Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A31C5/591E3E86AD7F11EFAF967597762E951A/jho3RHX7X1BwyGbGDdVeiurPcXM.mft
File:                     jho3RHX7X1BwyGbGDdVeiurPcXM.mft (raw, json)
Hash identifier:          WZNr2sqod2qVrU6NhoBXVl/yai6pd+MDZYbDd2T0ykQ=
Subject key identifier:   51:C7:3F:02:2A:4D:D9:13:FF:F0:2A:A9:3D:C6:BA:67:12:D1:2E:DF
Authority key identifier: 8E:1A:37:44:75:FB:5F:50:70:C8:66:C6:0D:D5:5E:8A:EA:CF:71:73
Certificate issuer:       /CN=F36A31C5AR/serialNumber=8E1A374475FB5F5070C866C60DD55E8AEACF7173
Certificate serial:       026E
Authority info access:    rsync://rpki.afrinic.net/repository/arin/jho3RHX7X1BwyGbGDdVeiurPcXM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A31C5/591E3E86AD7F11EFAF967597762E951A/jho3RHX7X1BwyGbGDdVeiurPcXM.mft
Manifest number:          026D
Signing time:             Wed 29 Jul 2026 04:40:13 +0000
Manifest this update:     Wed 29 Jul 2026 04:40:12 +0000
Manifest next update:     Fri 31 Jul 2026 04:40:12 +0000
Files and hashes:         1: jho3RHX7X1BwyGbGDdVeiurPcXM.crl (hash: mwNzloUT7nLciQIPLvTOdsGRvJOcuIcPWw2UwZpqd+Y=)
                          2: 77A53CFAAD8011EF8D542C9E762E951A.roa (hash: w9cTIDCHrbI8wxVcQWpv1wqBRl6yaH60seRon5+S8UE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A31C5/591E3E86AD7F11EFAF967597762E951A/jho3RHX7X1BwyGbGDdVeiurPcXM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A31C5/591E3E86AD7F11EFAF967597762E951A/jho3RHX7X1BwyGbGDdVeiurPcXM.mft
                          rsync://rpki.afrinic.net/repository/arin/jho3RHX7X1BwyGbGDdVeiurPcXM.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 31 Jul 2026 00:26:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 622 (0x26e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A31C5AR, serialNumber=8E1A374475FB5F5070C866C60DD55E8AEACF7173
        Validity
            Not Before: Jul 29 04:40:12 2026 GMT
            Not After : Jul 31 04:40:12 2026 GMT
        Subject: CN=6a69842d-679b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:38:36:79:10:27:1c:5c:79:52:fb:39:71:c2:
                    6f:06:73:6b:cf:75:5c:ff:7c:cf:45:0d:43:4d:91:
                    c2:08:de:1f:f7:e7:3f:0e:fb:5a:6e:eb:e5:f5:e9:
                    76:8a:ee:8c:62:7e:42:dd:50:2b:3a:fb:3f:f6:a4:
                    79:4a:e6:d8:28:66:c3:81:c2:75:36:6f:ab:6b:7f:
                    7c:27:c3:8a:ae:cf:5e:a8:12:64:51:fb:23:36:26:
                    8e:5e:21:bc:a4:5b:d3:30:82:44:23:d0:f8:d7:3a:
                    da:dd:1e:c5:8f:37:69:4b:0e:31:91:04:61:da:05:
                    14:57:e8:67:04:ef:4d:44:1c:83:ec:2c:bf:27:d2:
                    73:9b:77:a1:25:17:dd:b1:4b:45:a1:14:eb:9c:3e:
                    25:97:5e:8a:d1:14:55:0e:da:f3:6b:4a:a2:a7:9d:
                    24:f3:e6:79:1a:84:a8:d8:49:42:0f:0d:84:5b:68:
                    57:a1:de:fa:9f:ae:00:9a:07:35:24:d1:a1:8f:6f:
                    fa:c0:fa:e2:6d:4e:9b:d2:59:82:13:67:1d:04:41:
                    36:71:95:69:da:56:7b:46:37:89:66:9d:1f:5b:47:
                    f9:2f:2f:be:7f:68:d5:94:0e:fd:12:68:0e:96:5c:
                    5b:07:3f:5a:9a:0f:5e:0d:25:3a:ca:bd:99:6e:5a:
                    d4:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:C7:3F:02:2A:4D:D9:13:FF:F0:2A:A9:3D:C6:BA:67:12:D1:2E:DF
            X509v3 Authority Key Identifier:
                keyid:8E:1A:37:44:75:FB:5F:50:70:C8:66:C6:0D:D5:5E:8A:EA:CF:71:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A31C5/591E3E86AD7F11EFAF967597762E951A/jho3RHX7X1BwyGbGDdVeiurPcXM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/jho3RHX7X1BwyGbGDdVeiurPcXM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A31C5/591E3E86AD7F11EFAF967597762E951A/jho3RHX7X1BwyGbGDdVeiurPcXM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:e8:ac:92:37:89:10:54:dd:e9:81:94:96:6b:25:8d:cc:53:
         12:75:4c:71:25:af:5b:53:d1:16:6c:e4:09:65:11:71:20:d3:
         52:9e:a6:33:21:cf:52:1c:39:14:c3:d0:ed:07:0c:b9:2c:fd:
         66:d2:b2:a0:dd:36:2e:12:9e:c6:9b:a4:f7:2c:3a:05:a8:6a:
         ff:97:94:c6:df:54:e7:9a:99:ae:53:76:ab:47:9d:b0:13:4a:
         6c:92:f2:44:4c:55:55:ae:4b:0a:48:17:71:ae:d2:08:58:b0:
         ad:de:00:11:b9:70:b5:8c:94:4c:95:30:ac:ae:9e:36:98:ad:
         8b:18:63:34:00:8d:eb:d1:14:f2:92:18:43:32:37:14:78:23:
         dc:64:55:d7:38:3e:b2:3b:16:ed:90:78:03:4d:ee:69:91:75:
         f2:7e:47:41:98:69:71:e5:e4:84:ed:3c:1d:49:ba:86:bb:44:
         e4:56:83:2f:32:72:df:30:6f:b8:c9:59:0f:73:21:d7:34:6d:
         df:04:fa:1a:b5:fd:a1:fb:42:f7:c7:b4:01:ba:f8:57:ab:de:
         21:c0:b3:7e:e0:ac:f5:29:37:52:6b:c0:ff:7a:9d:76:9a:85:
         80:a3:9c:36:6f:33:5a:5e:44:0e:6a:c4:4e:28:0b:11:f7:5f:
         9e:2d:8f:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:35:21 2026 by rpki-client