Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367F26D/3F4041FC70B911E9A7F25D3FF8AEA228/nYezEXqhvXgot91GTXMHa66NzJY.mft
File:                     nYezEXqhvXgot91GTXMHa66NzJY.mft (raw, json)
Hash identifier:          kNqsGkHNfKOwkqWFSUggprAKjnM+XG3Jsw5jMnntDVs=
Subject key identifier:   8E:80:FD:17:EF:81:60:F9:D7:EA:A3:68:B1:69:94:11:9C:2C:CB:0E
Authority key identifier: 9D:87:B3:11:7A:A1:BD:78:28:B7:DD:46:4D:73:07:6B:AE:8D:CC:96
Certificate issuer:       /CN=F367F26DRI/serialNumber=9D87B3117AA1BD7828B7DD464D73076BAE8DCC96
Certificate serial:       0935
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/nYezEXqhvXgot91GTXMHa66NzJY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367F26D/3F4041FC70B911E9A7F25D3FF8AEA228/nYezEXqhvXgot91GTXMHa66NzJY.mft
Manifest number:          0931
Signing time:             Mon 11 Aug 2025 01:25:13 +0000
Manifest this update:     Mon 11 Aug 2025 01:25:12 +0000
Manifest next update:     Wed 13 Aug 2025 01:25:12 +0000
Files and hashes:         1: nYezEXqhvXgot91GTXMHa66NzJY.crl (hash: CFM+QLhRY6PvwKCu6Le5/rYiInbfkt9STxHViTFnbTA=)
                          2: D327BE38980311EE8CAFD532D25BE465.roa (hash: S6gTdluMy3bxrOQWOaTfSvtXEYSyREhvKUaAZL3cXu4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367F26D/3F4041FC70B911E9A7F25D3FF8AEA228/nYezEXqhvXgot91GTXMHa66NzJY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367F26D/3F4041FC70B911E9A7F25D3FF8AEA228/nYezEXqhvXgot91GTXMHa66NzJY.mft
                          rsync://rpki.afrinic.net/repository/ripe/nYezEXqhvXgot91GTXMHa66NzJY.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 13 Aug 2025 00:45:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2357 (0x935)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367F26DRI, serialNumber=9D87B3117AA1BD7828B7DD464D73076BAE8DCC96
        Validity
            Not Before: Aug 11 01:25:12 2025 GMT
            Not After : Aug 13 01:25:12 2025 GMT
        Subject: CN=68994679-feec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:3a:56:23:54:8c:c0:af:a4:3c:e4:62:7c:e6:
                    e4:41:95:b2:47:b8:07:bb:22:b1:e0:e4:4d:33:d8:
                    ee:8f:43:de:2b:07:59:93:5c:3e:44:c5:d4:df:0c:
                    09:3e:1c:dc:2b:b0:06:11:aa:f1:33:f2:14:89:20:
                    64:51:e0:05:3f:16:c5:97:2a:30:88:a1:d8:8b:69:
                    50:89:b9:41:23:aa:78:55:79:54:b5:71:d1:ce:4b:
                    44:e8:8e:65:f0:d0:31:d8:ae:31:fc:14:bb:ff:1a:
                    00:63:fc:00:ad:26:bc:7b:25:bf:0c:20:42:d7:92:
                    e6:bf:f4:65:ef:83:88:8b:f8:27:c7:77:3e:5e:7b:
                    30:d3:c3:d8:25:44:8b:80:6e:15:e7:0e:4a:ee:6f:
                    39:52:b7:c1:89:a2:f6:d3:7b:6a:e7:6e:01:db:bd:
                    e0:fb:de:28:46:f9:82:8a:9c:b7:1e:2d:03:95:ba:
                    05:4f:77:20:b3:a7:18:8f:0d:e1:fe:59:25:98:0a:
                    58:a2:86:38:9f:28:4f:1e:ab:d8:93:09:7e:10:df:
                    d5:a3:84:ba:25:01:49:07:c9:14:7b:a0:63:2f:42:
                    ba:b2:f9:ed:43:6c:84:83:85:99:3d:1d:0f:9b:52:
                    f7:49:aa:26:16:65:94:86:4b:dd:88:0f:7a:0f:97:
                    af:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:80:FD:17:EF:81:60:F9:D7:EA:A3:68:B1:69:94:11:9C:2C:CB:0E
            X509v3 Authority Key Identifier:
                keyid:9D:87:B3:11:7A:A1:BD:78:28:B7:DD:46:4D:73:07:6B:AE:8D:CC:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367F26D/3F4041FC70B911E9A7F25D3FF8AEA228/nYezEXqhvXgot91GTXMHa66NzJY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/nYezEXqhvXgot91GTXMHa66NzJY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367F26D/3F4041FC70B911E9A7F25D3FF8AEA228/nYezEXqhvXgot91GTXMHa66NzJY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:37:06:23:79:30:95:94:d1:ae:66:a2:d6:09:9d:78:8d:29:
         11:d2:84:c1:3e:46:bb:6d:55:3a:44:5b:22:6f:36:24:bf:3c:
         ea:7f:5f:76:6a:62:82:6e:86:a9:d4:b8:c2:2f:8a:40:9a:89:
         ef:6b:5a:23:57:12:87:c1:3b:67:a7:6b:76:fd:a8:d0:54:6e:
         47:f6:70:46:40:4a:1a:bc:e7:32:78:56:9e:28:c0:01:ff:75:
         db:e2:a9:cc:26:0a:37:8c:8d:96:82:e1:b5:9c:9d:4a:2f:32:
         77:cd:19:c8:49:fd:d2:b5:ea:89:e9:af:45:ed:d6:f2:41:fa:
         7f:cf:2c:2e:b0:f6:b9:d0:0e:f9:c5:40:8b:20:1a:96:2d:e0:
         c4:92:fc:3c:ff:14:ec:d1:a6:33:de:10:b4:fb:8a:ed:ec:0e:
         9b:81:12:4a:8f:20:b7:00:ca:c8:80:58:3c:fb:2c:c7:5c:7e:
         1c:6c:ca:c0:9f:3e:cb:bc:ef:71:36:1d:d7:77:47:41:88:e7:
         0d:69:7a:f6:64:e3:f0:08:ca:d2:06:97:8f:75:c8:a3:11:7a:
         09:38:42:b7:41:63:16:c5:85:11:4d:bb:4b:0c:86:a0:16:db:
         9d:17:58:df:86:81:59:68:74:67:2f:a8:1b:79:e0:19:ff:b4:
         db:ff:af:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 10:30:41 2025 by rpki-client