Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3679AE6/1FE205D2FD0911F0B31E2BD7DAE4EC9C/HjBtERG9MU9g94_Cmxf7xqsItYk.mft
File:                     HjBtERG9MU9g94_Cmxf7xqsItYk.mft (raw, json)
Hash identifier:          1XwCiKSkriilc0Y3rNHr9aCgB+EWko/1uofbaKs6fbw=
Subject key identifier:   E8:25:A5:7A:79:AB:F6:CE:FB:72:17:EC:0F:99:91:6C:C6:5F:45:47
Authority key identifier: 1E:30:6D:11:11:BD:31:4F:60:F7:8F:C2:9B:17:FB:C6:AB:08:B5:89
Certificate issuer:       /CN=F3679AE6AF/serialNumber=1E306D1111BD314F60F78FC29B17FBC6AB08B589
Certificate serial:       B8
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/HjBtERG9MU9g94_Cmxf7xqsItYk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3679AE6/1FE205D2FD0911F0B31E2BD7DAE4EC9C/HjBtERG9MU9g94_Cmxf7xqsItYk.mft
Manifest number:          B7
Signing time:             Tue 28 Jul 2026 05:26:03 +0000
Manifest this update:     Tue 28 Jul 2026 05:26:02 +0000
Manifest next update:     Thu 30 Jul 2026 05:26:02 +0000
Files and hashes:         1: HjBtERG9MU9g94_Cmxf7xqsItYk.crl (hash: B873lov3Ik5Jbl1QXBPD24I5OFNGND6MydvOUX3j6Zs=)
                          2: AE231146010611F1AF8CD7E0DAE4EC9C.roa (hash: yvsopJgiAqmvk1Zehyi6+Dx0DeQD4j/R7erpIreDPxk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3679AE6/1FE205D2FD0911F0B31E2BD7DAE4EC9C/HjBtERG9MU9g94_Cmxf7xqsItYk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3679AE6/1FE205D2FD0911F0B31E2BD7DAE4EC9C/HjBtERG9MU9g94_Cmxf7xqsItYk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/HjBtERG9MU9g94_Cmxf7xqsItYk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 30 Jul 2026 05:26:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 184 (0xb8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3679AE6AF, serialNumber=1E306D1111BD314F60F78FC29B17FBC6AB08B589
        Validity
            Not Before: Jul 28 05:26:02 2026 GMT
            Not After : Jul 30 05:26:02 2026 GMT
        Subject: CN=6a683d6b-4f0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:53:7c:50:7d:0d:58:ef:28:65:a3:82:cd:a4:
                    6f:d9:dd:34:6d:fd:54:4f:0f:74:0d:d9:3f:46:f9:
                    c8:02:92:64:43:4d:26:0c:06:8b:8c:8f:ee:03:01:
                    ea:ca:f1:97:43:50:53:45:d2:c6:4a:ce:bc:cc:d6:
                    fb:8f:d4:b3:70:d9:c6:a2:a0:c3:fd:5b:0b:3a:f5:
                    43:f4:cb:b7:32:04:b1:8f:ce:df:4e:9a:6e:29:3a:
                    cb:71:e8:74:59:d7:37:82:d5:21:52:dd:5c:b4:b1:
                    e7:01:35:e2:5e:f9:3d:c6:b6:16:8d:bb:ce:8c:18:
                    59:cf:68:46:48:d7:8a:69:3e:c9:e8:8a:44:f1:ed:
                    ba:6f:2e:b5:81:c0:b1:e8:d7:8d:fb:85:40:7f:34:
                    6c:d9:42:13:e2:96:0f:48:c6:5d:29:ed:2f:94:80:
                    1a:64:86:5d:e3:82:a9:f2:71:af:fc:41:9f:14:a4:
                    88:74:8d:92:02:b4:59:76:d3:29:3a:56:0f:e9:c6:
                    77:68:b3:5c:34:03:d8:91:6e:b8:9a:10:44:28:83:
                    12:d9:af:53:7d:9d:ab:46:9c:f0:30:c9:43:bd:f2:
                    ae:d1:a9:8e:fa:7c:b3:c5:45:85:cc:c6:82:62:b9:
                    7e:6b:7b:12:42:29:f8:9a:10:a6:b1:a5:36:11:f6:
                    59:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:25:A5:7A:79:AB:F6:CE:FB:72:17:EC:0F:99:91:6C:C6:5F:45:47
            X509v3 Authority Key Identifier:
                keyid:1E:30:6D:11:11:BD:31:4F:60:F7:8F:C2:9B:17:FB:C6:AB:08:B5:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3679AE6/1FE205D2FD0911F0B31E2BD7DAE4EC9C/HjBtERG9MU9g94_Cmxf7xqsItYk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HjBtERG9MU9g94_Cmxf7xqsItYk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3679AE6/1FE205D2FD0911F0B31E2BD7DAE4EC9C/HjBtERG9MU9g94_Cmxf7xqsItYk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:24:e1:10:03:e6:be:67:b7:b5:f3:ca:6e:8b:86:e0:72:2e:
         fa:7f:e5:22:ea:8e:83:25:fb:16:68:b2:c2:d7:ce:64:6b:03:
         65:89:2a:bd:8c:5d:02:a6:41:47:2b:81:2f:be:a4:ce:21:52:
         1b:eb:5b:16:b3:1d:cd:e0:fe:e8:f7:99:31:ee:b6:04:7e:87:
         d1:5b:79:7c:de:66:ce:74:43:3c:f1:4f:57:9f:bf:66:00:43:
         d6:fa:e1:97:64:32:8e:8f:23:e4:36:26:25:ef:ca:de:92:76:
         12:85:aa:7a:f7:65:07:5e:e2:43:0e:26:ce:56:07:a9:13:64:
         ac:41:54:f7:2d:6b:bd:50:84:76:0f:97:75:82:64:a7:1c:85:
         e2:1a:e8:f6:69:40:28:13:c1:68:3e:b3:f3:4c:f0:a1:5d:f8:
         e4:c9:5c:0f:fc:61:71:3a:81:b2:03:80:60:a6:25:39:36:1e:
         fc:cb:a3:96:6f:86:e2:24:ff:8f:aa:70:41:96:90:a6:39:c0:
         02:fe:f5:7a:99:0f:5f:e6:6c:d1:3b:e7:57:0d:df:f2:99:a0:
         a3:76:b4:61:7d:eb:36:0e:eb:6e:84:a7:3a:7b:66:00:ac:d3:
         93:19:02:f4:05:e6:f7:25:1d:fa:ab:a4:3d:6e:a7:4f:3a:6a:
         63:b4:81:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:57:10 2026 by rpki-client