Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C1E88/213AEA8278E711EEB495563C4AD9E6FC/2dbgTePDYTvOHbKdd8ahOIrEIj0.mft
File:                     2dbgTePDYTvOHbKdd8ahOIrEIj0.mft (raw, json)
Hash identifier:          PtUWh2xa1lNpeRT7+TJlwkqJLyfg6CmMjY9SOqLrO3E=
Subject key identifier:   06:5F:64:80:2E:F1:23:B7:88:A7:D6:94:98:30:7E:91:56:29:FE:EF
Authority key identifier: D9:D6:E0:4D:E3:C3:61:3B:CE:1D:B2:9D:77:C6:A1:38:8A:C4:22:3D
Certificate issuer:       /CN=F36C1E88AF/serialNumber=D9D6E04DE3C3613BCE1DB29D77C6A1388AC4223D
Certificate serial:       0375
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/2dbgTePDYTvOHbKdd8ahOIrEIj0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C1E88/213AEA8278E711EEB495563C4AD9E6FC/2dbgTePDYTvOHbKdd8ahOIrEIj0.mft
Manifest number:          0372
Signing time:             Mon 02 Mar 2026 02:40:07 +0000
Manifest this update:     Mon 02 Mar 2026 02:40:06 +0000
Manifest next update:     Wed 04 Mar 2026 02:40:06 +0000
Files and hashes:         1: 2dbgTePDYTvOHbKdd8ahOIrEIj0.crl (hash: Jm59EOiclAiMpaShJAUSrKkgGBEXXHVR+0ozm58Vb3U=)
                          2: B56502AE36B211EFAA421B5E762E951A.roa (hash: pW3bMqz4FHfQnjso9ES+xBDe7OZbTMlRNhZcJvVAqsk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C1E88/213AEA8278E711EEB495563C4AD9E6FC/2dbgTePDYTvOHbKdd8ahOIrEIj0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C1E88/213AEA8278E711EEB495563C4AD9E6FC/2dbgTePDYTvOHbKdd8ahOIrEIj0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/2dbgTePDYTvOHbKdd8ahOIrEIj0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Mar 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 885 (0x375)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C1E88AF, serialNumber=D9D6E04DE3C3613BCE1DB29D77C6A1388AC4223D
        Validity
            Not Before: Mar  2 02:40:06 2026 GMT
            Not After : Mar  4 02:40:06 2026 GMT
        Subject: CN=69a4f887-a822
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:88:13:49:48:d0:5f:e7:ef:7d:b9:54:52:d2:
                    71:9c:5b:95:f0:fe:cd:dc:d4:01:0b:7d:d1:4b:e5:
                    bd:9c:13:66:43:c3:3b:ec:f6:1d:9e:01:fa:7b:ec:
                    a9:29:1b:0a:24:31:fa:88:d5:96:a2:ab:cd:d8:dc:
                    f2:34:b9:0d:41:fd:1f:c5:58:39:37:ba:00:22:48:
                    2f:07:1b:a5:92:29:d3:27:04:08:70:61:a9:35:09:
                    bc:17:18:d9:5f:97:56:06:2a:aa:5b:8e:1a:09:df:
                    35:30:28:f5:63:e9:84:2b:00:3b:e1:a9:72:40:e7:
                    f5:a7:f5:10:6b:ac:ac:ec:31:f7:64:4e:cc:1e:7d:
                    10:98:fe:c7:cf:3d:d3:f8:f1:3a:4f:92:79:5d:30:
                    24:30:e2:a6:b8:29:5d:9d:84:f4:b2:f0:43:24:d1:
                    30:24:f3:07:03:61:06:68:c0:f5:c5:30:9b:b9:d1:
                    08:d3:1e:09:4f:c0:3c:03:61:8d:e2:df:3c:47:13:
                    68:4f:4a:9a:e0:d0:38:c5:42:70:26:6b:54:86:6c:
                    74:69:0e:a6:51:9d:8e:c0:6d:a7:c4:d8:84:0d:21:
                    ff:d1:18:a6:1a:9a:79:44:f7:40:bb:35:88:49:e6:
                    05:b9:c1:8e:8e:55:ed:6a:85:d8:fc:77:9d:d4:92:
                    99:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:5F:64:80:2E:F1:23:B7:88:A7:D6:94:98:30:7E:91:56:29:FE:EF
            X509v3 Authority Key Identifier:
                keyid:D9:D6:E0:4D:E3:C3:61:3B:CE:1D:B2:9D:77:C6:A1:38:8A:C4:22:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C1E88/213AEA8278E711EEB495563C4AD9E6FC/2dbgTePDYTvOHbKdd8ahOIrEIj0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2dbgTePDYTvOHbKdd8ahOIrEIj0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C1E88/213AEA8278E711EEB495563C4AD9E6FC/2dbgTePDYTvOHbKdd8ahOIrEIj0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:2f:51:85:24:99:60:ee:81:a8:5b:be:0c:7e:c7:90:54:ae:
         c0:7f:f2:40:d9:fb:b4:39:0b:8e:02:33:e4:75:20:33:34:b3:
         47:cf:82:fe:f2:34:22:6c:cc:83:54:6d:eb:a1:82:31:cf:1e:
         4a:b5:e5:da:12:28:9d:fd:fc:47:de:11:c5:a5:bc:3b:5e:4f:
         d4:41:b2:86:86:c9:a7:45:95:bc:63:b5:8b:52:e9:56:5b:3c:
         da:dd:39:8c:31:85:42:ce:d7:72:e4:c2:f2:5c:63:81:d8:63:
         19:1c:99:88:7f:4b:1b:0b:ef:58:ba:3a:9a:56:4d:fd:f8:b6:
         f3:53:f2:f5:f1:80:e9:43:0d:5e:16:11:6b:3f:9b:19:3e:6c:
         d0:96:80:d4:ee:c7:15:30:ca:af:0d:ac:f5:84:5a:d6:92:24:
         8e:80:15:23:a4:5c:66:69:ea:0b:16:0e:bd:f3:82:a7:88:ae:
         27:82:f5:f9:44:77:3e:b4:85:29:4f:51:74:7e:8c:43:e4:b2:
         11:63:76:2a:81:e4:c9:01:71:5c:53:43:00:55:17:08:ef:2d:
         14:9d:b1:0d:fd:d8:1a:2e:3c:dc:92:d2:cd:24:29:d9:d7:93:
         3d:ca:87:2b:25:9d:43:fc:97:f2:09:ca:76:e1:ba:0d:63:57:
         84:57:06:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:20:22 2026 by rpki-client