Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3651B12/1CC77B125BF011F0936AE0D9DAE4EC9C/1F-q3w0PsrIYxNl-HvQbwMkznC8.mft
File:                     1F-q3w0PsrIYxNl-HvQbwMkznC8.mft (raw, json)
Hash identifier:          y28mxJz5wtJf7XNvtCHJNaaR8icPD+4DWw7H6f45nnk=
Subject key identifier:   7F:8D:D2:08:53:A9:69:AF:7B:F9:07:03:27:3D:09:7B:01:C5:A3:2A
Authority key identifier: D4:5F:AA:DF:0D:0F:B2:B2:18:C4:D9:7E:1E:F4:1B:C0:C9:33:9C:2F
Certificate issuer:       /CN=F3651B12RI/serialNumber=D45FAADF0D0FB2B218C4D97E1EF41BC0C9339C2F
Certificate serial:       7B
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/1F-q3w0PsrIYxNl-HvQbwMkznC8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3651B12/1CC77B125BF011F0936AE0D9DAE4EC9C/1F-q3w0PsrIYxNl-HvQbwMkznC8.mft
Manifest number:          7B
Signing time:             Wed 05 Nov 2025 05:33:21 +0000
Manifest this update:     Wed 05 Nov 2025 05:33:20 +0000
Manifest next update:     Fri 07 Nov 2025 05:33:20 +0000
Files and hashes:         1: 1F-q3w0PsrIYxNl-HvQbwMkznC8.crl (hash: RnONCnc+1k5Iccr+YxHUzQi8zxm24rVklf1zmsxwBVs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3651B12/1CC77B125BF011F0936AE0D9DAE4EC9C/1F-q3w0PsrIYxNl-HvQbwMkznC8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3651B12/1CC77B125BF011F0936AE0D9DAE4EC9C/1F-q3w0PsrIYxNl-HvQbwMkznC8.mft
                          rsync://rpki.afrinic.net/repository/ripe/1F-q3w0PsrIYxNl-HvQbwMkznC8.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 07 Nov 2025 00:45:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123 (0x7b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3651B12RI, serialNumber=D45FAADF0D0FB2B218C4D97E1EF41BC0C9339C2F
        Validity
            Not Before: Nov  5 05:33:20 2025 GMT
            Not After : Nov  7 05:33:20 2025 GMT
        Subject: CN=690ae1a1-a487
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:f2:33:2b:34:39:a0:a3:5b:c1:11:bc:c3:6c:
                    ce:d1:ba:cb:08:5e:2b:97:8e:24:07:a2:2f:c7:53:
                    a5:22:5c:e3:41:0a:22:91:02:e1:c8:82:9b:a5:7d:
                    63:93:19:bd:fb:6a:93:59:2c:11:c5:5b:8c:e8:6d:
                    d8:be:c9:2e:0a:22:ff:53:84:08:95:aa:9e:d8:74:
                    fd:ae:e8:8c:3e:57:4f:24:50:61:9f:7a:e1:26:11:
                    c4:dd:aa:8d:5b:31:c0:0a:5c:be:a3:f9:34:ee:75:
                    e8:a2:5c:e6:6f:5e:35:c2:dc:7c:76:6b:41:a5:a6:
                    ae:c1:47:cc:f4:a4:1f:42:0a:95:11:53:9d:e2:bd:
                    8f:8d:9c:fd:ce:db:9a:51:e8:76:21:ef:6a:87:f5:
                    92:76:e1:59:93:de:15:22:c3:21:00:e1:45:98:53:
                    85:92:08:63:9d:a0:84:80:af:08:ae:96:1f:73:dd:
                    65:ce:5b:c7:4e:76:cb:a1:78:be:3c:94:76:23:93:
                    ff:d3:5f:ca:e7:68:83:29:1e:8a:a7:22:8c:10:b7:
                    c2:02:a8:b2:b4:44:d5:bb:3f:d9:92:87:01:e5:6a:
                    82:68:d6:18:73:30:34:f7:cd:95:ef:39:6f:3d:25:
                    81:e6:8d:2e:6d:69:ed:86:e6:c8:c1:fc:11:8c:a8:
                    2d:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:8D:D2:08:53:A9:69:AF:7B:F9:07:03:27:3D:09:7B:01:C5:A3:2A
            X509v3 Authority Key Identifier:
                keyid:D4:5F:AA:DF:0D:0F:B2:B2:18:C4:D9:7E:1E:F4:1B:C0:C9:33:9C:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3651B12/1CC77B125BF011F0936AE0D9DAE4EC9C/1F-q3w0PsrIYxNl-HvQbwMkznC8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/1F-q3w0PsrIYxNl-HvQbwMkznC8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3651B12/1CC77B125BF011F0936AE0D9DAE4EC9C/1F-q3w0PsrIYxNl-HvQbwMkznC8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:80:10:f0:9b:9a:da:53:55:fa:16:28:2c:49:b8:b3:0b:bd:
         7c:39:e3:e8:50:cc:95:d0:10:ee:18:f2:f9:4d:0f:58:7e:6a:
         bf:d6:b7:37:35:eb:28:ab:a8:1e:94:7e:03:9a:8e:1a:f6:2c:
         99:d7:62:d5:9c:57:f2:8d:31:5f:18:0d:db:41:3c:55:6f:ba:
         d9:e2:6e:fd:b1:a9:7f:b7:bc:8e:14:9d:f5:c9:19:21:b9:60:
         9c:e6:9d:88:56:f6:e8:8c:3b:58:04:6d:5b:7e:af:c4:d0:c4:
         ed:34:58:4b:75:40:1f:1c:c8:d0:95:4c:19:36:b3:aa:9b:81:
         c9:6f:96:ff:08:a6:b5:89:51:ea:84:c5:4c:c6:b1:d1:9e:06:
         76:10:94:88:36:14:93:b9:7a:f1:83:c2:1c:21:f8:fb:67:51:
         c3:c4:d9:d5:be:55:10:da:4e:cf:47:b1:0f:50:f8:df:8a:2c:
         06:b4:39:f3:c6:24:54:50:3f:ee:f7:18:95:a0:aa:28:0a:eb:
         9d:d1:c4:5b:09:a4:6f:41:52:88:20:6a:2f:bc:19:9f:53:ae:
         58:48:e2:fe:79:20:b2:60:8e:b0:d1:4b:72:e2:d8:89:63:c0:
         0b:c5:ca:8c:dc:53:5c:0a:58:92:bd:93:54:4d:29:03:d1:fc:
         31:44:50:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:15:15 2025 by rpki-client