Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3634D22/1D5F7C26047311E580C18A06F8AEA228/jQHYCOiXdFQ94i0NqEQ3js6ou5s.mft
File:                     jQHYCOiXdFQ94i0NqEQ3js6ou5s.mft (raw, json)
Hash identifier:          d8kptBwmvOeazVdk5hCNLnZ/39dTs46d2b2MGdqiYaU=
Subject key identifier:   A1:25:82:E8:F6:4A:BD:EE:87:1F:D2:76:15:DD:86:36:2E:26:A0:CC
Authority key identifier: 8D:01:D8:08:E8:97:74:54:3D:E2:2D:0D:A8:44:37:8E:CE:A8:BB:9B
Certificate issuer:       /CN=F3634D22AF/serialNumber=8D01D808E89774543DE22D0DA844378ECEA8BB9B
Certificate serial:       102F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/jQHYCOiXdFQ94i0NqEQ3js6ou5s.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3634D22/1D5F7C26047311E580C18A06F8AEA228/jQHYCOiXdFQ94i0NqEQ3js6ou5s.mft
Manifest number:          0FBD
Signing time:             Mon 07 Jul 2025 00:50:20 +0000
Manifest this update:     Mon 07 Jul 2025 00:50:19 +0000
Manifest next update:     Wed 09 Jul 2025 00:50:19 +0000
Files and hashes:         1: jQHYCOiXdFQ94i0NqEQ3js6ou5s.crl (hash: 7YZvTvrf+kyMPCXLmLbRXWmo1qoHxT0XrbEZBvS7tfE=)
                          2: 82FBB372A33F11EF9D8E7B9F762E951A.roa (hash: Z8VTeq5VqCny1+2qc2eer7aayU4OabcWlvbrSBQ3Ro0=)
                          3: 735085F4A33711EFBFDF326E762E951A.roa (hash: jq+UT0fK2rQNaQWZwZg77u/Waht7x2v+K6T6njUJmJs=)
                          4: 54C9E530A33C11EF8A87278C762E951A.roa (hash: Fipj06TEsqxVsD67CiV+Mvae6ysLWsUXL2sTVldoRiY=)
                          5: E48179B0A33F11EF9D185FA1762E951A.roa (hash: h1WcrKRrme1HSVB6iW5WfVK4RCLangeBC8c4FQmnp6M=)
                          6: 81687628A33D11EF9216D192762E951A.roa (hash: MvfxEFROJ1f++TBAwntjCOy+iPFhUtpXYzOBk7MbpP4=)
                          7: 9C775130A33011EF9B156D43762E951A.roa (hash: 4NbZq7JmrO2d8IflCmt6RHPllibhD0U5Ha7Xi8m2cPI=)
                          8: 8D61B536A33B11EF8C1E2886762E951A.roa (hash: dcFvRkXmKR5D9lCNCutI/eY/0GCKBG/swTZgNYWQDMY=)
                          9: BD6C4342A32F11EFAFC746BD762E951A.roa (hash: 35thfBdQw104zKjzssgfjCxYAhX2GyaM8nwv/1VU2vI=)
                          10: 60B5E0E0A32F11EFBE3358BB762E951A.roa (hash: KV4KZRn3mj8zp6sAZP8gPe1HTi1HLT0ooFTzAWyksqs=)
                          11: CEB92EECA34011EF8354EBA7762E951A.roa (hash: e/XiE/BTRSTugXSWmIFYyEVY36JAaMrSiY7TlscErnw=)
                          12: E6587778A33C11EFBA029B8E762E951A.roa (hash: rDQVkDweKoOmH2DbgJ7AoD1HobVkhybI6APGqQpO4LQ=)
                          13: 40CDEE54A32411EFBEA2AA76762E951A.roa (hash: ygTC9DuKVJ/n7JrTrzQh7m9cfirLf1U+TjLI8piQ1Js=)
                          14: DF802CB6A33711EF9437A370762E951A.roa (hash: Nhh/C7s39Zf/p6vDE9S3MXfBEg4Auj+HjABWmIR/tBE=)
                          15: 67AB7E84A34111EFB5E402AA762E951A.roa (hash: 6rGJ9xD1BmaW9JiB2JgP9Ns3uFYbBGDy9vjDStzzOIY=)
                          16: E9EB8D9EA32311EF998D4074762E951A.roa (hash: f7LbuCsz1hH/ZnBV298StqdOFHNpw2u4DY5EmshcxuE=)
                          17: 5184AD26A33011EFA3900B41762E951A.roa (hash: vZEzW20+Dxa0Bltx2ptZesMsOHj6zG5xhOYGhqGHcpk=)
                          18: 2C76CC86A33E11EFBB321097762E951A.roa (hash: PemMUTC7nta4SQMeeYXeNHrbnDsXMh5V6ePiUVaeRVo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3634D22/1D5F7C26047311E580C18A06F8AEA228/jQHYCOiXdFQ94i0NqEQ3js6ou5s.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3634D22/1D5F7C26047311E580C18A06F8AEA228/jQHYCOiXdFQ94i0NqEQ3js6ou5s.mft
                          rsync://rpki.afrinic.net/repository/afrinic/jQHYCOiXdFQ94i0NqEQ3js6ou5s.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 09 Jul 2025 00:06:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4143 (0x102f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3634D22AF, serialNumber=8D01D808E89774543DE22D0DA844378ECEA8BB9B
        Validity
            Not Before: Jul  7 00:50:19 2025 GMT
            Not After : Jul  9 00:50:19 2025 GMT
        Subject: CN=686b19cc-e7c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:28:5f:5c:aa:bd:85:71:10:40:a5:c3:9f:91:
                    57:45:18:cf:5b:b6:06:5c:7c:54:73:f3:44:1e:54:
                    9e:7f:3f:3c:39:c9:9a:e8:69:e8:06:9f:a7:0e:a7:
                    66:6b:47:5f:e8:aa:d5:94:24:b5:83:07:8f:d2:87:
                    8f:94:43:8a:60:92:55:f2:0f:f6:52:d2:b6:0a:26:
                    41:92:a2:a8:17:96:4b:fa:fc:16:bb:2d:42:4a:fa:
                    31:c3:53:31:68:00:aa:8e:b2:57:5f:31:62:df:db:
                    ab:12:3f:68:af:64:60:8e:25:e7:04:c8:10:26:90:
                    96:1d:d4:b0:f5:4a:36:2d:5c:dc:c7:df:a7:93:7a:
                    f0:82:3f:74:d8:85:98:0b:e0:4c:b7:b1:2b:7d:79:
                    f5:98:44:b2:d3:b2:da:f6:3b:4f:fc:86:c2:44:b0:
                    19:aa:59:a5:ce:43:e3:8b:a1:7a:ad:ee:5a:3b:8e:
                    1a:05:4b:f6:b4:48:7d:ec:a1:86:05:d6:bb:82:3c:
                    5e:79:4e:21:24:59:d4:1e:98:70:c5:c7:5f:94:f7:
                    b8:8f:90:c8:0e:ac:06:3b:17:47:7e:f8:80:67:4e:
                    22:a6:5e:38:cc:59:09:4f:29:36:20:90:83:46:9a:
                    38:b2:bc:21:57:41:cc:5e:b4:de:b7:8f:7f:0e:39:
                    0b:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:25:82:E8:F6:4A:BD:EE:87:1F:D2:76:15:DD:86:36:2E:26:A0:CC
            X509v3 Authority Key Identifier:
                keyid:8D:01:D8:08:E8:97:74:54:3D:E2:2D:0D:A8:44:37:8E:CE:A8:BB:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3634D22/1D5F7C26047311E580C18A06F8AEA228/jQHYCOiXdFQ94i0NqEQ3js6ou5s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/jQHYCOiXdFQ94i0NqEQ3js6ou5s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3634D22/1D5F7C26047311E580C18A06F8AEA228/jQHYCOiXdFQ94i0NqEQ3js6ou5s.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:e1:68:d4:5c:99:04:17:13:20:a8:a7:85:0a:96:f7:27:e5:
         58:ae:b1:dc:77:91:ed:82:b4:0b:f5:2d:f2:a3:a1:0a:99:28:
         7a:3d:20:de:f1:f8:04:e8:50:97:c8:35:0b:2b:4e:04:5e:a4:
         d0:a5:c6:5a:9a:f5:d0:21:cb:23:60:15:05:fb:4b:af:5b:b4:
         e1:10:84:c4:2c:52:28:5d:8a:2d:93:a6:80:b6:d5:74:04:c6:
         67:b5:d3:5d:7f:ce:ee:40:86:0b:a5:1a:da:39:e1:aa:3d:66:
         e1:dd:db:88:35:08:38:1d:4e:f3:68:82:25:76:c9:bc:7f:64:
         35:e7:a0:0a:61:dd:01:75:1a:37:fb:72:8a:f5:b5:3c:af:b8:
         5a:28:f8:c2:a1:47:62:c2:d2:09:1f:a1:9c:28:e1:89:82:8c:
         b8:9e:5e:0e:e4:da:1a:1c:de:bc:0e:11:6c:99:b2:86:00:ae:
         84:08:66:6e:79:3b:29:ea:07:aa:43:86:3c:b2:87:d0:19:71:
         f4:ed:5c:d3:86:d0:46:7a:23:26:c0:90:5a:5a:c3:32:ab:f9:
         4a:e0:ba:23:f3:04:1f:26:40:37:a6:8e:41:66:11:66:96:e4:
         2b:8d:d2:83:b9:04:bf:02:49:a3:cd:13:c6:f7:e6:21:88:4d:
         49:96:45:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 7 11:00:06 2025 by rpki-client