Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B5EE7/ED7066526B9011F0819CC681DAE4EC9C/sOuFTcDYmjIzySVR0W0U1DjPVR8.mft
File:                     sOuFTcDYmjIzySVR0W0U1DjPVR8.mft (raw, json)
Hash identifier:          4cvQxXko2z+AEuXvB8iza5ySHAWOKLqzY99D0/BrmPQ=
Subject key identifier:   48:61:89:FB:27:3A:DE:5D:8F:81:98:03:C8:49:39:39:6B:A1:DD:C4
Authority key identifier: B0:EB:85:4D:C0:D8:9A:32:33:C9:25:51:D1:6D:14:D4:38:CF:55:1F
Certificate issuer:       /CN=F36B5EE7RI/serialNumber=B0EB854DC0D89A3233C92551D16D14D438CF551F
Certificate serial:       69
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/sOuFTcDYmjIzySVR0W0U1DjPVR8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B5EE7/ED7066526B9011F0819CC681DAE4EC9C/sOuFTcDYmjIzySVR0W0U1DjPVR8.mft
Manifest number:          68
Signing time:             Wed 05 Nov 2025 05:36:16 +0000
Manifest this update:     Wed 05 Nov 2025 05:36:15 +0000
Manifest next update:     Fri 07 Nov 2025 05:36:15 +0000
Files and hashes:         1: sOuFTcDYmjIzySVR0W0U1DjPVR8.crl (hash: vDM3ke4W1n4K4d/WKpohHVzQO3sttjK7knDmqRd6Iqg=)
                          2: 2CED30A26B9211F0B55B648ADAE4EC9C.roa (hash: 8FK7+AonagW3DFNpcFJhHjfYGIQ/QIt42K+ERVsqWds=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B5EE7/ED7066526B9011F0819CC681DAE4EC9C/sOuFTcDYmjIzySVR0W0U1DjPVR8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B5EE7/ED7066526B9011F0819CC681DAE4EC9C/sOuFTcDYmjIzySVR0W0U1DjPVR8.mft
                          rsync://rpki.afrinic.net/repository/ripe/sOuFTcDYmjIzySVR0W0U1DjPVR8.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 07 Nov 2025 00:45:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 105 (0x69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B5EE7RI, serialNumber=B0EB854DC0D89A3233C92551D16D14D438CF551F
        Validity
            Not Before: Nov  5 05:36:15 2025 GMT
            Not After : Nov  7 05:36:15 2025 GMT
        Subject: CN=690ae24f-fd86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:57:55:1b:09:37:82:47:79:18:71:ed:62:4e:
                    bb:77:c2:b3:70:1e:1a:d7:4d:1e:17:1b:f2:30:ce:
                    4b:40:71:5d:d2:1e:d5:c1:29:ef:19:55:4e:55:a7:
                    b8:35:0a:14:96:10:06:0a:e1:33:e2:f7:dd:6e:62:
                    71:b3:c7:d1:a4:6a:47:47:17:09:5c:24:40:aa:64:
                    5e:e4:12:bb:cc:cf:84:de:2d:21:a7:be:ba:7d:dd:
                    f4:db:bd:4f:61:39:f5:8a:df:de:b4:13:e0:95:8c:
                    6e:dc:4d:cc:2c:2d:09:0a:5f:dd:34:ab:84:b3:ee:
                    0d:e1:1f:8c:b6:9d:dd:26:3a:03:6e:5b:24:b2:31:
                    98:43:14:9e:62:f1:94:92:ff:7b:f4:e0:bb:34:fc:
                    af:60:6a:72:56:1f:c7:6f:78:ad:74:f3:f1:07:15:
                    3a:06:33:b9:ea:96:82:f6:11:af:21:e8:29:ca:43:
                    9a:94:71:b7:ba:22:c8:89:c2:7d:cb:05:e4:83:97:
                    7b:fb:b6:e5:cf:9d:99:fc:a4:36:4d:0c:b8:e2:4a:
                    55:01:12:ce:a9:e9:6e:30:d8:67:16:a6:35:eb:3b:
                    1f:ca:35:66:fb:be:67:0a:cb:db:0e:88:b1:7a:75:
                    72:37:78:e6:6b:e3:17:e1:be:59:3e:46:81:72:ef:
                    bb:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:61:89:FB:27:3A:DE:5D:8F:81:98:03:C8:49:39:39:6B:A1:DD:C4
            X509v3 Authority Key Identifier:
                keyid:B0:EB:85:4D:C0:D8:9A:32:33:C9:25:51:D1:6D:14:D4:38:CF:55:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B5EE7/ED7066526B9011F0819CC681DAE4EC9C/sOuFTcDYmjIzySVR0W0U1DjPVR8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/sOuFTcDYmjIzySVR0W0U1DjPVR8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B5EE7/ED7066526B9011F0819CC681DAE4EC9C/sOuFTcDYmjIzySVR0W0U1DjPVR8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:07:69:94:eb:bc:14:03:46:70:3a:92:ca:e0:c7:7f:24:e3:
         d7:a4:b6:a5:71:4e:ea:80:bc:6d:93:74:94:9d:53:36:f8:e6:
         40:6b:02:34:46:e4:07:3f:7a:3e:9b:60:d5:ef:ee:e0:ac:84:
         5a:1d:03:3e:78:bf:8b:10:b1:69:d8:a1:8f:c0:c9:7b:cf:87:
         fd:8b:43:7f:1b:0b:95:89:43:fb:ad:22:9c:12:a0:18:41:ae:
         c4:8c:24:3d:d9:62:3f:b2:5c:95:95:00:5d:54:91:b4:70:b7:
         d5:a8:8a:15:57:f7:07:b9:8d:80:20:82:87:2f:47:1d:4e:e7:
         ad:f9:3b:f0:f2:af:98:e1:92:36:c2:00:5b:cb:f2:a8:43:7d:
         12:a4:23:e1:ca:54:dd:29:b3:a7:36:0d:d8:e7:93:79:f3:0b:
         df:15:9c:1d:aa:98:95:61:25:63:82:7f:b5:fe:c6:0b:ff:df:
         e2:73:ac:96:3a:74:98:51:de:73:5a:4a:df:44:44:7d:81:d5:
         ca:41:82:de:c5:2c:61:aa:ea:9d:60:82:72:1b:3c:97:8a:c8:
         5d:46:cd:dd:4b:62:dd:44:0d:c1:be:95:b2:4b:e8:3b:58:48:
         15:91:8f:cd:19:c6:5d:04:e5:75:b3:2e:41:3e:12:1a:22:93:
         53:d7:01:6b
-----BEGIN CERTIFICATE-----
MIIFkjCCBHqgAwIBAgIBaTANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzZC
NUVFN1JJMTEwLwYDVQQFEyhCMEVCODU0REMwRDg5QTMyMzNDOTI1NTFEMTZEMTRE
NDM4Q0Y1NTFGMB4XDTI1MTEwNTA1MzYxNVoXDTI1MTEwNzA1MzYxNVowGDEWMBQG
A1UEAxMNNjkwYWUyNGYtZmQ4NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANxXVRsJN4JHeRhx7WJOu3fCs3AeGtdNHhcb8jDOS0BxXdIe1cEp7xlVTlWn
uDUKFJYQBgrhM+L33W5icbPH0aRqR0cXCVwkQKpkXuQSu8zPhN4tIae+un3d9Nu9
T2E59Yrf3rQT4JWMbtxNzCwtCQpf3TSrhLPuDeEfjLad3SY6A25bJLIxmEMUnmLx
lJL/e/TguzT8r2BqclYfx294rXTz8QcVOgYzueqWgvYRryHoKcpDmpRxt7oiyInC
fcsF5IOXe/u25c+dmfykNk0MuOJKVQESzqnpbjDYZxamNes7H8o1Zvu+ZwrL2w6I
sXp1cjd45mvjF+G+WT5GgXLvuzcCAwEAAaOCArUwggKxMB0GA1UdDgQWBBRIYYn7
JzreXY+BmAPISTk5a6HdxDAfBgNVHSMEGDAWgBSw64VNwNiaMjPJJVHRbRTUOM9V
HzAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2QjVFRTcvRUQ3MDY2NTI2QjkwMTFGMDgxOUNDNjgxREFFNEVDOUMvc091RlRj
RFltakl6eVNWUjBXMFUxRGpQVlI4LmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L3JpcGUv
c091RlRjRFltakl6eVNWUjBXMFUxRGpQVlI4LmNlcjBPBgNVHSABAf8ERTBDMEEG
CCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmljLm5l
dC9wb2xpY3kvQ1BTLnBkZjCB1QYIKwYBBQUHAQsEgcgwgcUwgYsGCCsGAQUFBzAL
hn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVw
b3NpdG9yeS9GMzZCNUVFNy9FRDcwNjY1MjZCOTAxMUYwODE5Q0M2ODFEQUU0RUM5
Qy9zT3VGVGNEWW1qSXp5U1ZSMFcwVTFEalBWUjgubWZ0MDUGCCsGAQUFBzANhilo
dHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEF
BQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwDQYJKoZIhvcNAQELBQADggEBADEHaZTrvBQDRnA6ksrgx38k49ektqVxTuqA
vG2TdJSdUzb45kBrAjRG5Ac/ej6bYNXv7uCshFodAz54v4sQsWnYoY/AyXvPh/2L
Q38bC5WJQ/utIpwSoBhBrsSMJD3ZYj+yXJWVAF1UkbRwt9WoihVX9we5jYAggocv
Rx1O5635O/Dyr5jhkjbCAFvL8qhDfRKkI+HKVN0ps6c2Ddjnk3nzC98VnB2qmJVh
JWOCf7X+xgv/3+JzrJY6dJhR3nNaSt9ERH2B1cpBgt7FLGGq6p1ggnIbPJeKyF1G
zd1LYt1EDcG+lbJL6DtYSBWRj80Zxl0E5XWzLkE+Ehoik1PXAWs=
-----END CERTIFICATE-----
Generated at Wed Nov 5 15:47:09 2025 by rpki-client