Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369C49A/6FB80BE2015C11EFB3D61AFB007001B1/Ks_GgYhAWsVEUFKRxY5H-F4rMn0.mft
File:                     Ks_GgYhAWsVEUFKRxY5H-F4rMn0.mft (raw, json)
Hash identifier:          fpWchLbGispz8iAaGWpDfY85SZqALzzn1lghhYsH5Eo=
Subject key identifier:   73:C1:A9:7F:F6:88:4B:B3:51:B9:5A:DB:B2:8E:63:6B:18:71:6E:0A
Authority key identifier: 2A:CF:C6:81:88:40:5A:C5:44:50:52:91:C5:8E:47:F8:5E:2B:32:7D
Certificate issuer:       /CN=F369C49AAF/serialNumber=2ACFC68188405AC544505291C58E47F85E2B327D
Certificate serial:       01EA
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Ks_GgYhAWsVEUFKRxY5H-F4rMn0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369C49A/6FB80BE2015C11EFB3D61AFB007001B1/Ks_GgYhAWsVEUFKRxY5H-F4rMn0.mft
Manifest number:          01E9
Signing time:             Mon 11 Aug 2025 04:38:54 +0000
Manifest this update:     Mon 11 Aug 2025 04:38:53 +0000
Manifest next update:     Wed 13 Aug 2025 04:38:53 +0000
Files and hashes:         1: Ks_GgYhAWsVEUFKRxY5H-F4rMn0.crl (hash: b6oDoA3FZ0MJ09c03Uig4s6yku5FFDvSoXbiq9E3iik=)
                          2: 3F101946015F11EFB16E3011017001B1.roa (hash: Xh6nt99XUHYlPadPzPRYk3ee0GvJbKhlgYL2g7hGR5Q=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369C49A/6FB80BE2015C11EFB3D61AFB007001B1/Ks_GgYhAWsVEUFKRxY5H-F4rMn0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369C49A/6FB80BE2015C11EFB3D61AFB007001B1/Ks_GgYhAWsVEUFKRxY5H-F4rMn0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Ks_GgYhAWsVEUFKRxY5H-F4rMn0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 13 Aug 2025 00:06:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 490 (0x1ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369C49AAF, serialNumber=2ACFC68188405AC544505291C58E47F85E2B327D
        Validity
            Not Before: Aug 11 04:38:53 2025 GMT
            Not After : Aug 13 04:38:53 2025 GMT
        Subject: CN=689973de-c6dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ab:6e:fd:42:1d:50:58:a5:53:4f:52:55:d9:
                    5b:0e:f7:e8:96:9a:6a:93:95:4c:89:1d:ec:61:a2:
                    ec:b5:d4:e6:93:ba:76:c4:af:db:41:d5:5b:6f:d4:
                    4e:33:b1:f3:e8:e4:e4:3a:a5:1c:47:b9:7c:fb:0f:
                    f9:76:6f:17:82:26:11:14:c6:84:c1:6f:84:c3:f9:
                    4e:81:c8:f8:08:7a:a5:1d:98:14:85:08:6a:aa:5e:
                    3f:a8:dd:9e:54:86:29:cc:72:ea:da:d6:ff:10:e1:
                    97:2e:72:46:76:f7:ab:9a:43:18:2d:f6:c8:ce:18:
                    d4:2b:5e:39:0a:e0:f2:d5:b9:84:15:c2:79:65:20:
                    21:75:23:02:78:03:40:30:ad:44:50:53:1a:97:ff:
                    9b:02:cf:cc:18:7d:da:02:ba:fe:f6:6e:c6:fb:1d:
                    bb:9d:8a:f6:d9:a2:bb:3b:df:31:1a:65:12:4b:47:
                    f4:bc:60:1a:cd:73:29:47:70:80:38:9d:41:fb:5d:
                    54:05:4e:8a:08:fc:04:f1:27:2f:4b:af:da:35:42:
                    40:03:97:69:5e:a2:e0:f2:70:25:8b:ee:29:a4:2f:
                    65:e6:88:38:33:6f:14:93:27:f8:ee:c9:10:34:a7:
                    98:06:ab:4b:13:83:2c:c8:62:b6:0f:e0:95:a3:79:
                    db:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:C1:A9:7F:F6:88:4B:B3:51:B9:5A:DB:B2:8E:63:6B:18:71:6E:0A
            X509v3 Authority Key Identifier:
                keyid:2A:CF:C6:81:88:40:5A:C5:44:50:52:91:C5:8E:47:F8:5E:2B:32:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369C49A/6FB80BE2015C11EFB3D61AFB007001B1/Ks_GgYhAWsVEUFKRxY5H-F4rMn0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Ks_GgYhAWsVEUFKRxY5H-F4rMn0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369C49A/6FB80BE2015C11EFB3D61AFB007001B1/Ks_GgYhAWsVEUFKRxY5H-F4rMn0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:0e:84:d3:cf:63:a8:bd:8c:07:4d:8c:25:ee:69:32:09:c5:
         f1:d6:d9:e7:c8:1d:59:99:3a:4b:79:8d:0c:bd:41:1c:82:1e:
         a3:fa:eb:17:31:47:95:12:20:58:3d:c8:9c:5c:a7:96:37:f5:
         3d:53:19:76:48:26:dd:98:10:cf:fe:96:76:7a:b4:9b:7c:0d:
         12:2c:2c:df:8c:c7:3d:0a:50:74:1e:d0:4d:2e:92:0a:8b:4a:
         29:89:6c:c0:ea:66:a1:64:69:38:73:13:0b:f4:0e:8c:bb:7d:
         26:85:98:3a:64:95:e1:97:8f:5b:81:97:a5:b2:1e:46:a3:63:
         ea:bc:d0:3b:c7:67:23:25:09:5f:e4:19:54:c4:45:97:26:4e:
         cb:5a:3d:66:c9:29:0e:d2:c3:52:21:78:ad:17:58:7f:d4:7f:
         f9:7c:18:af:5f:41:e7:f3:c5:77:f9:21:62:10:84:d0:36:14:
         46:fd:38:8b:ec:ab:a9:0d:fe:aa:68:bd:54:9a:d1:fe:95:93:
         10:d1:14:55:63:80:7e:7b:14:98:ee:5c:d1:65:e6:78:6f:9a:
         78:71:ff:c6:f1:c4:c4:ed:27:07:bc:0c:12:10:ea:34:c6:62:
         05:a1:98:db:a8:96:6d:2e:d8:04:7f:f5:bf:41:7b:6a:1b:7d:
         6d:12:31:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 10:31:12 2025 by rpki-client