Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3628CF1/9D19D566560D11EEAF3DBC214AD9E6FC/JJfLAcvhH34S4q3Y1P8jILlpA20.mft
File:                     JJfLAcvhH34S4q3Y1P8jILlpA20.mft (raw, json)
Hash identifier:          685W7R3r97HBlLFYuXHl1ffgqA6khXoHAP5nqPtf1lg=
Subject key identifier:   AF:EE:84:59:5E:0B:D0:B3:28:FE:FB:2B:DC:F4:A8:64:30:A7:A3:CC
Authority key identifier: 24:97:CB:01:CB:E1:1F:7E:12:E2:AD:D8:D4:FF:23:20:B9:69:03:6D
Certificate issuer:       /CN=F3628CF1AF/serialNumber=2497CB01CBE11F7E12E2ADD8D4FF2320B969036D
Certificate serial:       0431
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JJfLAcvhH34S4q3Y1P8jILlpA20.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3628CF1/9D19D566560D11EEAF3DBC214AD9E6FC/JJfLAcvhH34S4q3Y1P8jILlpA20.mft
Manifest number:          042F
Signing time:             Tue 28 Jul 2026 03:44:22 +0000
Manifest this update:     Tue 28 Jul 2026 03:44:21 +0000
Manifest next update:     Thu 30 Jul 2026 03:44:21 +0000
Files and hashes:         1: JJfLAcvhH34S4q3Y1P8jILlpA20.crl (hash: z774I52/OG2Q6/hXAudHmMmE9M0MAOa41GysqOE8VQs=)
                          2: D5189642585A11EE959ED9784AD9E6FC.roa (hash: KsQ50yFvchQtrtq3TNZ2t0VHuQZ3asdeMse4z12DwNw=)
                          3: 0525AE88585B11EEA76861794AD9E6FC.roa (hash: 7rp3+TdgE0k+yfnwL23onTrWLktoLa5cPkFU5dKOKQ0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3628CF1/9D19D566560D11EEAF3DBC214AD9E6FC/JJfLAcvhH34S4q3Y1P8jILlpA20.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3628CF1/9D19D566560D11EEAF3DBC214AD9E6FC/JJfLAcvhH34S4q3Y1P8jILlpA20.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JJfLAcvhH34S4q3Y1P8jILlpA20.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 30 Jul 2026 03:44:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1073 (0x431)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3628CF1AF, serialNumber=2497CB01CBE11F7E12E2ADD8D4FF2320B969036D
        Validity
            Not Before: Jul 28 03:44:21 2026 GMT
            Not After : Jul 30 03:44:21 2026 GMT
        Subject: CN=6a682596-fbd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:15:d6:12:b0:bd:6b:69:01:d1:c6:a4:80:41:
                    6e:00:71:75:ab:ee:6f:76:3b:8f:9e:a4:8e:3a:3d:
                    10:ce:ee:10:0b:43:78:75:f8:e7:0d:98:dc:3c:8f:
                    23:b0:85:63:d1:77:6a:62:fa:20:30:a5:d0:b2:48:
                    a0:b1:a2:0a:4d:f0:01:6e:9f:a6:8a:c2:0a:84:0e:
                    53:74:b1:f7:a8:79:57:bc:2c:41:14:2e:87:ad:73:
                    44:e3:de:48:60:a7:15:25:9c:f4:fb:b4:79:78:64:
                    3a:4f:32:95:7e:84:5f:60:87:01:e4:eb:75:54:14:
                    b0:17:07:bd:8f:52:9a:94:cd:82:01:62:da:5e:5d:
                    d9:7e:f6:2e:e2:23:c7:1d:6a:f1:60:1c:2f:cd:86:
                    9d:95:ed:70:0a:51:c1:b5:81:3d:c5:dc:da:ab:d7:
                    b0:f3:b6:5b:7d:aa:69:ab:e5:d1:c0:3d:0e:f3:51:
                    da:17:8f:6c:d5:2a:3b:70:8d:fd:e9:3e:12:67:10:
                    55:96:c1:f2:43:cf:5c:3b:7b:1c:69:4c:1f:bf:d3:
                    7f:2f:08:a1:5f:72:1e:1e:be:1a:87:5d:26:e2:97:
                    ee:71:02:68:93:fe:97:68:86:fb:be:5b:07:1f:fa:
                    32:5e:3c:4c:9c:78:dd:d0:58:10:52:6c:d4:f8:ee:
                    23:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:EE:84:59:5E:0B:D0:B3:28:FE:FB:2B:DC:F4:A8:64:30:A7:A3:CC
            X509v3 Authority Key Identifier:
                keyid:24:97:CB:01:CB:E1:1F:7E:12:E2:AD:D8:D4:FF:23:20:B9:69:03:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3628CF1/9D19D566560D11EEAF3DBC214AD9E6FC/JJfLAcvhH34S4q3Y1P8jILlpA20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JJfLAcvhH34S4q3Y1P8jILlpA20.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3628CF1/9D19D566560D11EEAF3DBC214AD9E6FC/JJfLAcvhH34S4q3Y1P8jILlpA20.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:b4:fd:73:82:43:1f:22:2d:da:0c:0b:6f:0f:ea:04:82:8c:
         dc:27:2b:62:7b:4c:bf:ce:82:7e:eb:df:27:16:d0:e2:8c:e0:
         23:e1:5f:da:33:fc:e2:e0:a3:1c:e8:d8:ad:59:39:73:a4:2e:
         36:d2:c7:d4:f6:a0:fb:9d:f1:f0:77:e1:b3:5f:1c:09:9f:3d:
         9c:80:a7:9a:58:a8:3e:0a:d9:77:f7:c5:3b:66:60:8e:98:e4:
         ef:02:0d:7a:fb:fd:57:37:98:12:bf:4f:1e:7a:85:9b:5a:60:
         2a:46:1e:04:ed:a7:8f:3d:44:db:64:55:8a:6b:53:12:de:57:
         e3:7a:fa:ac:96:29:6f:5e:3a:4c:f7:ce:4a:23:7f:34:46:21:
         4a:e1:9a:e2:3e:e5:ef:52:d3:f9:78:f8:bd:1d:39:0b:4a:be:
         9b:62:5c:d1:04:d4:04:74:0e:d8:4e:c9:a9:dd:f1:37:e0:d0:
         ae:29:6a:c2:20:3e:dd:39:d5:7c:6f:d3:ac:a1:b2:58:6e:3e:
         7a:d1:79:a3:82:1b:2a:e1:48:55:b1:f7:68:3a:e1:96:b1:20:
         26:7e:9f:7c:13:e4:0c:75:93:96:aa:d4:45:eb:b0:a5:fa:16:
         83:10:d6:c8:11:63:ef:63:cc:71:4a:aa:e1:41:ae:57:f9:37:
         7e:c9:fb:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:57:16 2026 by rpki-client