Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3675053/6984D66E745B11F1B41B61B7CE1D38B0/lY7E7TST-AUYn0loFwDHngiOfrI.mft
File:                     lY7E7TST-AUYn0loFwDHngiOfrI.mft (raw, json)
Hash identifier:          LH3kX/0vNYLmP2kNeFsm1xB14fscVbyG1fyu49TxXuQ=
Subject key identifier:   15:B6:33:84:F0:BC:32:01:39:34:5C:31:0A:79:0E:45:48:F6:EF:10
Authority key identifier: 95:8E:C4:ED:34:93:F8:05:18:9F:49:68:17:00:C7:9E:08:8E:7E:B2
Certificate issuer:       /CN=F3675053AF/serialNumber=958EC4ED3493F805189F49681700C79E088E7EB2
Certificate serial:       21
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/lY7E7TST-AUYn0loFwDHngiOfrI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3675053/6984D66E745B11F1B41B61B7CE1D38B0/lY7E7TST-AUYn0loFwDHngiOfrI.mft
Manifest number:          1F
Signing time:             Tue 28 Jul 2026 05:44:43 +0000
Manifest this update:     Tue 28 Jul 2026 05:44:42 +0000
Manifest next update:     Thu 30 Jul 2026 05:44:42 +0000
Files and hashes:         1: lY7E7TST-AUYn0loFwDHngiOfrI.crl (hash: aLZNf9v1VIX6r6zJTYuz9QCCR6/gJqcNYH8eQ+tLfjg=)
                          2: 4FE947B8748211F1BEF1D21ACF1D38B0.roa (hash: gMf5DUZWS8LRzzUKIgiaI5m52/YhBJXqXPqfDQ4cQck=)
                          3: 8D2A260C748111F19133C316CF1D38B0.roa (hash: E5OkO0hC2p5sav8EOOxzrRj7hCtcXtLqUMdK/zTMcsQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3675053/6984D66E745B11F1B41B61B7CE1D38B0/lY7E7TST-AUYn0loFwDHngiOfrI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3675053/6984D66E745B11F1B41B61B7CE1D38B0/lY7E7TST-AUYn0loFwDHngiOfrI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/lY7E7TST-AUYn0loFwDHngiOfrI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 30 Jul 2026 05:44:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 33 (0x21)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3675053AF, serialNumber=958EC4ED3493F805189F49681700C79E088E7EB2
        Validity
            Not Before: Jul 28 05:44:42 2026 GMT
            Not After : Jul 30 05:44:42 2026 GMT
        Subject: CN=6a6841cb-90e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:d7:86:85:68:9c:8a:30:08:84:3a:57:75:da:
                    fa:bf:c1:1e:88:8e:5d:c6:5f:ed:42:b3:49:91:90:
                    37:ab:c4:29:26:ed:98:29:ad:0c:75:16:ad:f8:2d:
                    3d:8c:6c:b6:86:5c:f8:e4:1f:dc:ca:e8:c8:6f:be:
                    77:c4:bd:13:70:42:50:53:e3:38:b0:ea:fe:ee:20:
                    fa:db:bd:d6:f3:8b:21:9a:c6:7a:95:62:cd:b3:c5:
                    fb:17:2d:df:30:b2:82:30:03:8d:ca:c7:c2:63:05:
                    24:97:ec:8f:77:a2:81:f3:a1:7b:53:01:86:e7:03:
                    f0:62:c0:29:0f:c6:c1:84:10:4b:16:99:4e:4d:0e:
                    15:e4:1e:10:e0:8f:df:03:a4:c1:15:35:fb:d9:a7:
                    03:c9:d2:4d:ca:9c:c5:13:b5:cc:f9:62:c2:8a:a7:
                    56:a5:d7:1c:a7:09:e1:05:7e:4e:b7:d6:7b:b2:a9:
                    27:96:0c:0e:e5:cd:aa:bd:b6:12:0e:db:f4:bc:1d:
                    df:9d:f7:2d:44:5d:5f:4e:63:05:dd:56:5f:19:d7:
                    b1:e7:a7:b2:00:9d:cc:14:56:c9:f5:b6:f0:a8:ed:
                    95:09:98:56:04:3d:fb:ea:e9:78:46:81:ed:13:54:
                    35:6c:81:c8:9d:2d:ad:64:89:e4:a7:60:ba:59:97:
                    a6:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:B6:33:84:F0:BC:32:01:39:34:5C:31:0A:79:0E:45:48:F6:EF:10
            X509v3 Authority Key Identifier:
                keyid:95:8E:C4:ED:34:93:F8:05:18:9F:49:68:17:00:C7:9E:08:8E:7E:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3675053/6984D66E745B11F1B41B61B7CE1D38B0/lY7E7TST-AUYn0loFwDHngiOfrI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lY7E7TST-AUYn0loFwDHngiOfrI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3675053/6984D66E745B11F1B41B61B7CE1D38B0/lY7E7TST-AUYn0loFwDHngiOfrI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:6c:a4:e8:6b:2c:d5:64:64:43:a9:fc:46:d0:c8:3b:9a:b4:
         11:3d:ce:65:54:2f:6b:48:26:be:ce:a2:fd:16:20:66:4a:1f:
         52:6e:97:c8:92:92:19:31:60:97:e6:5e:7b:a5:a6:a5:5d:61:
         06:6d:ff:d6:7c:f6:cb:7c:cd:d8:f6:d8:ab:36:5e:e4:1f:bb:
         e3:53:cd:c8:52:53:51:c7:dc:0e:47:86:75:83:bf:dc:16:49:
         b1:12:a2:e9:bc:14:62:60:93:f4:1b:6b:9e:02:bc:70:5c:e9:
         79:5b:51:2a:cd:a9:0d:df:1d:a0:37:3d:a9:97:c6:57:ef:fc:
         ec:eb:55:f5:b5:e3:fa:f9:c3:37:86:24:e5:be:fc:18:e8:9a:
         9f:d3:39:dc:c7:b5:55:c9:d4:80:34:5f:ee:2e:63:a8:be:90:
         57:ab:e8:a2:e1:cc:a0:03:64:ac:aa:b8:8a:e9:7a:bb:68:c7:
         7a:a4:f4:28:15:17:0c:da:79:f1:78:9b:c0:98:48:c8:0d:3f:
         87:f8:16:44:8d:a7:87:3a:47:57:a1:0c:76:de:5d:3e:4e:a2:
         9f:c1:f3:d9:d1:cc:d5:55:94:33:7c:55:30:38:ab:37:00:ad:
         5b:d9:01:c9:19:5a:a4:cb:e3:97:0a:cb:99:c3:32:76:44:b5:
         d2:11:7c:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:04:45 2026 by rpki-client