Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A6EA0/32854CA2D0F511F08D6CBD84DAE4EC9C/JLpRXiIce3jm_t013ct_c3pPMiE.mft
File:                     JLpRXiIce3jm_t013ct_c3pPMiE.mft (raw, json)
Hash identifier:          t3gtDg0UoWXbvNY2ojBB2AAUKnJP4BhwDsrKlr9HCaU=
Subject key identifier:   25:DC:36:EE:18:BD:77:F5:48:C1:8B:4A:D9:44:9A:51:87:CC:56:B6
Authority key identifier: 24:BA:51:5E:22:1C:7B:78:E6:FE:DD:35:DD:CB:7F:73:7A:4F:32:21
Certificate issuer:       /CN=F36A6EA0AR/serialNumber=24BA515E221C7B78E6FEDD35DDCB7F737A4F3221
Certificate serial:       F2
Authority info access:    rsync://rpki.afrinic.net/repository/arin/JLpRXiIce3jm_t013ct_c3pPMiE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A6EA0/32854CA2D0F511F08D6CBD84DAE4EC9C/JLpRXiIce3jm_t013ct_c3pPMiE.mft
Manifest number:          F1
Signing time:             Tue 28 Jul 2026 05:18:01 +0000
Manifest this update:     Tue 28 Jul 2026 05:18:00 +0000
Manifest next update:     Thu 30 Jul 2026 05:18:00 +0000
Files and hashes:         1: JLpRXiIce3jm_t013ct_c3pPMiE.crl (hash: a/OnIs6QZ6fcHC5C1WfUwf39iybvWeqNr4IEyHwWcM4=)
                          2: 60AB4C7CD34C11F0BCAFF7AFDAE4EC9C.roa (hash: uLF46C2w7GxR+RjRekTp0NOCaiBr/IY0Xs0woPFGw7Y=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A6EA0/32854CA2D0F511F08D6CBD84DAE4EC9C/JLpRXiIce3jm_t013ct_c3pPMiE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A6EA0/32854CA2D0F511F08D6CBD84DAE4EC9C/JLpRXiIce3jm_t013ct_c3pPMiE.mft
                          rsync://rpki.afrinic.net/repository/arin/JLpRXiIce3jm_t013ct_c3pPMiE.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 30 Jul 2026 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 242 (0xf2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A6EA0AR, serialNumber=24BA515E221C7B78E6FEDD35DDCB7F737A4F3221
        Validity
            Not Before: Jul 28 05:18:00 2026 GMT
            Not After : Jul 30 05:18:00 2026 GMT
        Subject: CN=6a683b89-1dff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:a6:36:29:75:e4:fa:66:c1:60:99:8c:ed:60:
                    02:11:36:9f:b9:a4:c6:5f:69:67:c8:51:87:8f:4f:
                    78:63:22:75:20:97:21:b9:e8:f8:05:7e:56:79:f5:
                    a4:09:34:d6:9e:74:2e:8c:25:a4:25:c7:f8:63:91:
                    fe:94:92:c2:3a:90:b9:59:6e:26:92:78:99:36:51:
                    67:be:14:ae:92:ab:57:c3:03:6d:05:76:a6:a4:c3:
                    ee:0f:03:e1:be:43:89:e7:82:3f:78:f4:98:a3:09:
                    70:f7:0f:3e:0e:19:cf:78:ea:0a:97:db:2d:cc:24:
                    23:65:0f:a1:9f:55:30:f8:a0:96:b8:de:58:24:86:
                    e2:5c:4a:36:73:f4:5c:4d:14:76:55:4f:52:f5:9d:
                    d0:f0:b5:ba:0a:a8:bf:b6:e1:21:1b:a5:7d:b7:aa:
                    31:c2:0b:f2:f8:e2:c6:e5:23:de:9b:18:73:a0:48:
                    4c:2a:34:75:32:78:9d:86:c1:3c:4d:c0:ef:e5:75:
                    7a:11:72:12:76:f1:74:e5:8b:dd:6a:11:06:ab:38:
                    d0:e7:63:35:ed:0d:c2:b5:29:e0:76:07:90:b1:bd:
                    9e:20:c7:a9:9b:1c:31:ca:07:c6:17:f7:49:6a:be:
                    38:f9:ff:34:3f:0c:73:b4:dd:24:00:f7:da:b7:94:
                    be:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:DC:36:EE:18:BD:77:F5:48:C1:8B:4A:D9:44:9A:51:87:CC:56:B6
            X509v3 Authority Key Identifier:
                keyid:24:BA:51:5E:22:1C:7B:78:E6:FE:DD:35:DD:CB:7F:73:7A:4F:32:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A6EA0/32854CA2D0F511F08D6CBD84DAE4EC9C/JLpRXiIce3jm_t013ct_c3pPMiE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/JLpRXiIce3jm_t013ct_c3pPMiE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A6EA0/32854CA2D0F511F08D6CBD84DAE4EC9C/JLpRXiIce3jm_t013ct_c3pPMiE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:7d:bf:7f:20:04:ae:f5:cf:f8:a1:4c:0f:fb:d5:47:d2:8d:
         f4:bb:46:f8:31:10:83:4f:ec:93:c1:7f:87:17:7e:8a:ec:b8:
         6d:f8:f5:16:be:2c:52:3a:6b:bc:4b:16:a7:27:09:3d:04:14:
         9f:56:3c:eb:ad:ea:b0:48:a6:ba:a0:a1:d8:ea:af:3b:4d:c7:
         af:c1:9b:c6:68:d2:15:75:17:a0:b7:3a:62:89:db:ea:2b:c3:
         fc:72:73:c8:be:7c:be:6a:5e:0b:be:3e:94:7b:1f:a7:81:69:
         63:7a:9e:22:d6:8e:fa:ad:8e:31:a4:a2:3c:56:9b:21:b3:fd:
         f4:d3:e6:81:a8:2d:dc:30:c9:ce:49:c9:72:cd:82:84:82:52:
         8e:f5:20:91:7d:ac:6e:fc:39:fe:a1:7d:1e:3e:75:07:7f:8b:
         6b:6d:e6:50:f1:64:c1:b9:4f:37:1e:e6:ee:d5:76:c7:fd:5c:
         4c:64:40:7d:a4:96:64:3d:11:ff:64:e7:f4:1f:9b:c1:d9:27:
         90:7d:6f:60:4a:f7:ab:cd:ec:0d:bb:e8:ef:ba:cb:4e:ff:12:
         f4:fc:b4:44:78:f6:7a:73:d7:84:f1:57:22:28:b5:68:1d:f3:
         a5:b7:7c:8f:b6:4e:7d:6b:cf:99:7b:c9:f8:15:21:f5:a1:43:
         dd:22:71:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:35:14 2026 by rpki-client