Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F363BEDE/69F538C474C511EFB86D2C93762E951A/pyKwoONloK3D2e6zzL_MBi2Q76k.mft
File:                     pyKwoONloK3D2e6zzL_MBi2Q76k.mft (raw, json)
Hash identifier:          NSSVVIbFqadQZfVYlvTRF55DytpLUsHHw4VodyynUh4=
Subject key identifier:   84:7E:BE:98:C0:C9:C2:4A:4A:16:9E:61:C1:AA:66:8A:52:CE:94:D4
Authority key identifier: A7:22:B0:A0:E3:65:A0:AD:C3:D9:EE:B3:CC:BF:CC:06:2D:90:EF:A9
Certificate issuer:       /CN=F363BEDERI/serialNumber=A722B0A0E365A0ADC3D9EEB3CCBFCC062D90EFA9
Certificate serial:       02EE
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/pyKwoONloK3D2e6zzL_MBi2Q76k.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BEDE/69F538C474C511EFB86D2C93762E951A/pyKwoONloK3D2e6zzL_MBi2Q76k.mft
Manifest number:          02ED
Signing time:             Tue 22 Sep 2026 04:30:19 +0000
Manifest this update:     Tue 22 Sep 2026 04:30:18 +0000
Manifest next update:     Thu 24 Sep 2026 04:30:18 +0000
Files and hashes:         1: pyKwoONloK3D2e6zzL_MBi2Q76k.crl (hash: i0ePibaetdJqgXvQRzDR7Cwyzhg99bYk95jQqoWXdqw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363BEDE/69F538C474C511EFB86D2C93762E951A/pyKwoONloK3D2e6zzL_MBi2Q76k.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363BEDE/69F538C474C511EFB86D2C93762E951A/pyKwoONloK3D2e6zzL_MBi2Q76k.mft
                          rsync://rpki.afrinic.net/repository/ripe/pyKwoONloK3D2e6zzL_MBi2Q76k.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:45:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 750 (0x2ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BEDERI, serialNumber=A722B0A0E365A0ADC3D9EEB3CCBFCC062D90EFA9
        Validity
            Not Before: Sep 22 04:30:18 2026 GMT
            Not After : Sep 24 04:30:18 2026 GMT
        Subject: CN=6ab2045b-d1c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:bf:c7:64:8c:ba:af:6f:32:8c:eb:dd:7b:35:
                    79:cf:0c:84:d0:85:5a:cd:f3:0e:fd:54:5f:60:9a:
                    5b:dc:1f:54:fd:ef:73:cc:a8:f2:78:3b:f7:61:46:
                    9c:74:74:13:a7:c7:06:2a:1b:fb:99:22:d5:78:2b:
                    cc:3e:78:95:86:46:ed:70:3a:5b:da:7a:43:b1:3f:
                    08:e5:4d:20:2c:a2:17:1a:97:0f:28:85:50:43:26:
                    a8:1c:10:4b:8a:42:5b:b6:a7:80:e0:ef:71:bd:54:
                    98:ea:40:cc:12:9e:c3:ec:fd:63:72:d1:3d:93:5a:
                    91:83:6e:09:2e:b0:8d:dc:d6:c4:ac:a6:55:c6:e3:
                    0b:d8:e5:16:04:8d:ef:e1:ae:a7:11:bf:57:84:a5:
                    c5:86:d8:b8:3e:c6:52:cf:fc:0b:b0:dd:b0:a5:d8:
                    59:9f:17:02:ed:4f:0f:0c:4c:c9:ef:cc:ad:92:1a:
                    45:e5:90:dc:a6:21:aa:cc:b5:27:13:b2:3b:e5:65:
                    ee:bc:df:d4:69:68:54:2d:0b:94:c0:6b:df:dc:b3:
                    c3:67:76:3f:51:ff:76:a1:b0:a5:34:55:ab:62:43:
                    bd:30:95:4b:28:86:42:7b:58:ee:82:b9:18:69:4e:
                    99:c1:1e:6f:5d:99:9a:dc:a0:d3:ae:24:2b:8a:c3:
                    16:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:7E:BE:98:C0:C9:C2:4A:4A:16:9E:61:C1:AA:66:8A:52:CE:94:D4
            X509v3 Authority Key Identifier:
                keyid:A7:22:B0:A0:E3:65:A0:AD:C3:D9:EE:B3:CC:BF:CC:06:2D:90:EF:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BEDE/69F538C474C511EFB86D2C93762E951A/pyKwoONloK3D2e6zzL_MBi2Q76k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/pyKwoONloK3D2e6zzL_MBi2Q76k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BEDE/69F538C474C511EFB86D2C93762E951A/pyKwoONloK3D2e6zzL_MBi2Q76k.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:37:99:97:98:1c:38:8f:68:aa:57:2e:99:07:22:55:73:cc:
         f3:0d:32:b0:e6:54:94:21:7e:ec:8f:95:3b:32:0d:aa:3e:1a:
         79:38:6d:e2:2b:d8:5f:a1:92:a5:49:a6:82:a0:24:ea:25:8c:
         24:73:c4:d3:3e:93:fc:4d:df:c6:11:0f:60:49:23:69:54:e0:
         b6:a0:e4:af:06:1c:7c:40:70:0d:f5:7b:ab:35:a0:fd:73:c3:
         45:60:0c:43:bb:09:1a:13:97:82:f6:5c:58:a3:11:8f:45:82:
         8b:dc:71:21:62:fc:b4:d5:3d:0d:da:14:22:03:db:78:bb:3f:
         64:07:de:20:5d:b9:0c:ad:97:e7:4e:fa:83:c7:3b:de:6e:f9:
         af:57:61:9c:0e:53:4a:27:9c:62:2a:51:9a:1a:b3:f9:35:e1:
         b2:59:44:3b:b2:b9:55:c0:2f:39:57:86:40:be:43:ba:02:7c:
         4f:25:29:c4:ee:f2:da:11:ef:ed:d9:74:43:94:7a:b9:d2:29:
         95:7b:7f:e1:e7:30:f5:03:06:f5:8f:5e:04:d1:8c:0f:e2:ca:
         44:93:09:45:12:5b:50:05:d1:8d:48:1c:37:14:fe:0b:04:ee:
         f0:f4:79:85:d7:41:57:cc:1c:80:d7:75:ab:a3:7a:2b:62:67:
         10:1e:9a:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----