Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3622A10/579D221A5BA011EF88EE516F762E951A/iJ-UGiIKTk-wkLRMIxj7U43Xt0Y.mft
File:                     iJ-UGiIKTk-wkLRMIxj7U43Xt0Y.mft (raw, json)
Hash identifier:          GXeSx0tw6fupJPUA34eyAcwPrHGhqLbaZQ2M2YpNyHo=
Subject key identifier:   24:77:FC:E7:A5:A9:62:F4:AE:73:BA:85:17:C2:6D:F1:DC:85:58:FD
Authority key identifier: 88:9F:94:1A:22:0A:4E:4F:B0:90:B4:4C:23:18:FB:53:8D:D7:B7:46
Certificate issuer:       /CN=F3622A10AF/serialNumber=889F941A220A4E4FB090B44C2318FB538DD7B746
Certificate serial:       02D8
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/iJ-UGiIKTk-wkLRMIxj7U43Xt0Y.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3622A10/579D221A5BA011EF88EE516F762E951A/iJ-UGiIKTk-wkLRMIxj7U43Xt0Y.mft
Manifest number:          02D7
Signing time:             Tue 28 Jul 2026 04:24:44 +0000
Manifest this update:     Tue 28 Jul 2026 04:24:43 +0000
Manifest next update:     Thu 30 Jul 2026 04:24:43 +0000
Files and hashes:         1: iJ-UGiIKTk-wkLRMIxj7U43Xt0Y.crl (hash: Re9asuPR1ZSvRAoGBK7mCzqVedRKOCJzc/Co1kOFcZY=)
                          2: 96765F423C6E11F09155EFCBDAE4EC9C.roa (hash: hFFmGegVcY7FYj6sGdd1sbP6AWog8WEhJh7P4bF8xW8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3622A10/579D221A5BA011EF88EE516F762E951A/iJ-UGiIKTk-wkLRMIxj7U43Xt0Y.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3622A10/579D221A5BA011EF88EE516F762E951A/iJ-UGiIKTk-wkLRMIxj7U43Xt0Y.mft
                          rsync://rpki.afrinic.net/repository/afrinic/iJ-UGiIKTk-wkLRMIxj7U43Xt0Y.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 30 Jul 2026 04:24:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 728 (0x2d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3622A10AF, serialNumber=889F941A220A4E4FB090B44C2318FB538DD7B746
        Validity
            Not Before: Jul 28 04:24:43 2026 GMT
            Not After : Jul 30 04:24:43 2026 GMT
        Subject: CN=6a682f0c-1ecd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:6e:94:d0:54:ee:e0:a0:7b:02:72:63:cd:81:
                    2c:cf:18:b9:0f:fa:31:97:04:45:3c:21:a3:2e:31:
                    bb:36:ae:18:40:b6:3d:a7:85:95:19:f5:24:09:3d:
                    33:1a:3f:e9:f7:b4:c0:36:ae:e3:29:21:36:e7:09:
                    2d:e2:7d:ef:a0:5d:c0:56:61:c7:a1:8a:80:3a:3e:
                    c2:c2:5a:46:c1:46:ea:13:80:2e:7f:a6:fe:99:58:
                    44:b4:06:f2:35:42:4e:27:ef:68:45:59:fd:ef:50:
                    81:52:b8:80:c3:86:64:6a:07:05:2d:e3:99:31:62:
                    c3:14:85:33:a5:c0:2b:c4:23:1f:cb:7d:34:32:95:
                    ec:96:b7:ed:c6:a8:6c:a6:22:61:23:6a:c2:c7:dd:
                    2f:f4:88:6f:a0:8f:91:ce:f7:dd:df:5c:89:1b:33:
                    ab:80:22:78:ab:74:0b:e3:7f:c0:af:1a:cf:14:71:
                    09:3a:a7:9c:1f:64:4c:7c:64:31:fd:9d:35:27:4f:
                    93:d2:f9:27:34:79:e6:28:38:66:75:24:7f:ef:95:
                    aa:a6:7d:ea:13:5a:7d:15:5f:d6:b7:0f:42:48:cb:
                    bc:9d:95:83:01:e9:fd:2b:26:5b:a3:1b:eb:e6:53:
                    4c:a2:4d:5b:2f:f2:a3:8e:ff:d4:ed:70:3f:df:59:
                    a7:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:77:FC:E7:A5:A9:62:F4:AE:73:BA:85:17:C2:6D:F1:DC:85:58:FD
            X509v3 Authority Key Identifier:
                keyid:88:9F:94:1A:22:0A:4E:4F:B0:90:B4:4C:23:18:FB:53:8D:D7:B7:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3622A10/579D221A5BA011EF88EE516F762E951A/iJ-UGiIKTk-wkLRMIxj7U43Xt0Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/iJ-UGiIKTk-wkLRMIxj7U43Xt0Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3622A10/579D221A5BA011EF88EE516F762E951A/iJ-UGiIKTk-wkLRMIxj7U43Xt0Y.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:e7:9b:00:b7:30:93:78:34:8f:ab:1f:da:22:8e:45:c9:c5:
         78:b1:4d:14:c0:90:1e:6c:ea:e6:83:01:d5:6b:64:36:b2:ff:
         54:7a:3e:08:83:dc:90:70:53:b4:b2:0a:d6:c4:15:7d:6e:8e:
         a1:18:b1:d2:27:21:95:02:be:cd:f3:ba:7b:ab:2a:b5:05:22:
         af:3c:e3:d5:b0:a7:89:5c:d5:56:84:be:df:6e:15:6a:a6:0a:
         ea:65:7e:3f:0f:d0:c4:cc:aa:cd:b4:ba:48:8d:44:03:87:6e:
         d3:55:01:2a:d5:cf:12:f8:66:7c:3e:2a:30:78:79:7e:81:57:
         3b:46:b5:5a:c4:ab:73:6c:90:6a:7a:f6:3c:52:89:b3:55:12:
         6d:42:60:02:f9:55:87:95:14:c4:5a:05:17:75:6c:bb:c0:8b:
         d3:56:28:5d:94:01:f9:d1:13:7d:50:91:99:c5:52:73:88:6f:
         dd:b4:a4:ac:ea:47:8f:bc:d0:87:7f:12:4a:a0:c7:44:4b:ad:
         cd:fc:fe:6c:78:2d:8d:75:de:c2:82:2a:0d:f3:09:ec:58:e2:
         14:ba:5a:3e:d5:11:81:7d:b7:ca:ae:d2:d0:7b:cd:9c:87:d8:
         79:64:df:3f:97:88:fd:97:6d:6d:72:f4:cc:f6:1d:1b:15:37:
         fe:3e:b5:cf
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAtgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MjJBMTBBRjExMC8GA1UEBRMoODg5Rjk0MUEyMjBBNEU0RkIwOTBCNDRDMjMxOEZC
NTM4REQ3Qjc0NjAeFw0yNjA3MjgwNDI0NDNaFw0yNjA3MzAwNDI0NDNaMBgxFjAU
BgNVBAMTDTZhNjgyZjBjLTFlY2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCpbpTQVO7goHsCcmPNgSzPGLkP+jGXBEU8IaMuMbs2rhhAtj2nhZUZ9SQJ
PTMaP+n3tMA2ruMpITbnCS3ife+gXcBWYcehioA6PsLCWkbBRuoTgC5/pv6ZWES0
BvI1Qk4n72hFWf3vUIFSuIDDhmRqBwUt45kxYsMUhTOlwCvEIx/LfTQyleyWt+3G
qGymImEjasLH3S/0iG+gj5HO993fXIkbM6uAInirdAvjf8CvGs8UcQk6p5wfZEx8
ZDH9nTUnT5PS+Sc0eeYoOGZ1JH/vlaqmfeoTWn0VX9a3D0JIy7ydlYMB6f0rJluj
G+vmU0yiTVsv8qOO/9TtcD/fWaevAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUJHf8
56WpYvSuc7qFF8Jt8dyFWP0wHwYDVR0jBBgwFoAUiJ+UGiIKTk+wkLRMIxj7U43X
t0YwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjIyQTEwLzU3OUQyMjFBNUJBMDExRUY4OEVFNTE2Rjc2MkU5NTFBL2lKLVVH
aUlLVGstd2tMUk1JeGo3VTQzWHQwWS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2lKLVVHaUlLVGstd2tMUk1JeGo3VTQzWHQwWS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MjJBMTAvNTc5RDIyMUE1QkEwMTFFRjg4RUU1MTZGNzYy
RTk1MUEvaUotVUdpSUtUay13a0xSTUl4ajdVNDNYdDBZLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCm55sAtzCTeDSPqx/aIo5FycV4sU0U
wJAebOrmgwHVa2Q2sv9Uej4Ig9yQcFO0sgrWxBV9bo6hGLHSJyGVAr7N87p7qyq1
BSKvPOPVsKeJXNVWhL7fbhVqpgrqZX4/D9DEzKrNtLpIjUQDh27TVQEq1c8S+GZ8
PioweHl+gVc7RrVaxKtzbJBqevY8UomzVRJtQmAC+VWHlRTEWgUXdWy7wIvTVihd
lAH50RN9UJGZxVJziG/dtKSs6kePvNCHfxJKoMdES63N/P5seC2Ndd7CgioN8wns
WOIUulo+1RGBfbfKrtLQe82ch9h5ZN8/l4j9l21tcvTM9h0bFTf+PrXP
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:40:13 2026 by rpki-client