Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3642C0F/608E7226C07911EC96A968D55A40D577/ogtTm8eSX3rsKacM9qGEeJGpsxI.mft
File:                     ogtTm8eSX3rsKacM9qGEeJGpsxI.mft (raw, json)
Hash identifier:          AEtkUINO7lsIzwhuMglE7dKH28OCp2IOR7aDow7AWO4=
Subject key identifier:   31:40:96:3D:04:92:23:1D:CF:1C:2C:3B:DB:91:F3:AD:DE:A0:69:F5
Authority key identifier: A2:0B:53:9B:C7:92:5F:7A:EC:29:A7:0C:F6:A1:84:78:91:A9:B3:12
Certificate issuer:       /CN=F3642C0FAR/serialNumber=A20B539BC7925F7AEC29A70CF6A1847891A9B312
Certificate serial:       0643
Authority info access:    rsync://rpki.afrinic.net/repository/arin/ogtTm8eSX3rsKacM9qGEeJGpsxI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3642C0F/608E7226C07911EC96A968D55A40D577/ogtTm8eSX3rsKacM9qGEeJGpsxI.mft
Manifest number:          0642
Signing time:             Wed 29 Jul 2026 02:42:07 +0000
Manifest this update:     Wed 29 Jul 2026 02:42:06 +0000
Manifest next update:     Fri 31 Jul 2026 02:42:06 +0000
Files and hashes:         1: ogtTm8eSX3rsKacM9qGEeJGpsxI.crl (hash: qHLa32QWH2Ag/6nzbp/ySyL1ph2sdfcdMHkOG226WR0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3642C0F/608E7226C07911EC96A968D55A40D577/ogtTm8eSX3rsKacM9qGEeJGpsxI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3642C0F/608E7226C07911EC96A968D55A40D577/ogtTm8eSX3rsKacM9qGEeJGpsxI.mft
                          rsync://rpki.afrinic.net/repository/arin/ogtTm8eSX3rsKacM9qGEeJGpsxI.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 31 Jul 2026 00:26:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1603 (0x643)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3642C0FAR, serialNumber=A20B539BC7925F7AEC29A70CF6A1847891A9B312
        Validity
            Not Before: Jul 29 02:42:06 2026 GMT
            Not After : Jul 31 02:42:06 2026 GMT
        Subject: CN=6a69687f-08b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:e2:35:7d:8c:39:66:50:7f:96:6b:f8:05:7d:
                    5f:d0:e3:f5:53:98:e8:0b:10:e6:29:44:cb:3a:1d:
                    43:52:5a:cc:68:a5:eb:08:ae:fa:c4:50:86:cf:a8:
                    59:68:e7:f7:22:ad:73:4a:2d:f6:ef:80:40:e0:eb:
                    f3:a5:36:1b:12:5a:f7:d6:4d:fb:67:c5:ac:2e:bc:
                    ce:23:cd:bc:53:4f:ac:38:13:df:90:7c:0e:28:f2:
                    95:3f:ce:92:3e:6e:6d:f1:25:55:15:9e:04:d3:77:
                    7b:06:40:55:39:0f:22:9c:a1:d8:cc:cb:56:79:80:
                    76:3e:35:48:1b:63:15:7e:87:f5:71:f4:1d:30:91:
                    b0:39:2a:6b:a6:3d:4f:6e:57:e4:79:37:55:3b:57:
                    e2:7e:0e:36:29:6b:3f:ce:e5:04:cc:5b:26:5f:d6:
                    b9:4f:89:00:4b:76:28:3a:90:7c:bd:df:3a:64:62:
                    89:75:fc:cb:a0:d1:43:87:d8:5f:13:d5:d4:d0:ad:
                    22:90:64:46:99:94:77:c0:5a:fa:57:63:d0:10:a3:
                    1f:b8:30:4a:d3:a6:f1:d9:19:77:b7:44:17:26:6b:
                    28:70:2d:9b:5a:dd:8e:91:0c:d8:7c:24:53:c4:0c:
                    fc:80:00:4d:68:57:dc:98:8e:80:d4:86:4b:e0:29:
                    32:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:40:96:3D:04:92:23:1D:CF:1C:2C:3B:DB:91:F3:AD:DE:A0:69:F5
            X509v3 Authority Key Identifier:
                keyid:A2:0B:53:9B:C7:92:5F:7A:EC:29:A7:0C:F6:A1:84:78:91:A9:B3:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3642C0F/608E7226C07911EC96A968D55A40D577/ogtTm8eSX3rsKacM9qGEeJGpsxI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/ogtTm8eSX3rsKacM9qGEeJGpsxI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3642C0F/608E7226C07911EC96A968D55A40D577/ogtTm8eSX3rsKacM9qGEeJGpsxI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:05:c9:4b:6b:19:6a:3d:85:fb:89:bb:3a:68:6f:b6:24:9d:
         b2:64:78:87:78:9f:e7:05:76:b4:10:30:9d:e3:b3:8b:6c:e8:
         fb:58:3b:5e:03:9f:49:72:1a:ba:1e:84:d5:e1:1d:3a:7f:90:
         b1:cd:9e:98:c0:59:a9:17:42:0b:be:a9:32:74:a7:35:17:1b:
         d8:07:d5:e2:44:2a:e4:27:0d:07:4f:7e:8f:2f:a6:41:bc:48:
         7a:bf:be:f9:b5:3e:b4:71:b2:27:93:02:4e:68:ba:fb:70:d6:
         cb:97:36:13:3c:96:4f:0b:9e:a2:05:6f:8a:fd:90:d9:6b:83:
         3e:7b:ce:98:b7:4e:05:b8:7a:43:85:aa:33:df:0f:d3:2e:d3:
         7d:96:55:d5:8d:55:90:29:a1:cf:0c:8a:69:b5:13:15:9a:31:
         07:ef:e5:4d:17:e1:fc:e4:2c:35:5f:ac:a4:c7:5b:9a:c6:c9:
         4b:ae:a9:a7:11:04:4f:a1:c8:54:cf:f3:47:62:37:60:ee:8e:
         f0:96:28:33:f9:cd:0a:04:14:05:38:e3:15:ec:38:f2:ae:1e:
         af:7f:82:b7:fd:d1:03:a5:5e:a4:ed:cf:82:38:ae:bc:a3:45:
         19:a1:11:28:d1:58:00:03:c9:f4:2a:dd:a4:15:3c:f4:a9:48:
         98:f1:c9:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:44:16 2026 by rpki-client