Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365C895/F420C6A485DC11E98087BF0BF8AEA228/qEB8UNNVEmlZXYTPEkOl86_4EHA.mft
File:                     qEB8UNNVEmlZXYTPEkOl86_4EHA.mft (raw, json)
Hash identifier:          34JFuEA/xwTCEABFeOlEXseDt1PzXIjH7Kru0t1Otfc=
Subject key identifier:   48:0A:5A:84:DC:39:66:D5:08:A3:1E:A0:3C:67:35:4D:FC:26:37:2D
Authority key identifier: A8:40:7C:50:D3:55:12:69:59:5D:84:CF:12:43:A5:F3:AF:F8:10:70
Certificate issuer:       /CN=F365C895RI/serialNumber=A8407C50D3551269595D84CF1243A5F3AFF81070
Certificate serial:       09E4
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/qEB8UNNVEmlZXYTPEkOl86_4EHA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365C895/F420C6A485DC11E98087BF0BF8AEA228/qEB8UNNVEmlZXYTPEkOl86_4EHA.mft
Manifest number:          09E2
Signing time:             Mon 02 Mar 2026 01:11:35 +0000
Manifest this update:     Mon 02 Mar 2026 01:11:35 +0000
Manifest next update:     Wed 04 Mar 2026 01:11:35 +0000
Files and hashes:         1: qEB8UNNVEmlZXYTPEkOl86_4EHA.crl (hash: jqiCvCyEF97iyiFB3OVX86sruLvjXypht2dqNlKrQF4=)
                          2: 42E0DF7E85E011E989E4CF0DF8AEA228.roa (hash: ub04iL+FdrPKe6xm0DlU5EWb8IsSt+07XZ7Am9PMCkI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365C895/F420C6A485DC11E98087BF0BF8AEA228/qEB8UNNVEmlZXYTPEkOl86_4EHA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365C895/F420C6A485DC11E98087BF0BF8AEA228/qEB8UNNVEmlZXYTPEkOl86_4EHA.mft
                          rsync://rpki.afrinic.net/repository/ripe/qEB8UNNVEmlZXYTPEkOl86_4EHA.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Mar 2026 00:45:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2532 (0x9e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365C895RI, serialNumber=A8407C50D3551269595D84CF1243A5F3AFF81070
        Validity
            Not Before: Mar  2 01:11:35 2026 GMT
            Not After : Mar  4 01:11:35 2026 GMT
        Subject: CN=69a4e3c7-7bf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ba:1c:e8:5a:cd:fc:39:e6:9b:ed:0f:2c:d1:
                    ae:5d:64:c6:c1:89:a7:34:59:93:b1:af:0c:41:81:
                    8b:05:d7:80:1f:52:f3:88:57:55:cd:27:80:f0:32:
                    70:ea:4f:70:62:29:2f:52:e7:58:32:76:35:5c:45:
                    24:46:88:69:bb:e9:33:4e:37:63:30:9f:cd:0b:47:
                    4e:a5:6f:91:52:82:64:51:dc:d7:8f:04:ec:8a:57:
                    dc:53:5f:84:fe:06:f8:b9:5d:ee:94:a1:08:90:95:
                    44:35:70:c6:de:6b:84:72:74:12:59:2a:cd:e9:a4:
                    08:c6:ae:5a:ab:1d:46:d9:f2:63:f6:b1:e7:c3:30:
                    12:09:0d:f0:c6:2d:5d:cb:f8:37:fd:0a:f4:35:91:
                    9e:e3:e4:46:b2:e5:3c:b3:f0:52:17:ed:e8:c0:96:
                    67:89:fc:d7:b0:cb:52:93:85:77:b7:55:4f:58:6e:
                    dc:89:fb:cb:a0:db:85:d0:de:4d:79:79:73:6a:dc:
                    a1:17:bc:65:9a:02:6d:52:4c:cc:6b:7a:1c:ba:2c:
                    a3:fa:86:49:21:92:f2:13:9f:83:9e:0b:a4:63:4d:
                    66:2f:d4:2f:d6:33:54:a1:21:d9:9d:49:ba:66:85:
                    be:ee:fc:94:88:8d:61:38:eb:fb:af:5e:3b:76:dd:
                    f2:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:0A:5A:84:DC:39:66:D5:08:A3:1E:A0:3C:67:35:4D:FC:26:37:2D
            X509v3 Authority Key Identifier:
                keyid:A8:40:7C:50:D3:55:12:69:59:5D:84:CF:12:43:A5:F3:AF:F8:10:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365C895/F420C6A485DC11E98087BF0BF8AEA228/qEB8UNNVEmlZXYTPEkOl86_4EHA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/qEB8UNNVEmlZXYTPEkOl86_4EHA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365C895/F420C6A485DC11E98087BF0BF8AEA228/qEB8UNNVEmlZXYTPEkOl86_4EHA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:0d:11:78:07:20:1d:36:7b:d8:c6:61:02:b0:1c:e1:34:18:
         98:70:d7:d2:b6:f8:e1:c1:15:f1:b8:8f:3c:cb:f8:72:2c:59:
         ab:df:7e:0e:26:9f:6e:ac:ea:c7:a4:f1:7c:74:31:17:2f:19:
         6f:d6:a9:ba:a1:6e:11:ab:28:d9:18:ab:53:7d:85:85:62:09:
         11:6e:95:5e:9d:5d:ee:53:31:8f:47:eb:05:11:28:3c:69:f6:
         e3:a3:44:87:05:c5:7b:14:b5:c4:a3:cd:84:01:b0:f7:49:c7:
         de:0d:92:b3:6e:de:4c:09:10:64:b9:32:27:db:97:e8:e2:33:
         cf:47:fd:87:59:e4:3e:47:2d:e2:66:ff:0a:6f:04:2f:f8:af:
         3d:dd:8d:9d:34:de:72:0a:e0:3f:15:03:5b:b2:c2:be:f8:ae:
         40:99:25:30:18:3f:f2:c1:64:14:51:89:fe:37:4e:cf:f7:72:
         f4:a2:44:6e:6d:4b:8b:51:d2:ca:0d:8c:16:c3:89:dc:39:1b:
         51:85:2e:bd:e2:00:31:2d:4a:f9:8c:f7:bb:8a:9d:96:bb:8f:
         3c:41:8b:67:1b:62:49:9a:9b:b5:c8:dd:aa:f1:bf:97:5a:7b:
         f2:ca:ba:e9:03:83:ac:48:53:17:85:1f:6c:c2:1c:fc:16:0e:
         ff:d0:3b:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:50:22 2026 by rpki-client