Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3634F1B/A133C32A299511F0B2F717B2DAE4EC9C/SbTWGQldlDKvZGCFPhR7710cSLA.mft
File:                     SbTWGQldlDKvZGCFPhR7710cSLA.mft (raw, json)
Hash identifier:          CuCyIPDWpxUmcG+y3er7c3Xn1wlqDn/1rfb1xwJ8ETo=
Subject key identifier:   CE:CB:AB:C1:FC:9D:2E:F7:86:3F:7A:2B:DC:01:44:A9:D9:94:C1:A4
Authority key identifier: 49:B4:D6:19:09:5D:94:32:AF:64:60:85:3E:14:7B:EF:5D:1C:48:B0
Certificate issuer:       /CN=F3634F1BAF/serialNumber=49B4D619095D9432AF6460853E147BEF5D1C48B0
Certificate serial:       01DF
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SbTWGQldlDKvZGCFPhR7710cSLA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3634F1B/A133C32A299511F0B2F717B2DAE4EC9C/SbTWGQldlDKvZGCFPhR7710cSLA.mft
Manifest number:          01D4
Signing time:             Tue 28 Jul 2026 04:52:46 +0000
Manifest this update:     Tue 28 Jul 2026 04:52:45 +0000
Manifest next update:     Thu 30 Jul 2026 04:52:45 +0000
Files and hashes:         1: SbTWGQldlDKvZGCFPhR7710cSLA.crl (hash: u8sUa8ZotGgg5ZP7GTa/h7TNIvMPzycscH7UJh99gzA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3634F1B/A133C32A299511F0B2F717B2DAE4EC9C/SbTWGQldlDKvZGCFPhR7710cSLA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3634F1B/A133C32A299511F0B2F717B2DAE4EC9C/SbTWGQldlDKvZGCFPhR7710cSLA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/SbTWGQldlDKvZGCFPhR7710cSLA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 30 Jul 2026 04:52:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 479 (0x1df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3634F1BAF, serialNumber=49B4D619095D9432AF6460853E147BEF5D1C48B0
        Validity
            Not Before: Jul 28 04:52:45 2026 GMT
            Not After : Jul 30 04:52:45 2026 GMT
        Subject: CN=6a68359e-f4a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:01:f9:d3:c1:41:20:58:47:20:b2:14:eb:1a:
                    3b:95:7d:89:a1:a9:64:4e:4e:69:a0:4d:bc:f0:9c:
                    94:4f:88:d2:70:3b:dc:eb:c9:92:4b:d5:bf:be:50:
                    0d:80:23:7d:50:93:71:60:84:65:db:f7:ae:06:7e:
                    1c:1b:d7:74:fa:ad:d7:76:98:3f:30:89:7c:dd:23:
                    e3:ae:dd:66:76:8a:89:fb:11:cb:ee:3f:bb:b2:a0:
                    b3:e1:f4:17:49:5d:10:75:13:aa:31:ef:02:5f:78:
                    a7:03:c5:ab:4f:35:5f:42:7b:5a:d4:b8:e0:e4:21:
                    af:74:01:2f:a6:94:ba:56:be:0e:70:f8:22:94:73:
                    1f:5f:7a:59:4a:20:4c:dc:97:30:26:d8:c9:41:94:
                    31:17:79:8f:f1:da:de:7f:de:ee:e2:56:a6:73:ae:
                    82:d3:2a:db:b3:48:42:0c:39:ba:0f:55:f0:34:4a:
                    d7:3c:da:f8:65:c3:93:3f:71:77:a2:02:0a:de:78:
                    e4:d2:53:34:a7:41:41:64:cf:8d:57:6c:99:bb:cd:
                    a1:c2:c1:eb:b0:4d:89:55:ca:84:cd:b0:40:2e:ce:
                    09:dd:4c:2a:7e:8d:5f:97:40:6c:12:32:db:35:8c:
                    8e:e1:ef:8a:52:74:5d:d4:4a:60:38:b5:b2:ce:97:
                    34:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:CB:AB:C1:FC:9D:2E:F7:86:3F:7A:2B:DC:01:44:A9:D9:94:C1:A4
            X509v3 Authority Key Identifier:
                keyid:49:B4:D6:19:09:5D:94:32:AF:64:60:85:3E:14:7B:EF:5D:1C:48:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3634F1B/A133C32A299511F0B2F717B2DAE4EC9C/SbTWGQldlDKvZGCFPhR7710cSLA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SbTWGQldlDKvZGCFPhR7710cSLA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3634F1B/A133C32A299511F0B2F717B2DAE4EC9C/SbTWGQldlDKvZGCFPhR7710cSLA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:ca:03:78:d6:4b:a4:df:a1:c0:95:ba:a1:6f:d0:40:22:83:
         24:78:9b:96:96:89:f7:5e:4d:0b:c8:c6:9d:59:3e:97:df:05:
         82:a9:36:87:31:d8:c2:ba:f2:90:3a:db:aa:95:d6:c3:f3:75:
         b7:fa:c2:49:54:f6:14:27:91:5f:06:da:25:50:44:83:56:e0:
         1c:ee:c0:92:f3:19:0f:5a:b7:16:df:ad:b7:17:f4:4a:7c:80:
         a3:62:5b:e0:e1:cc:50:75:86:bc:40:f3:d0:ba:24:79:a2:9a:
         54:20:58:5d:77:33:a8:56:ce:bb:1b:84:72:0a:ac:d0:6d:b0:
         31:2b:ba:1d:2f:ec:04:40:50:d2:b7:73:7c:31:54:19:a5:92:
         fe:b5:7d:02:ac:bf:f7:20:e0:5c:14:44:00:31:90:57:00:30:
         52:ef:c3:6d:6e:20:fc:3c:04:2b:d0:fd:ef:05:0a:48:d6:dd:
         af:92:b3:21:44:5a:ae:23:9c:5f:87:63:f2:ec:af:cb:ec:e1:
         d8:53:cb:d2:ed:69:e9:e1:bd:fd:54:55:fc:a8:56:aa:71:ca:
         ef:21:db:78:60:c1:d5:5f:06:1e:f3:6e:28:a8:5b:21:84:87:
         0a:1b:e4:28:c7:28:c7:14:1f:83:f6:83:fc:5f:b3:d7:31:82:
         65:dd:07:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:32:40 2026 by rpki-client