Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DA96D/6848737666CD11EEB788AD704AD9E6FC/n10GlKN56yP6tAip1LvVCOGqOSI.mft
File:                     n10GlKN56yP6tAip1LvVCOGqOSI.mft (raw, json)
Hash identifier:          9Liz02rKmyZgRM8UpOwvPGziklURrXkYcFSZ/XdNKas=
Subject key identifier:   1A:1D:24:15:37:31:D1:2A:1D:70:28:2F:A8:28:D0:4C:FB:A7:0D:76
Authority key identifier: 9F:5D:06:94:A3:79:EB:23:FA:B4:08:A9:D4:BB:D5:08:E1:AA:39:22
Certificate issuer:       /CN=F36DA96DRI/serialNumber=9F5D0694A379EB23FAB408A9D4BBD508E1AA3922
Certificate serial:       038D
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/n10GlKN56yP6tAip1LvVCOGqOSI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DA96D/6848737666CD11EEB788AD704AD9E6FC/n10GlKN56yP6tAip1LvVCOGqOSI.mft
Manifest number:          0389
Signing time:             Sun 01 Mar 2026 02:37:35 +0000
Manifest this update:     Sun 01 Mar 2026 02:37:34 +0000
Manifest next update:     Tue 03 Mar 2026 02:37:34 +0000
Files and hashes:         1: n10GlKN56yP6tAip1LvVCOGqOSI.crl (hash: /a1LJ4aZOe+COK1VAXZBmd3kOSI3xdCKNVOicTMEzVY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36DA96D/6848737666CD11EEB788AD704AD9E6FC/n10GlKN56yP6tAip1LvVCOGqOSI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36DA96D/6848737666CD11EEB788AD704AD9E6FC/n10GlKN56yP6tAip1LvVCOGqOSI.mft
                          rsync://rpki.afrinic.net/repository/ripe/n10GlKN56yP6tAip1LvVCOGqOSI.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 03 Mar 2026 00:45:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 909 (0x38d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DA96DRI, serialNumber=9F5D0694A379EB23FAB408A9D4BBD508E1AA3922
        Validity
            Not Before: Mar  1 02:37:34 2026 GMT
            Not After : Mar  3 02:37:34 2026 GMT
        Subject: CN=69a3a66f-89d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:d0:73:34:70:2a:5d:6a:e1:7b:48:bb:27:e5:
                    57:2f:d3:93:2b:60:bc:6a:36:0c:32:f5:5f:5c:5d:
                    41:55:31:67:fc:60:0b:ed:21:4f:a3:c3:a2:d0:73:
                    1b:99:15:3c:c9:ab:09:c2:68:3f:c5:20:4f:6e:91:
                    28:03:2c:a3:c8:41:dc:ae:88:93:a7:3b:8e:3e:ea:
                    7e:6c:d0:aa:14:27:f9:be:37:14:56:90:b7:6d:c9:
                    b7:cc:f0:41:eb:ce:be:e5:a6:7d:b4:c8:0b:3e:45:
                    e0:8f:24:52:97:d0:60:3f:a3:32:1e:cf:18:4d:92:
                    a0:c4:3c:cf:9a:2d:2f:c9:af:f4:36:d3:3c:63:a5:
                    ac:56:90:8b:43:c7:f7:71:08:1d:26:cf:54:31:61:
                    0c:9f:0e:34:3b:cd:5a:43:fb:45:6d:aa:53:3a:23:
                    fa:8d:80:e5:e4:89:78:f2:71:43:63:03:0a:1e:29:
                    9e:cd:d5:ea:cf:a9:54:cb:70:fc:0d:81:45:62:d6:
                    c0:27:d4:c0:78:d5:f1:51:1a:b5:55:7c:4e:49:2a:
                    ca:31:a2:34:a2:38:25:61:70:fa:65:33:5f:44:df:
                    f1:09:55:d0:76:02:06:1c:69:b2:26:eb:b9:cd:46:
                    ba:a6:00:6c:06:b0:4d:85:99:be:cd:b6:06:a5:0b:
                    10:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:1D:24:15:37:31:D1:2A:1D:70:28:2F:A8:28:D0:4C:FB:A7:0D:76
            X509v3 Authority Key Identifier:
                keyid:9F:5D:06:94:A3:79:EB:23:FA:B4:08:A9:D4:BB:D5:08:E1:AA:39:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DA96D/6848737666CD11EEB788AD704AD9E6FC/n10GlKN56yP6tAip1LvVCOGqOSI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/n10GlKN56yP6tAip1LvVCOGqOSI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DA96D/6848737666CD11EEB788AD704AD9E6FC/n10GlKN56yP6tAip1LvVCOGqOSI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:08:c9:9a:c1:e8:69:7f:cc:df:d6:45:54:e4:e2:f3:2e:9b:
         9e:c5:0e:0d:ec:b1:77:d1:c3:55:c4:00:4b:a4:14:ee:1b:ce:
         90:44:fe:7f:ac:5f:9a:fe:97:29:6e:3c:5d:5f:83:3c:76:90:
         39:c9:be:8f:39:43:11:d2:d2:8d:3b:3f:49:44:60:a1:bb:16:
         bd:2d:47:3e:ca:dd:bd:01:6d:de:b8:45:a4:db:ca:ff:a5:67:
         8e:7c:e3:74:5b:e8:e7:f8:4d:8e:4e:50:8f:ef:bf:8c:7f:fe:
         3d:a9:ac:80:91:d7:5c:71:c7:16:60:fc:9c:f9:77:9b:0e:28:
         21:15:53:fb:b0:22:c4:4f:b3:91:b3:f3:67:0a:08:58:68:27:
         8c:e3:b7:ad:cc:26:96:7e:77:3d:fb:93:f7:68:2c:3d:d8:22:
         be:c7:79:e9:65:e0:d5:32:dd:72:ea:7c:90:4c:c3:bb:2c:c5:
         19:17:13:94:9c:9c:0e:8c:7a:3a:8d:37:2f:15:ec:0a:d1:40:
         f7:d7:d0:58:d9:e5:e4:e5:b8:13:ff:46:0b:0d:92:49:c3:e1:
         f7:62:33:4a:8d:6d:d6:50:f9:a5:02:15:dc:38:b1:53:00:5b:
         ca:fb:54:4d:86:63:78:24:0d:b7:b3:b8:73:2e:30:4d:b4:f2:
         1a:38:21:58
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICA40wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
REE5NkRSSTExMC8GA1UEBRMoOUY1RDA2OTRBMzc5RUIyM0ZBQjQwOEE5RDRCQkQ1
MDhFMUFBMzkyMjAeFw0yNjAzMDEwMjM3MzRaFw0yNjAzMDMwMjM3MzRaMBgxFjAU
BgNVBAMTDTY5YTNhNjZmLTg5ZDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDS0HM0cCpdauF7SLsn5Vcv05MrYLxqNgwy9V9cXUFVMWf8YAvtIU+jw6LQ
cxuZFTzJqwnCaD/FIE9ukSgDLKPIQdyuiJOnO44+6n5s0KoUJ/m+NxRWkLdtybfM
8EHrzr7lpn20yAs+ReCPJFKX0GA/ozIezxhNkqDEPM+aLS/Jr/Q20zxjpaxWkItD
x/dxCB0mz1QxYQyfDjQ7zVpD+0VtqlM6I/qNgOXkiXjycUNjAwoeKZ7N1erPqVTL
cPwNgUVi1sAn1MB41fFRGrVVfE5JKsoxojSiOCVhcPplM19E3/EJVdB2AgYcabIm
67nNRrqmAGwGsE2Fmb7NtgalCxBZAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUGh0k
FTcx0SodcCgvqCjQTPunDXYwHwYDVR0jBBgwFoAUn10GlKN56yP6tAip1LvVCOGq
OSIwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkRBOTZELzY4NDg3Mzc2NjZDRDExRUVCNzg4QUQ3MDRBRDlFNkZDL24xMEds
S041NnlQNnRBaXAxTHZWQ09HcU9TSS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9yaXBl
L24xMEdsS041NnlQNnRBaXAxTHZWQ09HcU9TSS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2REE5NkQvNjg0ODczNzY2NkNEMTFFRUI3ODhBRDcwNEFEOUU2
RkMvbjEwR2xLTjU2eVA2dEFpcDFMdlZDT0dxT1NJLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBgCMmawehpf8zf1kVU5OLzLpuexQ4N7LF3
0cNVxABLpBTuG86QRP5/rF+a/pcpbjxdX4M8dpA5yb6POUMR0tKNOz9JRGChuxa9
LUc+yt29AW3euEWk28r/pWeOfON0W+jn+E2OTlCP77+Mf/49qayAkddccccWYPyc
+XebDighFVP7sCLET7ORs/NnCghYaCeM47etzCaWfnc9+5P3aCw92CK+x3npZeDV
Mt1y6nyQTMO7LMUZFxOUnJwOjHo6jTcvFewK0UD319BY2eXk5bgT/0YLDZJJw+H3
YjNKjW3WUPmlAhXcOLFTAFvK+1RNhmN4JA23s7hzLjBNtPIaOCFY
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:27:07 2026 by rpki-client