0:85:2B:48:B6:6A:15:43:3B:77:19:00:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3620C16/B52E9370052311EE873C2D364AD9E6FC/FdMWS-J5kLCFK0i2ahVDO3cZAIw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/FdMWS-J5kLCFK0i2ahVDO3cZAIw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3620C16/B52E9370052311EE873C2D364AD9E6FC/FdMWS-J5kLCFK0i2ahVDO3cZAIw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:f9:c4:e4:2b:dd:0d:86:a7:e7:7c:5d:b1:19:a8:98:58:53:
         aa:cb:88:01:c1:54:0e:0a:57:cc:6a:2e:dc:29:2c:84:50:60:
         6f:af:77:03:a1:92:3e:eb:5b:55:df:ec:dd:6a:3a:36:d6:14:
         95:a0:fd:02:81:2d:e3:f8:cd:e8:75:39:7b:32:10:65:f3:fd:
         d0:22:bc:7e:3e:8d:c5:26:6a:29:7e:96:a7:2f:e7:0b:30:72:
         05:be:a5:40:3c:cf:59:2d:18:fb:52:9d:b4:34:d5:f1:28:83:
         5f:c6:7a:3c:d2:9e:81:55:31:1c:36:cd:cd:d8:35:39:d6:2c:
         83:c9:99:1c:e2:f0:18:33:a7:d1:6a:b5:01:83:d9:86:19:9a:
         3f:67:17:4c:eb:99:12:04:46:5d:b0:86:9c:1a:56:b9:3e:d7:
         f1:18:46:04:e4:9b:cc:01:e8:e9:1f:bd:25:fe:20:97:40:87:
         4a:a7:a0:7e:91:9e:f7:f6:c5:12:05:b8:74:89:1c:0c:68:a9:
         86:9d:1f:2c:17:ae:1c:86:84:83:3c:7e:90:a9:37:d0:dc:6b:
         9e:7e:24:d0:5c:95:6d:44:95:87:58:ea:69:7f:75:bf:c6:9b:
         84:27:15:f9:6d:1d:b8:b3:ff:aa:31:9b:31:94:47:c0:f8:8c:
         a2:2a:46:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:33:11 2025 by rpki-client