Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C01B9/AFDA9FDCDA2E11EEA6D125A7775412E6/OWSdY4-MUgk4TWK4gN9_jH5G4fs.mft
File:                     OWSdY4-MUgk4TWK4gN9_jH5G4fs.mft (raw, json)
Hash identifier:          o8WhD4dEEUs7cEJhN1SkVmq0M161cx6DEtNNNg2RFwk=
Subject key identifier:   92:3B:F5:D6:C0:30:A4:98:3E:EB:3B:A4:B2:07:79:6D:0A:7F:58:97
Authority key identifier: 39:64:9D:63:8F:8C:52:09:38:4D:62:B8:80:DF:7F:8C:7E:46:E1:FB
Certificate issuer:       /CN=F36C01B9RI/serialNumber=39649D638F8C5209384D62B880DF7F8C7E46E1FB
Certificate serial:       038A
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/OWSdY4-MUgk4TWK4gN9_jH5G4fs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C01B9/AFDA9FDCDA2E11EEA6D125A7775412E6/OWSdY4-MUgk4TWK4gN9_jH5G4fs.mft
Manifest number:          0386
Signing time:             Tue 28 Jul 2026 04:05:00 +0000
Manifest this update:     Tue 28 Jul 2026 04:05:00 +0000
Manifest next update:     Thu 30 Jul 2026 04:05:00 +0000
Files and hashes:         1: OWSdY4-MUgk4TWK4gN9_jH5G4fs.crl (hash: X7k8fN0L+J2eDvJW2AC7JRaspVoTE6Ao/uD978tBguM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C01B9/AFDA9FDCDA2E11EEA6D125A7775412E6/OWSdY4-MUgk4TWK4gN9_jH5G4fs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C01B9/AFDA9FDCDA2E11EEA6D125A7775412E6/OWSdY4-MUgk4TWK4gN9_jH5G4fs.mft
                          rsync://rpki.afrinic.net/repository/ripe/OWSdY4-MUgk4TWK4gN9_jH5G4fs.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 30 Jul 2026 00:45:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 906 (0x38a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C01B9RI, serialNumber=39649D638F8C5209384D62B880DF7F8C7E46E1FB
        Validity
            Not Before: Jul 28 04:05:00 2026 GMT
            Not After : Jul 30 04:05:00 2026 GMT
        Subject: CN=6a682a6c-0d05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:d4:08:01:9b:9b:31:ff:35:3d:c9:fd:0d:94:
                    8e:12:cc:fb:e4:13:d3:9b:3e:f5:17:aa:c2:08:75:
                    11:7f:a5:a5:d8:aa:0b:c8:b3:9d:d4:fb:81:3c:65:
                    c8:b5:af:5e:3e:65:01:9a:11:94:0b:00:92:25:be:
                    f4:61:68:5e:03:c6:2f:35:81:f9:8f:c5:9f:77:f2:
                    3f:55:fc:2e:d1:e6:50:f3:c6:2f:d2:62:59:64:d7:
                    c0:35:cd:90:e0:0c:89:e9:be:b3:8d:43:1a:0e:24:
                    2b:71:d1:13:93:ec:ab:a7:7e:d7:59:60:b1:7e:63:
                    7a:c2:f1:8f:55:3a:22:db:cb:2b:1c:88:d3:b5:f4:
                    dc:f5:8b:b0:b5:14:b8:f5:5d:b0:0c:85:91:7f:cd:
                    8f:12:f3:36:a3:01:f0:41:eb:0d:32:ef:d6:4c:dc:
                    d5:7b:f0:88:e0:6c:cd:2b:ef:9b:49:9d:c5:1b:50:
                    22:09:a0:c9:cf:e0:62:df:f5:1b:32:b8:3d:74:c6:
                    3c:6b:65:ed:d0:10:cf:f8:be:51:44:ba:61:92:80:
                    fc:d0:66:ff:80:7b:19:ee:df:a4:3f:fd:da:cc:67:
                    32:0e:c2:30:c1:bc:b3:0e:fe:ee:34:6e:b6:5c:46:
                    bc:2d:aa:1c:b3:c0:d9:ab:05:3d:c4:6d:32:b3:cc:
                    a0:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:3B:F5:D6:C0:30:A4:98:3E:EB:3B:A4:B2:07:79:6D:0A:7F:58:97
            X509v3 Authority Key Identifier:
                keyid:39:64:9D:63:8F:8C:52:09:38:4D:62:B8:80:DF:7F:8C:7E:46:E1:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C01B9/AFDA9FDCDA2E11EEA6D125A7775412E6/OWSdY4-MUgk4TWK4gN9_jH5G4fs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/OWSdY4-MUgk4TWK4gN9_jH5G4fs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C01B9/AFDA9FDCDA2E11EEA6D125A7775412E6/OWSdY4-MUgk4TWK4gN9_jH5G4fs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:2c:b6:94:47:e2:7f:0e:4c:d2:92:f3:97:be:b1:83:3b:6b:
         83:ce:55:00:0c:1d:ca:d0:19:65:5b:4b:2a:05:30:52:d3:3d:
         3a:02:e4:1e:d5:cb:87:0e:b6:72:89:e4:10:be:31:69:22:2d:
         84:06:ff:bc:5d:8f:21:b4:ae:af:05:ed:a2:9b:c6:7a:96:bf:
         0a:a5:e8:bf:8c:6c:86:e5:bb:1f:02:80:b9:1c:d6:a9:2e:13:
         05:23:6e:8a:12:bc:e9:f4:ce:ab:79:3f:98:d1:bb:76:1b:74:
         0d:91:cd:62:09:2f:70:6f:04:ed:65:0b:f9:41:43:cb:a9:96:
         35:4a:1b:82:d3:92:f9:56:2a:9c:6b:fe:11:a8:52:c1:bb:24:
         76:eb:60:1f:38:48:8a:3f:14:37:fb:bb:62:3a:b4:8f:c2:cb:
         d9:a4:f6:bf:e7:22:8e:79:4e:3d:51:51:1b:69:70:be:85:d2:
         98:4e:a6:25:b3:35:46:b7:b5:f3:98:aa:23:47:66:e2:51:e5:
         5d:83:98:42:b4:75:fa:ff:5d:e0:d8:0a:01:0c:40:a2:cc:8d:
         8b:ce:80:37:36:0c:06:cd:13:8f:c2:27:00:90:c6:cd:4d:1d:
         d2:35:60:b5:97:66:ff:5f:7a:4a:7e:63:2a:82:a7:60:74:18:
         4d:57:f9:bd
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICA4owDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzAxQjlSSTExMC8GA1UEBRMoMzk2NDlENjM4RjhDNTIwOTM4NEQ2MkI4ODBERjdG
OEM3RTQ2RTFGQjAeFw0yNjA3MjgwNDA1MDBaFw0yNjA3MzAwNDA1MDBaMBgxFjAU
BgNVBAMTDTZhNjgyYTZjLTBkMDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDo1AgBm5sx/zU9yf0NlI4SzPvkE9ObPvUXqsIIdRF/paXYqgvIs53U+4E8
Zci1r14+ZQGaEZQLAJIlvvRhaF4Dxi81gfmPxZ938j9V/C7R5lDzxi/SYllk18A1
zZDgDInpvrONQxoOJCtx0ROT7KunftdZYLF+Y3rC8Y9VOiLbyysciNO19Nz1i7C1
FLj1XbAMhZF/zY8S8zajAfBB6w0y79ZM3NV78IjgbM0r75tJncUbUCIJoMnP4GLf
9RsyuD10xjxrZe3QEM/4vlFEumGSgPzQZv+Aexnu36Q//drMZzIOwjDBvLMO/u40
brZcRrwtqhyzwNmrBT3EbTKzzKB3AgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUkjv1
1sAwpJg+6zuksgd5bQp/WJcwHwYDVR0jBBgwFoAUOWSdY4+MUgk4TWK4gN9/jH5G
4fswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkMwMUI5L0FGREE5RkRDREEyRTExRUVBNkQxMjVBNzc3NTQxMkU2L09XU2RZ
NC1NVWdrNFRXSzRnTjlfakg1RzRmcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9yaXBl
L09XU2RZNC1NVWdrNFRXSzRnTjlfakg1RzRmcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2QzAxQjkvQUZEQTlGRENEQTJFMTFFRUE2RDEyNUE3Nzc1NDEy
RTYvT1dTZFk0LU1VZ2s0VFdLNGdOOV9qSDVHNGZzLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAjLLaUR+J/DkzSkvOXvrGDO2uDzlUADB3K
0BllW0sqBTBS0z06AuQe1cuHDrZyieQQvjFpIi2EBv+8XY8htK6vBe2im8Z6lr8K
pei/jGyG5bsfAoC5HNapLhMFI26KErzp9M6reT+Y0bt2G3QNkc1iCS9wbwTtZQv5
QUPLqZY1ShuC05L5Viqca/4RqFLBuyR262AfOEiKPxQ3+7tiOrSPwsvZpPa/5yKO
eU49UVEbaXC+hdKYTqYlszVGt7XzmKojR2biUeVdg5hCtHX6/13g2AoBDECizI2L
zoA3NgwGzROPwicAkMbNTR3SNWC1l2b/X3pKfmMqgqdgdBhNV/m9
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:43:16 2026 by rpki-client