Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C3DC5/711CB0F6355D11EBB53E0546F8AEA228/zCzeBNPUNh6EROKuXkLw7fYi3OQ.mft
File:                     zCzeBNPUNh6EROKuXkLw7fYi3OQ.mft (raw, json)
Hash identifier:          Wmnq/MTPpcCEVpv11q0Nnxj/b1tzm7DO/O53ZjtvuJI=
Subject key identifier:   15:E5:97:4D:AE:42:38:BF:32:36:41:B4:3A:5A:30:DD:3F:76:E4:D6
Authority key identifier: CC:2C:DE:04:D3:D4:36:1E:84:44:E2:AE:5E:42:F0:ED:F6:22:DC:E4
Certificate issuer:       /CN=F36C3DC5AF/serialNumber=CC2CDE04D3D4361E8444E2AE5E42F0EDF622DCE4
Certificate serial:       0844
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/zCzeBNPUNh6EROKuXkLw7fYi3OQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C3DC5/711CB0F6355D11EBB53E0546F8AEA228/zCzeBNPUNh6EROKuXkLw7fYi3OQ.mft
Manifest number:          0843
Signing time:             Tue 28 Jul 2026 01:58:40 +0000
Manifest this update:     Tue 28 Jul 2026 01:58:39 +0000
Manifest next update:     Thu 30 Jul 2026 01:58:39 +0000
Files and hashes:         1: zCzeBNPUNh6EROKuXkLw7fYi3OQ.crl (hash: QIocjvbUdTG1Ojl6/CDmsnON+xVa4LxdDxjku5t6Zls=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C3DC5/711CB0F6355D11EBB53E0546F8AEA228/zCzeBNPUNh6EROKuXkLw7fYi3OQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C3DC5/711CB0F6355D11EBB53E0546F8AEA228/zCzeBNPUNh6EROKuXkLw7fYi3OQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/zCzeBNPUNh6EROKuXkLw7fYi3OQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 30 Jul 2026 01:58:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2116 (0x844)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C3DC5AF, serialNumber=CC2CDE04D3D4361E8444E2AE5E42F0EDF622DCE4
        Validity
            Not Before: Jul 28 01:58:39 2026 GMT
            Not After : Jul 30 01:58:39 2026 GMT
        Subject: CN=6a680cd0-be43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:61:73:76:5c:ce:84:5b:ba:4f:0f:35:e0:dc:
                    be:80:32:77:e1:9d:c3:ef:c0:08:f0:18:3d:9a:98:
                    ff:ce:52:ce:75:cd:4d:7c:b0:fa:9b:6f:0f:6d:02:
                    6f:f2:11:7c:7c:36:ff:b1:53:ad:16:3a:6b:f2:c9:
                    12:b0:a6:af:8a:15:bc:34:f9:99:2c:d0:6a:47:69:
                    bd:77:f6:1a:08:02:60:ab:64:ef:e7:ff:4b:b6:2d:
                    1f:d1:12:70:24:3c:c1:4c:6b:52:c1:48:58:be:5e:
                    3c:b2:1b:cc:d3:a4:1e:39:fd:e4:19:42:c7:0e:e3:
                    37:ef:53:ad:19:1b:1d:f3:f7:45:85:c0:8d:8e:39:
                    11:6f:79:0c:d8:89:f7:b7:df:a9:f0:81:9e:df:32:
                    09:9d:39:05:82:a2:b9:44:64:b6:55:fb:e3:ca:8c:
                    78:97:0d:97:18:78:85:32:60:9f:1e:08:a4:34:3b:
                    4c:b5:5b:b9:82:a6:82:55:31:3a:7f:43:e3:fa:25:
                    4b:51:3b:5b:e6:eb:72:b6:e1:d0:3d:cf:93:d9:91:
                    b6:d8:69:a5:77:0a:56:4a:ee:84:fa:a6:a5:c8:d2:
                    40:29:67:58:fb:36:e7:8a:40:ae:35:af:a3:74:7a:
                    08:06:86:0d:d5:38:c9:80:45:0c:04:44:fe:37:09:
                    94:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:E5:97:4D:AE:42:38:BF:32:36:41:B4:3A:5A:30:DD:3F:76:E4:D6
            X509v3 Authority Key Identifier:
                keyid:CC:2C:DE:04:D3:D4:36:1E:84:44:E2:AE:5E:42:F0:ED:F6:22:DC:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C3DC5/711CB0F6355D11EBB53E0546F8AEA228/zCzeBNPUNh6EROKuXkLw7fYi3OQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/zCzeBNPUNh6EROKuXkLw7fYi3OQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C3DC5/711CB0F6355D11EBB53E0546F8AEA228/zCzeBNPUNh6EROKuXkLw7fYi3OQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:9e:ac:3c:bb:5a:29:d8:68:31:88:78:e1:47:ff:94:c1:47:
         57:8f:07:67:5a:b8:7c:b1:4e:86:ff:80:cc:c3:53:fa:35:26:
         a0:5d:d8:6a:de:8f:ab:d3:7a:1e:6e:4f:b2:5d:9c:01:e2:52:
         ff:fd:59:2d:71:3b:fc:7c:53:cb:15:7a:21:b0:ca:c9:4c:c6:
         a7:fd:1c:d1:c1:f9:ba:57:b9:e1:43:70:b5:78:3b:d4:d1:f0:
         d2:16:76:43:15:65:8f:cc:cc:63:2e:3f:16:8a:41:aa:e7:4c:
         a9:5c:88:65:2a:77:aa:ea:ac:3a:b0:4f:57:7b:5b:7f:5c:25:
         e7:77:02:aa:1c:6c:08:dd:69:78:da:bb:00:d2:e9:3e:83:8f:
         b0:4f:ec:dd:81:9b:8c:0e:1a:c5:43:49:fc:c7:b3:ef:46:fe:
         76:86:26:aa:00:20:ad:0b:cd:0a:50:7c:40:63:b3:c3:73:32:
         11:39:0c:29:07:13:ce:fa:0a:2f:5a:01:e1:b9:3f:0e:93:ef:
         73:e0:59:e1:3b:5e:27:b4:a6:d5:08:57:03:c6:40:c4:3a:6f:
         80:fd:b7:b6:d2:7a:e1:25:af:b4:22:5a:94:4c:22:75:46:4b:
         ed:c7:e3:ee:bf:9a:de:4f:a4:cb:78:ea:4c:92:b9:a9:e5:dc:
         47:8a:e0:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:41:48 2026 by rpki-client