Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3651B12/1CC77B125BF011F0936AE0D9DAE4EC9C/1F-q3w0PsrIYxNl-HvQbwMkznC8.mft
File:                     1F-q3w0PsrIYxNl-HvQbwMkznC8.mft (raw, json)
Hash identifier:          mP1o0qXQkWTMNAtxRfTPw6AOdrAdAWRYctwCU1sckac=
Subject key identifier:   A4:E1:32:FF:26:67:65:4E:F1:BF:E4:B8:A8:1B:AE:59:FC:7E:A5:12
Authority key identifier: D4:5F:AA:DF:0D:0F:B2:B2:18:C4:D9:7E:1E:F4:1B:C0:C9:33:9C:2F
Certificate issuer:       /CN=F3651B12RI/serialNumber=D45FAADF0D0FB2B218C4D97E1EF41BC0C9339C2F
Certificate serial:       01CA
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/1F-q3w0PsrIYxNl-HvQbwMkznC8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3651B12/1CC77B125BF011F0936AE0D9DAE4EC9C/1F-q3w0PsrIYxNl-HvQbwMkznC8.mft
Manifest number:          01CA
Signing time:             Sun 04 Oct 2026 04:57:42 +0000
Manifest this update:     Sun 04 Oct 2026 04:57:42 +0000
Manifest next update:     Tue 06 Oct 2026 04:57:42 +0000
Files and hashes:         1: 1F-q3w0PsrIYxNl-HvQbwMkznC8.crl (hash: WIC1nOl6QlcADUGjQnYvyQUR3N6XnjlHduU4Z9eXG4U=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3651B12/1CC77B125BF011F0936AE0D9DAE4EC9C/1F-q3w0PsrIYxNl-HvQbwMkznC8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3651B12/1CC77B125BF011F0936AE0D9DAE4EC9C/1F-q3w0PsrIYxNl-HvQbwMkznC8.mft
                          rsync://rpki.afrinic.net/repository/ripe/1F-q3w0PsrIYxNl-HvQbwMkznC8.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 06 Oct 2026 00:45:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 458 (0x1ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3651B12RI, serialNumber=D45FAADF0D0FB2B218C4D97E1EF41BC0C9339C2F
        Validity
            Not Before: Oct  4 04:57:42 2026 GMT
            Not After : Oct  6 04:57:42 2026 GMT
        Subject: CN=6ac1dcc6-a742
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:35:31:b9:b9:e8:59:65:b0:cd:d1:7c:66:75:
                    33:14:3a:91:60:1b:38:df:a9:6a:3f:c7:e7:d3:2c:
                    f3:60:c5:ed:2b:cb:cb:04:92:1a:b1:23:ed:6c:c1:
                    10:ee:98:07:76:d6:c0:19:6d:cd:fe:54:c6:3e:52:
                    6c:03:2d:d0:d7:43:ab:bb:10:da:8c:24:a1:dc:b3:
                    f0:35:79:7b:73:cf:c3:ac:0e:0c:0e:c8:91:58:a5:
                    34:26:1d:9a:e7:5e:f5:65:4e:b5:42:e7:9a:d0:16:
                    72:7a:23:da:0b:c8:d6:1d:af:b4:d9:ef:b1:e6:62:
                    88:08:61:7a:05:59:bc:7a:85:fe:ff:27:cc:fa:ba:
                    9c:96:63:67:33:8d:5b:ce:31:cb:7a:d6:cc:22:2e:
                    76:2f:c6:07:ac:86:1f:dd:0e:77:5e:07:b3:bb:e5:
                    5d:2f:9d:c7:b8:3d:e6:59:2f:a6:a5:53:14:45:f5:
                    1c:31:5b:19:ae:9a:4a:83:65:d0:ab:76:45:a0:bb:
                    bb:57:5b:78:da:6b:3e:0e:f4:80:5c:80:6b:fc:cf:
                    e3:a3:11:42:86:bb:eb:1d:75:a7:7b:ca:f9:29:08:
                    cb:27:d8:13:70:f2:38:22:d7:ff:88:19:64:48:6e:
                    78:a2:dc:1f:28:85:13:ce:7f:89:e2:a8:f5:19:a8:
                    0f:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:E1:32:FF:26:67:65:4E:F1:BF:E4:B8:A8:1B:AE:59:FC:7E:A5:12
            X509v3 Authority Key Identifier:
                keyid:D4:5F:AA:DF:0D:0F:B2:B2:18:C4:D9:7E:1E:F4:1B:C0:C9:33:9C:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3651B12/1CC77B125BF011F0936AE0D9DAE4EC9C/1F-q3w0PsrIYxNl-HvQbwMkznC8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/1F-q3w0PsrIYxNl-HvQbwMkznC8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3651B12/1CC77B125BF011F0936AE0D9DAE4EC9C/1F-q3w0PsrIYxNl-HvQbwMkznC8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:76:6b:18:65:b3:a0:e7:27:59:22:b5:94:68:14:d8:bd:84:
         8a:c3:29:d7:5b:75:67:6d:1a:cd:21:a1:af:88:f5:eb:e3:09:
         68:b2:ab:e1:dc:a7:87:12:83:50:ec:32:b6:7b:41:db:91:23:
         9b:a4:8c:f2:40:ce:82:a4:5c:d8:59:20:f0:5c:99:62:da:ea:
         15:84:ba:de:df:21:f1:9d:1c:9c:d6:23:64:ef:9e:41:84:97:
         ca:5c:8b:ef:e7:d6:3e:32:76:c1:b5:26:34:60:2f:05:27:e3:
         b2:0c:17:98:7c:33:c4:f0:1b:51:0a:1e:c7:81:ab:5d:a8:35:
         ab:f9:64:c7:4f:bd:14:5c:36:05:f7:f0:8c:4b:d0:61:fe:12:
         95:2e:3a:a7:e9:73:c6:d2:66:a2:99:92:1b:41:78:ce:c6:48:
         f9:17:96:93:fe:56:27:bc:5a:5e:62:c1:d4:60:dc:f3:92:dd:
         9a:a6:68:e9:79:3e:39:90:91:40:b5:5e:00:54:c5:8a:6b:4f:
         03:12:8e:dd:32:47:7f:1f:f7:40:69:1c:0e:30:3f:3f:66:55:
         c1:2a:96:91:a8:5c:5d:47:2a:9f:01:2e:70:c1:dc:40:d7:71:
         0f:d5:d0:d8:2b:17:33:30:c1:19:5d:16:5a:3c:5d:c5:54:44:
         2e:fb:49:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----