Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C1E88/213AEA8278E711EEB495563C4AD9E6FC/2dbgTePDYTvOHbKdd8ahOIrEIj0.mft
File:                     2dbgTePDYTvOHbKdd8ahOIrEIj0.mft (raw, json)
Hash identifier:          mnu9qfrF3OtVgvPN1fin/IEP0pCTGo8m92yDWt/w4Yo=
Subject key identifier:   15:4D:10:E9:C3:B3:98:5C:86:2E:ED:81:1D:E3:F8:96:F6:C0:0D:1C
Authority key identifier: D9:D6:E0:4D:E3:C3:61:3B:CE:1D:B2:9D:77:C6:A1:38:8A:C4:22:3D
Certificate issuer:       /CN=F36C1E88AF/serialNumber=D9D6E04DE3C3613BCE1DB29D77C6A1388AC4223D
Certificate serial:       0409
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/2dbgTePDYTvOHbKdd8ahOIrEIj0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C1E88/213AEA8278E711EEB495563C4AD9E6FC/2dbgTePDYTvOHbKdd8ahOIrEIj0.mft
Manifest number:          0406
Signing time:             Tue 28 Jul 2026 03:49:11 +0000
Manifest this update:     Tue 28 Jul 2026 03:49:10 +0000
Manifest next update:     Thu 30 Jul 2026 03:49:10 +0000
Files and hashes:         1: 2dbgTePDYTvOHbKdd8ahOIrEIj0.crl (hash: G6P//zX4aNQQXVnY+KljUpoc3HXtMyMysiv+YeBGNOI=)
                          2: B56502AE36B211EFAA421B5E762E951A.roa (hash: pW3bMqz4FHfQnjso9ES+xBDe7OZbTMlRNhZcJvVAqsk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C1E88/213AEA8278E711EEB495563C4AD9E6FC/2dbgTePDYTvOHbKdd8ahOIrEIj0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C1E88/213AEA8278E711EEB495563C4AD9E6FC/2dbgTePDYTvOHbKdd8ahOIrEIj0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/2dbgTePDYTvOHbKdd8ahOIrEIj0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 30 Jul 2026 03:49:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1033 (0x409)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C1E88AF, serialNumber=D9D6E04DE3C3613BCE1DB29D77C6A1388AC4223D
        Validity
            Not Before: Jul 28 03:49:10 2026 GMT
            Not After : Jul 30 03:49:10 2026 GMT
        Subject: CN=6a6826b6-1d76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c5:c3:52:00:76:9d:de:c3:b0:66:71:52:d4:
                    f6:e2:8f:2e:ac:e7:8e:d0:ce:18:85:cc:fb:79:18:
                    26:23:c4:2b:97:59:89:dd:66:f4:10:29:53:b5:6c:
                    9d:32:f7:ad:0b:f3:48:f3:4e:88:ba:be:27:12:9c:
                    0a:b3:9f:72:d9:7e:f8:77:34:dd:0d:ce:44:b0:7e:
                    4d:d1:f9:5a:c2:17:66:6a:1c:6d:5d:a9:c0:f1:45:
                    1f:50:be:c8:5b:61:60:c1:68:86:76:e6:1e:d0:da:
                    22:f8:6c:e4:04:2a:2f:ce:cd:92:fd:57:61:bc:c0:
                    8a:3a:8e:26:e7:47:bd:20:e2:62:af:2e:99:f2:48:
                    dd:1e:13:2b:d1:eb:c7:60:da:ae:dc:ef:35:a3:f7:
                    6b:54:7b:e8:be:9e:b3:4b:71:f7:f6:36:8c:4a:7c:
                    3a:80:90:4c:61:f8:57:9c:ac:fb:96:04:d1:9e:d8:
                    b2:f6:a8:f3:30:e4:66:41:f6:49:83:e8:31:e8:2f:
                    f3:24:ee:d7:8c:12:8e:aa:2f:b7:b8:25:51:6f:75:
                    96:17:11:a5:ee:c3:d3:f6:d3:4d:9f:d9:85:3f:12:
                    b9:1a:c2:f6:9b:b8:88:9f:f6:e8:ac:6a:05:f4:d1:
                    05:e8:0c:1a:06:03:71:61:73:c0:c1:b3:26:7c:06:
                    d7:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:4D:10:E9:C3:B3:98:5C:86:2E:ED:81:1D:E3:F8:96:F6:C0:0D:1C
            X509v3 Authority Key Identifier:
                keyid:D9:D6:E0:4D:E3:C3:61:3B:CE:1D:B2:9D:77:C6:A1:38:8A:C4:22:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C1E88/213AEA8278E711EEB495563C4AD9E6FC/2dbgTePDYTvOHbKdd8ahOIrEIj0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2dbgTePDYTvOHbKdd8ahOIrEIj0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C1E88/213AEA8278E711EEB495563C4AD9E6FC/2dbgTePDYTvOHbKdd8ahOIrEIj0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:16:3c:f5:eb:a5:9a:d5:36:3b:26:dc:31:47:c9:8c:09:70:
         8e:42:53:01:ef:81:34:6c:2d:5a:87:d9:c5:d0:a2:ce:a4:0e:
         a5:b1:9c:5c:88:67:96:9d:17:7d:15:05:f5:3e:ac:24:5b:09:
         37:1c:4f:e2:05:d2:93:62:a9:72:e2:c2:2c:10:d6:51:e1:52:
         86:31:6c:41:26:6b:4b:26:c5:19:71:5a:cb:19:ae:cc:0d:f8:
         c6:9f:54:c0:ad:49:84:d3:89:f9:15:8a:a5:a8:fe:bb:f9:bf:
         5d:97:9d:ca:bc:21:f4:19:77:67:10:9a:2d:c0:32:04:2c:8f:
         1b:79:16:80:6d:a4:5c:30:9e:ca:c5:2f:73:9a:64:d7:40:26:
         d4:9e:b0:b3:90:1e:fe:e2:16:12:67:96:ff:9f:14:d7:85:a6:
         7b:02:a5:97:06:33:37:0c:b3:64:2a:22:5c:48:13:81:4e:2f:
         e5:a9:fd:46:79:7d:59:f8:16:b8:a7:a7:cc:f3:b7:ea:37:8d:
         69:15:f3:cb:b6:de:96:a1:ff:bf:4c:e6:24:8d:c9:cb:88:90:
         4e:8f:9f:00:f5:14:d0:3d:f2:b4:64:4c:e1:4e:4f:c2:54:fc:
         c9:c6:0e:b5:e0:59:8e:57:2e:38:1f:e3:72:f5:52:73:24:78:
         7d:38:a2:fb
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBAkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzFFODhBRjExMC8GA1UEBRMoRDlENkUwNERFM0MzNjEzQkNFMURCMjlENzdDNkEx
Mzg4QUM0MjIzRDAeFw0yNjA3MjgwMzQ5MTBaFw0yNjA3MzAwMzQ5MTBaMBgxFjAU
BgNVBAMTDTZhNjgyNmI2LTFkNzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC/xcNSAHad3sOwZnFS1Pbijy6s547QzhiFzPt5GCYjxCuXWYndZvQQKVO1
bJ0y960L80jzToi6vicSnAqzn3LZfvh3NN0NzkSwfk3R+VrCF2ZqHG1dqcDxRR9Q
vshbYWDBaIZ25h7Q2iL4bOQEKi/OzZL9V2G8wIo6jibnR70g4mKvLpnySN0eEyvR
68dg2q7c7zWj92tUe+i+nrNLcff2NoxKfDqAkExh+FecrPuWBNGe2LL2qPMw5GZB
9kmD6DHoL/Mk7teMEo6qL7e4JVFvdZYXEaXuw9P2002f2YU/ErkawvabuIif9uis
agX00QXoDBoGA3Fhc8DBsyZ8Btf1AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUFU0Q
6cOzmFyGLu2BHeP4lvbADRwwHwYDVR0jBBgwFoAU2dbgTePDYTvOHbKdd8ahOIrE
Ij0wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkMxRTg4LzIxM0FFQTgyNzhFNzExRUVCNDk1NTYzQzRBRDlFNkZDLzJkYmdU
ZVBEWVR2T0hiS2RkOGFoT0lyRUlqMC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzJkYmdUZVBEWVR2T0hiS2RkOGFoT0lyRUlqMC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QzFFODgvMjEzQUVBODI3OEU3MTFFRUI0OTU1NjNDNEFE
OUU2RkMvMmRiZ1RlUERZVHZPSGJLZGQ4YWhPSXJFSWowLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB5Fjz166Wa1TY7JtwxR8mMCXCOQlMB
74E0bC1ah9nF0KLOpA6lsZxciGeWnRd9FQX1PqwkWwk3HE/iBdKTYqly4sIsENZR
4VKGMWxBJmtLJsUZcVrLGa7MDfjGn1TArUmE04n5FYqlqP67+b9dl53KvCH0GXdn
EJotwDIELI8beRaAbaRcMJ7KxS9zmmTXQCbUnrCzkB7+4hYSZ5b/nxTXhaZ7AqWX
BjM3DLNkKiJcSBOBTi/lqf1GeX1Z+Ba4p6fM87fqN41pFfPLtt6Wof+/TOYkjcnL
iJBOj58A9RTQPfK0ZEzhTk/CVPzJxg614FmOVy44H+Ny9VJzJHh9OKL7
-----END CERTIFICATE-----
Generated at Tue Jul 28 22:29:23 2026 by rpki-client