Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/cHofKGrimG32SRDDA05RiafCFt0.mft
File:                     cHofKGrimG32SRDDA05RiafCFt0.mft (raw, json)
Hash identifier:          PqEs4JzxMAWKu5h23hKLZLCiYsTkwIssiGAS+p9/PFE=
Subject key identifier:   1D:53:42:3D:56:70:C8:69:72:4C:0C:2D:1A:2E:6D:1A:75:55:81:AB
Authority key identifier: 70:7A:1F:28:6A:E2:98:6D:F6:49:10:C3:03:4E:51:89:A7:C2:16:DD
Certificate issuer:       /CN=F3644DAEAF/serialNumber=707A1F286AE2986DF64910C3034E5189A7C216DD
Certificate serial:       06C8
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/cHofKGrimG32SRDDA05RiafCFt0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/cHofKGrimG32SRDDA05RiafCFt0.mft
Manifest number:          06C4
Signing time:             Wed 05 Nov 2025 02:12:04 +0000
Manifest this update:     Wed 05 Nov 2025 02:12:03 +0000
Manifest next update:     Fri 07 Nov 2025 02:12:03 +0000
Files and hashes:         1: cHofKGrimG32SRDDA05RiafCFt0.crl (hash: 40Zr8X+/KsaP8ofvQhrbiL1PWKSsE4g+0PpfkwE38Os=)
                          2: 9C013D2EE05511ECBDACD89CF1222468.roa (hash: UGj7GRnwJOSfAQPFu2EMncmzBzkv3j77PzP+YrH85ms=)
                          3: 6FE5059AE05511EC8F6C299CF1222468.roa (hash: 3Y9hbnFs2RPSkmUCx7/XEKKtj3J0P6/CZTYRoO7RuTs=)
                          4: CA385ECC978E11F0A04E5980DAE4EC9C.roa (hash: O+sWw2ccWdiZcvRBVii039jCozcaeIkFVcemmzJTRYE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/cHofKGrimG32SRDDA05RiafCFt0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/cHofKGrimG32SRDDA05RiafCFt0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/cHofKGrimG32SRDDA05RiafCFt0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 07 Nov 2025 00:06:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1736 (0x6c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3644DAEAF, serialNumber=707A1F286AE2986DF64910C3034E5189A7C216DD
        Validity
            Not Before: Nov  5 02:12:03 2025 GMT
            Not After : Nov  7 02:12:03 2025 GMT
        Subject: CN=690ab274-97ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:af:5f:7a:f5:58:83:ed:f3:4a:95:5e:a8:2d:
                    a3:53:33:65:a0:e4:81:f8:03:3e:66:e1:6a:40:63:
                    8b:0b:00:da:28:c8:d7:e7:15:d6:59:60:63:e0:99:
                    bd:9b:1d:85:3c:8f:06:ca:7e:82:ab:2d:1e:b0:68:
                    0e:7a:ce:8b:f0:92:4c:bf:9c:c4:a6:ef:e5:2e:53:
                    e5:22:6c:59:77:60:bd:b3:69:8a:66:e0:54:28:2b:
                    b4:07:43:ce:a2:84:e1:e3:c3:cf:b4:72:f0:1a:56:
                    b9:b2:cc:e6:19:a5:01:7f:27:ab:46:5d:ad:d5:6a:
                    1a:ad:d3:d1:27:39:22:a2:d0:80:d6:08:e0:32:85:
                    9a:87:21:0f:8c:4c:dc:fc:c0:fe:c3:af:c8:1b:50:
                    7d:9e:0a:73:19:2d:cf:0a:35:ea:17:54:22:80:1f:
                    be:4a:ee:59:78:b9:e8:44:fe:91:48:c7:00:4b:81:
                    6c:85:e9:b7:b0:e6:96:e3:d5:6f:9e:30:1d:02:95:
                    32:be:d8:1e:e6:b7:08:06:40:57:76:2c:db:74:62:
                    c9:d5:74:81:74:31:f5:3e:bb:6f:f9:92:c4:25:a7:
                    ec:a5:29:89:15:6f:ae:0b:5e:4d:df:8c:b1:45:ce:
                    b2:b8:44:cf:d0:b2:1f:77:b7:97:aa:a3:0c:13:e1:
                    de:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:53:42:3D:56:70:C8:69:72:4C:0C:2D:1A:2E:6D:1A:75:55:81:AB
            X509v3 Authority Key Identifier:
                keyid:70:7A:1F:28:6A:E2:98:6D:F6:49:10:C3:03:4E:51:89:A7:C2:16:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/cHofKGrimG32SRDDA05RiafCFt0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/cHofKGrimG32SRDDA05RiafCFt0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/cHofKGrimG32SRDDA05RiafCFt0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:29:67:7a:05:a6:7a:60:54:1e:26:45:4c:35:de:cf:aa:2f:
         46:ed:77:bd:b0:63:b0:93:b1:60:e7:7e:9b:d2:c4:c6:d8:bd:
         39:ec:ce:e8:d7:51:27:fb:1e:ba:a8:c5:39:2a:87:bd:fc:64:
         91:b7:74:42:5f:cc:9d:87:69:a5:a1:70:d9:ae:bb:9b:0b:d3:
         b9:96:f5:3b:8e:ec:f6:bc:b8:61:b0:f9:d5:78:a8:0c:b6:d0:
         0d:39:76:a6:77:f3:d6:53:32:ff:0c:16:89:d6:e6:ad:77:d1:
         7f:de:e5:86:80:32:15:f4:51:26:96:44:49:25:85:00:b9:96:
         9c:94:2c:7f:e2:36:bb:0b:ad:fb:0d:a5:ee:c5:b7:c5:79:7d:
         55:54:92:8f:76:09:b9:f4:7a:aa:7b:c9:68:3a:3b:fd:42:f3:
         b9:dd:0f:d1:d3:dc:41:f4:c7:70:c4:a8:19:dd:6c:70:65:3f:
         85:6e:72:36:5a:ed:5f:19:d0:18:01:8a:a3:5d:a1:0f:dd:fd:
         05:f5:8d:53:96:84:46:df:07:75:67:47:98:c0:71:0c:69:10:
         55:de:fd:2b:08:8b:09:7a:6a:6e:c6:64:cf:1d:cd:17:ef:7e:
         ac:d1:35:8a:e3:d8:85:8f:24:ea:3a:f2:2b:9c:aa:b3:ae:fd:
         7f:0e:5e:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:35:53 2025 by rpki-client