Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36CC4C5/F0A872C6DE6B11F0986944EADAE4EC9C/oHAxgIgisopRzqJ21BM9cIqlFO0.mft
File:                     oHAxgIgisopRzqJ21BM9cIqlFO0.mft (raw, json)
Hash identifier:          G6yFih/1uRXxOjrBvwUGNpcZQyck+NFEvvoQ2QJaQSg=
Subject key identifier:   B6:3E:FA:C5:FA:21:FC:6D:9C:CA:31:E8:00:59:BE:C6:B5:33:B1:A6
Authority key identifier: A0:70:31:80:88:22:B2:8A:51:CE:A2:76:D4:13:3D:70:8A:A5:14:ED
Certificate issuer:       /CN=F36CC4C5RI/serialNumber=A07031808822B28A51CEA276D4133D708AA514ED
Certificate serial:       012E
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/oHAxgIgisopRzqJ21BM9cIqlFO0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36CC4C5/F0A872C6DE6B11F0986944EADAE4EC9C/oHAxgIgisopRzqJ21BM9cIqlFO0.mft
Manifest number:          012D
Signing time:             Wed 14 Oct 2026 05:17:59 +0000
Manifest this update:     Wed 14 Oct 2026 05:17:58 +0000
Manifest next update:     Fri 16 Oct 2026 05:17:58 +0000
Files and hashes:         1: oHAxgIgisopRzqJ21BM9cIqlFO0.crl (hash: pPQKs0/DrK/wpk0lakScejx6Ihc1WOElPOdY1T0sUX8=)
                          2: 6BB245F8DE6E11F0A9CDBA7BDAE4EC9C.roa (hash: xOgvdv+bzOxwVoZHfk68mQJwNieIGm7/dHTt7BIs17g=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36CC4C5/F0A872C6DE6B11F0986944EADAE4EC9C/oHAxgIgisopRzqJ21BM9cIqlFO0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36CC4C5/F0A872C6DE6B11F0986944EADAE4EC9C/oHAxgIgisopRzqJ21BM9cIqlFO0.mft
                          rsync://rpki.afrinic.net/repository/ripe/oHAxgIgisopRzqJ21BM9cIqlFO0.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 16 Oct 2026 00:45:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 302 (0x12e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36CC4C5RI, serialNumber=A07031808822B28A51CEA276D4133D708AA514ED
        Validity
            Not Before: Oct 14 05:17:58 2026 GMT
            Not After : Oct 16 05:17:58 2026 GMT
        Subject: CN=6acf1087-1506
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:5d:86:d3:de:2f:2a:5e:ca:54:02:ef:04:08:
                    25:1f:a7:eb:40:f7:e4:5e:a3:6b:73:04:52:d5:40:
                    3e:2f:09:38:3a:84:46:0a:89:26:03:bc:dd:f8:b4:
                    e4:82:f0:78:0c:2c:77:0b:48:4c:54:1c:ad:ed:fb:
                    33:c7:6d:95:7a:73:e5:b8:86:2b:0f:3a:dc:e9:b0:
                    15:e7:55:7d:8a:de:41:05:11:8a:56:19:61:e8:07:
                    c5:98:de:12:f8:58:7a:68:fb:33:5b:aa:bd:47:1c:
                    89:c8:85:58:d9:ff:44:86:98:46:6f:0a:bd:ec:f5:
                    37:d3:d8:bb:22:b3:67:59:8f:d6:6c:9b:aa:0c:0d:
                    e7:2d:09:b0:39:18:1b:89:29:d9:c7:a3:0f:79:0c:
                    cb:7a:6b:da:f1:fe:ea:ba:2e:7d:a2:f1:1d:f8:6a:
                    1c:7d:a7:b4:1c:9c:a3:60:74:ba:d8:93:1c:be:08:
                    89:26:29:d5:ea:cd:9c:42:6a:94:b3:11:0b:4a:1c:
                    b2:6c:74:b1:72:aa:5d:74:bf:fe:b3:5f:40:0b:aa:
                    a9:af:58:5e:24:10:84:35:fe:71:05:61:6e:d9:6f:
                    6d:ea:5a:5b:fe:fa:ae:3b:4f:99:4f:cc:09:30:5d:
                    cd:c2:89:f9:5d:c0:65:10:f7:63:96:70:aa:f0:6f:
                    82:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:3E:FA:C5:FA:21:FC:6D:9C:CA:31:E8:00:59:BE:C6:B5:33:B1:A6
            X509v3 Authority Key Identifier:
                keyid:A0:70:31:80:88:22:B2:8A:51:CE:A2:76:D4:13:3D:70:8A:A5:14:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36CC4C5/F0A872C6DE6B11F0986944EADAE4EC9C/oHAxgIgisopRzqJ21BM9cIqlFO0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/oHAxgIgisopRzqJ21BM9cIqlFO0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CC4C5/F0A872C6DE6B11F0986944EADAE4EC9C/oHAxgIgisopRzqJ21BM9cIqlFO0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:76:a5:db:41:51:0b:44:47:46:f9:ad:bc:10:89:93:54:85:
         f2:5c:73:4d:f5:63:a8:fc:83:f2:b8:79:cb:61:51:a0:3b:c0:
         09:36:04:b2:42:61:8e:e4:7b:0f:c1:95:5e:3b:9f:5d:35:7b:
         62:a1:ac:9d:f7:5d:55:5b:7a:6f:f1:80:1c:97:71:1b:97:07:
         eb:7a:b0:c5:cd:7b:42:35:88:31:74:f8:23:e9:8d:59:21:89:
         94:09:9f:d1:7b:d6:a7:b8:7d:ef:6c:11:8f:49:ad:44:19:c5:
         68:b5:4f:da:1d:03:e0:3b:84:7a:9a:fe:1c:33:f1:cd:4b:28:
         6a:6e:f5:af:ad:3f:2b:86:8b:4d:63:f3:c2:d0:f6:70:20:c0:
         8e:0f:dc:4b:79:f5:a8:ec:91:12:a2:7c:8b:6f:30:6a:ce:44:
         4a:ac:89:a0:f0:18:f7:c0:2f:7c:be:71:ce:ee:e7:f8:16:10:
         11:44:c0:9c:16:36:eb:a2:90:e3:30:e4:b7:f4:a4:e0:e2:e0:
         eb:fd:e3:40:74:05:53:b7:c0:99:fa:b6:9e:bb:fc:3b:4d:77:
         ec:98:05:ba:32:42:b2:9f:cd:f8:a4:63:1c:bb:de:3d:42:93:
         af:28:8d:69:9e:74:78:ac:18:bf:d7:bb:e2:52:cd:60:38:7e:
         29:23:f6:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----