Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36B49FA/8E972ECC1C1C11E699EA450CF8AEA228/KcDd4kMF8g5OWtC7_cAP8XSMpmU.mft
File:                     KcDd4kMF8g5OWtC7_cAP8XSMpmU.mft (raw, json)
Hash identifier:          MmVRAVjswiOE2FSouxVJP+QYRHTtKYLB7lwC0BTm3eo=
Subject key identifier:   EB:8D:AD:AF:78:08:60:4F:B5:C0:56:97:EB:0F:AC:8E:62:0B:F6:37
Authority key identifier: 29:C0:DD:E2:43:05:F2:0E:4E:5A:D0:BB:FD:C0:0F:F1:74:8C:A6:65
Certificate issuer:       /CN=F36B49FARI/serialNumber=29C0DDE24305F20E4E5AD0BBFDC00FF1748CA665
Certificate serial:       0F12
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/KcDd4kMF8g5OWtC7_cAP8XSMpmU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/8E972ECC1C1C11E699EA450CF8AEA228/KcDd4kMF8g5OWtC7_cAP8XSMpmU.mft
Manifest number:          0F0F
Signing time:             Tue 22 Sep 2026 01:02:14 +0000
Manifest this update:     Tue 22 Sep 2026 01:02:11 +0000
Manifest next update:     Thu 24 Sep 2026 01:02:11 +0000
Files and hashes:         1: KcDd4kMF8g5OWtC7_cAP8XSMpmU.crl (hash: 9jZOj9lK+2IHBK2u5XvL4u45HYIfvMi0m5CDajK8du8=)
                          2: EA4F7EFAD9A811F08C56B58CDAE4EC9C.roa (hash: KJfS72R5iuz5xs0eftrag9nUHdu8fHWjhJvFlKIOLa0=)
                          3: 2A59319ED9A911F084AC988EDAE4EC9C.roa (hash: ZE/AMuFDnqEMdF+m9bTrDEG8cxJJ5piRwX5injKhwic=)
                          4: 099F7328D9A911F096B18E8EDAE4EC9C.roa (hash: vKz4MwaF+U/JBZIu/j/X4SY3DZu7/0WQLVi3O6PdX+c=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/8E972ECC1C1C11E699EA450CF8AEA228/KcDd4kMF8g5OWtC7_cAP8XSMpmU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/8E972ECC1C1C11E699EA450CF8AEA228/KcDd4kMF8g5OWtC7_cAP8XSMpmU.mft
                          rsync://rpki.afrinic.net/repository/ripe/KcDd4kMF8g5OWtC7_cAP8XSMpmU.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:45:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3858 (0xf12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B49FARI, serialNumber=29C0DDE24305F20E4E5AD0BBFDC00FF1748CA665
        Validity
            Not Before: Sep 22 01:02:11 2026 GMT
            Not After : Sep 24 01:02:11 2026 GMT
        Subject: CN=6ab1d396-a5e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:6e:2a:c4:39:41:b4:2b:07:0a:78:e8:ea:c6:
                    7b:07:b8:14:79:e5:a8:52:bc:ac:70:43:62:ac:af:
                    7b:50:70:c0:b5:e5:d4:28:62:db:5a:64:e7:d3:48:
                    76:59:f2:1d:07:59:a7:a5:49:03:9d:af:ea:cf:02:
                    16:a3:1f:c4:5f:10:32:66:09:71:c3:50:0e:48:43:
                    8a:c3:81:6f:ed:57:e0:75:e7:94:c8:bb:c3:8b:3f:
                    bc:48:27:e0:05:aa:a3:58:7c:e8:1a:60:d0:fd:d6:
                    ba:2b:dc:26:38:83:68:e6:76:3e:f9:b4:d5:07:6a:
                    2e:00:ab:7e:68:1f:28:1c:ab:b0:7f:de:6e:11:57:
                    b9:52:20:86:b2:62:d1:2c:22:0c:7a:0d:70:99:3c:
                    e9:d8:42:8f:54:5c:85:da:df:aa:f1:02:82:fe:f0:
                    0f:f6:bc:a6:cf:c2:4f:97:94:d9:27:04:5f:ef:3a:
                    36:1c:f0:72:4c:b5:f8:b4:3f:13:d5:3c:df:0a:ed:
                    2e:da:aa:a8:92:28:a9:bb:9c:59:c6:33:4e:da:21:
                    22:fc:df:d5:b0:88:e9:1b:57:9a:a1:99:57:28:88:
                    be:68:43:57:dc:0a:cb:60:d8:2a:3f:0d:2c:85:f0:
                    5d:25:38:1f:3c:c4:08:fb:19:75:f8:68:10:94:ff:
                    86:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:8D:AD:AF:78:08:60:4F:B5:C0:56:97:EB:0F:AC:8E:62:0B:F6:37
            X509v3 Authority Key Identifier:
                keyid:29:C0:DD:E2:43:05:F2:0E:4E:5A:D0:BB:FD:C0:0F:F1:74:8C:A6:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/8E972ECC1C1C11E699EA450CF8AEA228/KcDd4kMF8g5OWtC7_cAP8XSMpmU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/KcDd4kMF8g5OWtC7_cAP8XSMpmU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/8E972ECC1C1C11E699EA450CF8AEA228/KcDd4kMF8g5OWtC7_cAP8XSMpmU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:73:d0:59:ca:0b:d7:f3:53:85:6b:6b:c6:6f:fb:78:61:8d:
         d0:ce:22:c6:26:b5:12:e1:c6:d5:9a:0d:63:ef:bc:94:de:6c:
         8d:02:cd:6d:77:8d:e4:cf:bf:4a:d5:17:4f:2c:67:fe:e6:f2:
         35:9c:c3:60:17:8c:42:4c:92:53:57:fa:d2:5d:f4:45:8f:cb:
         bb:f6:93:b0:91:ba:66:0a:1d:a1:ab:b9:7b:cd:e0:25:5b:a8:
         69:14:8f:b4:47:eb:79:c0:65:bc:91:38:ce:34:f4:11:88:12:
         28:1c:d8:bc:ce:fa:04:c9:47:ed:21:d5:93:51:c5:07:cc:4e:
         d8:01:38:f3:de:7f:b9:5e:8c:c0:1e:84:83:ec:0b:85:94:c5:
         64:2c:07:33:47:c9:82:9d:ad:86:ef:a1:6c:b5:cd:af:13:43:
         d0:ea:20:f3:19:c0:98:80:cb:7a:10:32:d5:c7:4e:c3:1e:5f:
         80:b0:eb:e8:c3:70:cb:28:c6:0a:82:2b:e4:2a:5b:53:34:14:
         0b:41:fc:0f:87:23:21:2f:bd:60:72:46:8d:5c:a2:71:b1:f6:
         20:8d:4f:f2:ff:1d:28:c9:4f:dc:4e:73:82:89:03:e5:27:8c:
         7d:30:b8:e4:1e:db:1a:34:6f:c8:7c:19:47:60:bc:90:d1:a7:
         bf:c7:b0:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----