Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3658AF9/5C52F2F4783611F09A24A0E3DAE4EC9C/1X3hPvIcIQ_suBv_eMQUm-o6fDI.mft
File:                     1X3hPvIcIQ_suBv_eMQUm-o6fDI.mft (raw, json)
Hash identifier:          uDEm6VtlXDjc5bnrg542q6c9A20l+U3Iq4M+F5vz8LE=
Subject key identifier:   63:DC:EB:23:A2:E7:77:04:FC:A9:80:67:0C:65:A6:96:5A:AA:A2:23
Authority key identifier: D5:7D:E1:3E:F2:1C:21:0F:EC:B8:1B:FF:78:C4:14:9B:EA:3A:7C:32
Certificate issuer:       /CN=F3658AF9RI/serialNumber=D57DE13EF21C210FECB81BFF78C4149BEA3A7C32
Certificate serial:       0134
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/1X3hPvIcIQ_suBv_eMQUm-o6fDI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3658AF9/5C52F2F4783611F09A24A0E3DAE4EC9C/1X3hPvIcIQ_suBv_eMQUm-o6fDI.mft
Manifest number:          0134
Signing time:             Sat 13 Jun 2026 05:04:45 +0000
Manifest this update:     Sat 13 Jun 2026 05:04:44 +0000
Manifest next update:     Mon 15 Jun 2026 05:04:44 +0000
Files and hashes:         1: 1X3hPvIcIQ_suBv_eMQUm-o6fDI.crl (hash: 1nY3d+CYKvkg7yRTVFP7XBMuhM8Q3qVPW+/+JRevwOI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3658AF9/5C52F2F4783611F09A24A0E3DAE4EC9C/1X3hPvIcIQ_suBv_eMQUm-o6fDI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3658AF9/5C52F2F4783611F09A24A0E3DAE4EC9C/1X3hPvIcIQ_suBv_eMQUm-o6fDI.mft
                          rsync://rpki.afrinic.net/repository/ripe/1X3hPvIcIQ_suBv_eMQUm-o6fDI.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 15 Jun 2026 00:45:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 308 (0x134)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3658AF9RI, serialNumber=D57DE13EF21C210FECB81BFF78C4149BEA3A7C32
        Validity
            Not Before: Jun 13 05:04:44 2026 GMT
            Not After : Jun 15 05:04:44 2026 GMT
        Subject: CN=6a2ce4ed-e46b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:fe:23:1b:af:03:76:05:94:65:4b:41:0f:94:
                    e9:9f:47:f3:d1:aa:d9:7a:b8:92:9f:35:01:50:56:
                    9c:3f:00:6c:9a:a4:2c:f2:67:50:9f:6e:10:a3:26:
                    60:59:23:d4:8f:be:b1:00:c3:c0:fa:b4:3f:67:e8:
                    af:ef:4b:09:4c:5d:95:28:86:22:d2:4d:e4:78:55:
                    5f:7d:ec:66:18:50:52:77:f5:b8:c0:84:8d:8a:e4:
                    ab:6f:b5:fe:31:a0:b7:b2:e5:e4:ac:28:88:99:e3:
                    99:3a:0c:c8:ab:b5:06:89:76:e4:81:e9:d5:32:2a:
                    f8:2c:64:42:4c:35:fe:7e:9f:3d:18:7f:a3:9e:dc:
                    d0:86:0f:9c:05:7a:11:ea:2e:22:35:90:d6:f1:28:
                    f4:6a:35:c1:3a:60:16:3d:8a:d0:ef:ee:0f:72:d4:
                    07:9c:7f:b9:05:36:99:8f:ac:13:ad:7a:00:94:45:
                    86:76:ee:cf:5a:65:a1:d8:e5:36:37:80:31:af:95:
                    4f:5c:71:e0:77:f2:8b:a8:85:fd:e3:8f:78:3f:55:
                    4c:14:28:cb:b0:99:e0:c6:79:cd:f2:96:81:e8:3d:
                    49:b7:91:d4:6a:a4:3b:10:34:7b:98:02:6b:eb:50:
                    6b:fb:79:5d:92:48:99:4a:81:e7:47:7c:32:e1:4f:
                    a8:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:DC:EB:23:A2:E7:77:04:FC:A9:80:67:0C:65:A6:96:5A:AA:A2:23
            X509v3 Authority Key Identifier:
                keyid:D5:7D:E1:3E:F2:1C:21:0F:EC:B8:1B:FF:78:C4:14:9B:EA:3A:7C:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3658AF9/5C52F2F4783611F09A24A0E3DAE4EC9C/1X3hPvIcIQ_suBv_eMQUm-o6fDI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/1X3hPvIcIQ_suBv_eMQUm-o6fDI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3658AF9/5C52F2F4783611F09A24A0E3DAE4EC9C/1X3hPvIcIQ_suBv_eMQUm-o6fDI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:ac:37:da:20:c2:54:35:e1:c5:db:f1:b5:df:74:79:34:b2:
         ca:6e:3a:81:e8:db:0c:a6:68:c3:10:31:d8:76:fd:d2:6c:7d:
         db:b3:d5:16:0f:80:ea:e8:65:4c:28:bd:cf:c8:8a:ae:21:f1:
         01:aa:df:5e:3f:6d:b8:f4:60:5c:db:bf:cf:1a:a1:b8:1c:1f:
         ad:d7:26:8c:f7:e8:3b:85:bd:42:1a:d6:ef:f5:1e:1f:a7:d9:
         0d:d4:9e:2b:54:02:37:e2:88:38:e7:a2:25:d0:36:9a:e8:3b:
         5c:d8:cd:79:fd:06:db:a9:bc:c2:25:d0:4e:71:1c:7e:5d:81:
         3c:ff:83:8e:10:7e:95:a3:5c:78:0b:60:0a:58:03:8b:06:83:
         47:52:fb:ab:0d:4a:6b:51:4c:8c:ce:22:ff:a5:43:22:47:35:
         75:ce:44:24:be:11:87:50:a9:5f:58:65:7b:06:59:1a:23:cf:
         22:bc:9e:f7:9c:d1:5c:a7:f1:e1:b4:5a:40:1e:8d:b1:c7:48:
         d2:76:89:68:e0:ff:65:f6:92:23:46:21:f7:cf:4f:e6:be:55:
         26:1c:eb:03:77:bb:8e:38:a6:f6:b9:e0:49:13:28:d9:94:8e:
         8a:13:b2:f8:ae:3f:97:44:b8:d1:3c:6d:59:3a:bf:00:f2:02:
         63:9e:46:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:21:33 2026 by rpki-client