Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367F26D/3F4041FC70B911E9A7F25D3FF8AEA228/nYezEXqhvXgot91GTXMHa66NzJY.mft
File:                     nYezEXqhvXgot91GTXMHa66NzJY.mft (raw, json)
Hash identifier:          a0jBAMvv7Yu8jw1eAcWfFSFKkgLlz/6uiqhPT5vJuhk=
Subject key identifier:   DE:35:B2:C4:64:63:C3:33:BC:5A:FF:E6:0E:26:E6:F0:BD:21:D9:FA
Authority key identifier: 9D:87:B3:11:7A:A1:BD:78:28:B7:DD:46:4D:73:07:6B:AE:8D:CC:96
Certificate issuer:       /CN=F367F26DRI/serialNumber=9D87B3117AA1BD7828B7DD464D73076BAE8DCC96
Certificate serial:       0A9E
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/nYezEXqhvXgot91GTXMHa66NzJY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367F26D/3F4041FC70B911E9A7F25D3FF8AEA228/nYezEXqhvXgot91GTXMHa66NzJY.mft
Manifest number:          0A99
Signing time:             Wed 29 Jul 2026 01:19:31 +0000
Manifest this update:     Wed 29 Jul 2026 01:19:31 +0000
Manifest next update:     Fri 31 Jul 2026 01:19:31 +0000
Files and hashes:         1: nYezEXqhvXgot91GTXMHa66NzJY.crl (hash: J/AFNvvyT/VvgQ7UbDaYYqfghV/n9xu6ogmaCK24sZE=)
                          2: 2080E9B0188C11F1AB23ECE6DAE4EC9C.roa (hash: 7+2h/hAR0ZH797eWYPIRfzQR4D387dc0Npd3o5pHyjg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367F26D/3F4041FC70B911E9A7F25D3FF8AEA228/nYezEXqhvXgot91GTXMHa66NzJY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367F26D/3F4041FC70B911E9A7F25D3FF8AEA228/nYezEXqhvXgot91GTXMHa66NzJY.mft
                          rsync://rpki.afrinic.net/repository/ripe/nYezEXqhvXgot91GTXMHa66NzJY.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 31 Jul 2026 00:45:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2718 (0xa9e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367F26DRI, serialNumber=9D87B3117AA1BD7828B7DD464D73076BAE8DCC96
        Validity
            Not Before: Jul 29 01:19:31 2026 GMT
            Not After : Jul 31 01:19:31 2026 GMT
        Subject: CN=6a695523-d7ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:91:22:4b:67:c0:21:d8:d9:fa:94:75:22:ab:
                    da:96:8c:51:9b:b7:85:a1:c1:d9:31:5c:0d:7d:7d:
                    40:ce:af:38:8c:8c:0a:43:b9:75:da:19:ce:12:22:
                    bf:25:94:7b:b5:ab:8d:38:34:3e:d9:c9:15:e1:cc:
                    bc:80:c7:18:ab:16:42:23:bb:27:ba:f8:8d:b5:ce:
                    13:bd:2a:32:75:2b:52:03:8c:31:5a:88:60:f2:ef:
                    e6:13:ca:77:22:03:b3:fe:dc:61:4a:1e:a3:dc:f6:
                    72:25:20:44:5a:f0:db:03:07:d7:b9:dd:f2:d3:01:
                    5b:9a:b0:61:4f:0c:ee:f5:71:06:5d:5f:d1:db:d4:
                    94:dd:74:03:84:35:6d:94:27:ea:36:9e:c6:6e:23:
                    79:a7:43:12:e1:5e:16:5a:28:68:25:97:cf:24:ec:
                    1f:36:de:f8:f9:de:56:26:5c:9c:81:97:9c:ea:99:
                    08:fa:af:2b:f0:df:6f:c8:a4:18:de:8b:7b:d1:c4:
                    05:51:a4:57:da:97:eb:bc:47:e0:ef:6a:b1:e7:2e:
                    25:de:0c:b7:bb:fd:47:5b:74:31:81:1e:8c:7f:e7:
                    9b:13:f4:45:6b:a6:ad:63:1e:72:4f:c0:9e:50:d7:
                    f8:ec:b6:f3:23:94:12:ac:4e:ca:71:5e:e4:c9:0c:
                    98:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:35:B2:C4:64:63:C3:33:BC:5A:FF:E6:0E:26:E6:F0:BD:21:D9:FA
            X509v3 Authority Key Identifier:
                keyid:9D:87:B3:11:7A:A1:BD:78:28:B7:DD:46:4D:73:07:6B:AE:8D:CC:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367F26D/3F4041FC70B911E9A7F25D3FF8AEA228/nYezEXqhvXgot91GTXMHa66NzJY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/nYezEXqhvXgot91GTXMHa66NzJY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367F26D/3F4041FC70B911E9A7F25D3FF8AEA228/nYezEXqhvXgot91GTXMHa66NzJY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:5c:aa:2f:d6:e6:6e:0d:d5:50:a4:02:49:31:7d:c7:19:c2:
         e1:c6:23:0d:a5:89:7f:4a:20:e3:38:6c:8d:a3:43:07:03:49:
         20:40:b1:05:b7:be:37:e4:6f:96:a4:b5:b8:ff:d8:e2:d3:21:
         0e:df:cf:b3:5f:bd:c0:d7:49:b4:b3:9c:1b:16:93:41:ff:c9:
         0d:32:d9:cf:8f:d8:c9:3a:97:76:7c:06:0b:05:20:a8:ff:5e:
         79:93:fa:81:72:f5:fc:33:59:8b:c3:ed:21:6e:62:f1:97:ac:
         94:d7:2f:2a:37:ee:38:5f:28:5e:72:13:8a:cc:c7:26:e2:5e:
         1d:6b:27:a5:b7:42:2c:aa:5d:e4:d2:01:6f:93:87:24:41:6b:
         7d:ef:a8:9d:a1:ed:e4:67:4f:c6:4e:26:0e:39:1f:95:40:d9:
         4d:66:81:d0:66:6f:32:48:72:aa:d4:bc:b9:fd:72:20:5c:c2:
         75:4c:26:0f:4c:41:cc:7b:1a:9e:af:5f:fe:1c:49:e3:40:70:
         59:37:6b:6f:83:31:98:5f:a2:eb:bf:5b:f7:db:9e:b7:a1:c0:
         61:6d:53:73:f7:87:45:6a:a3:b3:c5:28:6c:69:62:cd:0f:36:
         c9:3b:f9:fc:14:d8:e1:1d:fb:02:97:fc:3e:25:66:32:bb:5b:
         29:25:fc:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:01:03 2026 by rpki-client