Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3658AF9/5C52F2F4783611F09A24A0E3DAE4EC9C/1X3hPvIcIQ_suBv_eMQUm-o6fDI.mft
File:                     1X3hPvIcIQ_suBv_eMQUm-o6fDI.mft (raw, json)
Hash identifier:          GpBE0lB0xXDBAjFD3DTXEi/OrhKGjXlVZgGNytSgzuQ=
Subject key identifier:   E1:C9:39:7E:5D:32:B7:A9:D3:25:10:BD:9B:12:B2:E6:91:D1:EC:0E
Authority key identifier: D5:7D:E1:3E:F2:1C:21:0F:EC:B8:1B:FF:78:C4:14:9B:EA:3A:7C:32
Certificate issuer:       /CN=F3658AF9RI/serialNumber=D57DE13EF21C210FECB81BFF78C4149BEA3A7C32
Certificate serial:       CC
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/1X3hPvIcIQ_suBv_eMQUm-o6fDI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3658AF9/5C52F2F4783611F09A24A0E3DAE4EC9C/1X3hPvIcIQ_suBv_eMQUm-o6fDI.mft
Manifest number:          CC
Signing time:             Sun 01 Mar 2026 03:27:57 +0000
Manifest this update:     Sun 01 Mar 2026 03:27:57 +0000
Manifest next update:     Tue 03 Mar 2026 03:27:57 +0000
Files and hashes:         1: 1X3hPvIcIQ_suBv_eMQUm-o6fDI.crl (hash: LnBzdSgk73SiqBGAXIsTgZSLSIa6bslihR1x1Xp29cg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3658AF9/5C52F2F4783611F09A24A0E3DAE4EC9C/1X3hPvIcIQ_suBv_eMQUm-o6fDI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3658AF9/5C52F2F4783611F09A24A0E3DAE4EC9C/1X3hPvIcIQ_suBv_eMQUm-o6fDI.mft
                          rsync://rpki.afrinic.net/repository/ripe/1X3hPvIcIQ_suBv_eMQUm-o6fDI.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 03 Mar 2026 00:45:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 204 (0xcc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3658AF9RI, serialNumber=D57DE13EF21C210FECB81BFF78C4149BEA3A7C32
        Validity
            Not Before: Mar  1 03:27:57 2026 GMT
            Not After : Mar  3 03:27:57 2026 GMT
        Subject: CN=69a3b23d-0718
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:83:1e:19:7b:39:7b:09:96:bf:bb:f0:18:7d:
                    63:e7:9f:85:57:20:f4:9c:25:b0:73:14:08:5f:4b:
                    a4:1f:5e:e0:b2:96:e4:8e:d0:ce:27:9a:44:a2:bb:
                    4a:87:ec:95:ee:ce:00:62:f7:d4:17:0b:6e:96:e5:
                    99:20:dc:1e:cf:9a:60:93:d2:71:e8:49:83:e4:35:
                    b5:5c:d9:81:aa:31:07:fc:26:a4:27:5d:f4:b2:6e:
                    dd:9f:03:b5:52:b7:b6:43:9c:87:1d:23:87:24:61:
                    78:c1:13:18:75:a6:06:dd:91:0d:2e:4e:0f:77:77:
                    86:e1:6f:3b:b3:ff:35:d6:9f:c7:16:97:94:46:70:
                    dd:58:1b:1e:da:5e:9f:d4:97:84:ae:f8:e3:11:5d:
                    90:26:72:80:af:b1:fd:7a:94:75:de:c3:13:99:f0:
                    7f:c0:8a:6d:f2:e4:08:04:a5:b3:4c:84:14:ac:61:
                    72:00:33:b8:a7:2f:ac:24:15:56:02:24:9a:e1:1a:
                    c3:e7:e2:82:b8:f9:2c:db:32:09:ac:a1:36:f0:7a:
                    d2:53:a5:01:b3:bd:0b:a3:3c:61:26:93:56:cd:11:
                    41:98:fe:4f:a1:f9:c2:5a:1d:af:53:30:79:6e:40:
                    f0:aa:84:66:ab:67:7f:5d:2e:58:32:12:96:91:58:
                    30:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:C9:39:7E:5D:32:B7:A9:D3:25:10:BD:9B:12:B2:E6:91:D1:EC:0E
            X509v3 Authority Key Identifier:
                keyid:D5:7D:E1:3E:F2:1C:21:0F:EC:B8:1B:FF:78:C4:14:9B:EA:3A:7C:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3658AF9/5C52F2F4783611F09A24A0E3DAE4EC9C/1X3hPvIcIQ_suBv_eMQUm-o6fDI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/1X3hPvIcIQ_suBv_eMQUm-o6fDI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3658AF9/5C52F2F4783611F09A24A0E3DAE4EC9C/1X3hPvIcIQ_suBv_eMQUm-o6fDI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:b1:8c:d6:9d:1f:ed:95:f5:31:92:02:fa:57:f6:e8:77:c9:
         44:ab:bf:45:1c:ca:25:54:55:0b:5b:8c:cc:32:50:1f:2c:bb:
         70:b3:30:d0:7a:d6:5b:15:bd:7b:ef:3c:d2:c0:07:1f:67:a5:
         5d:de:c2:db:1a:2d:ab:9a:b9:1e:25:60:3a:9a:11:aa:53:2e:
         98:96:d7:52:ae:41:e7:16:a2:1d:de:70:f7:f4:56:9c:43:9a:
         4e:41:c0:02:bd:25:0d:b6:fd:90:1c:eb:27:1d:7b:5b:0a:c5:
         e7:41:2c:24:12:e6:b9:82:91:94:19:ed:f4:ea:7e:d1:5b:20:
         cc:ab:aa:c4:ad:cf:95:d2:d8:b1:3d:bf:b7:16:09:1b:75:49:
         d4:1d:9f:5a:8e:2c:d1:3e:cb:1a:77:0e:4c:55:a2:39:01:eb:
         4a:76:2d:72:15:fe:da:42:ff:ab:bd:9f:dc:5b:00:ab:2d:e6:
         db:ca:bd:dd:f7:76:8b:9f:5c:00:92:2e:93:54:5a:99:ac:ea:
         38:e1:5a:70:45:b1:8d:c4:4a:71:51:d7:3f:a5:c6:78:5c:19:
         73:9d:90:2e:17:c2:d0:f5:3c:bf:0b:2c:9d:ed:ed:49:6e:9e:
         88:3a:e9:b5:d9:5a:9d:a6:23:6d:3b:4e:eb:77:0e:2a:81:6a:
         0a:63:e5:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:37:31 2026 by rpki-client