Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DE42D/CC9AA0E641DA11EEB03EBE374AD9E6FC/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.mft
File:                     nYXa0C_Bd6QOm5BwI3BvP5d0TaA.mft (raw, json)
Hash identifier:          3SK4ItmH4o65wwllhYFFej4d54yTySjAi76LsqYr1cg=
Subject key identifier:   50:FF:64:21:A3:67:16:8A:0D:82:6A:CE:AE:DD:FE:2B:6C:4F:8D:58
Authority key identifier: 9D:85:DA:D0:2F:C1:77:A4:0E:9B:90:70:23:70:6F:3F:97:74:4D:A0
Certificate issuer:       /CN=F36DE42DRI/serialNumber=9D85DAD02FC177A40E9B907023706F3F97744DA0
Certificate serial:       03B6
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DE42D/CC9AA0E641DA11EEB03EBE374AD9E6FC/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.mft
Manifest number:          03B5
Signing time:             Mon 02 Mar 2026 02:35:49 +0000
Manifest this update:     Mon 02 Mar 2026 02:35:48 +0000
Manifest next update:     Wed 04 Mar 2026 02:35:48 +0000
Files and hashes:         1: nYXa0C_Bd6QOm5BwI3BvP5d0TaA.crl (hash: Kvvv3j5DgLQ8yup6g1czfUecygKPDPh48KGr0vOBak0=)
                          2: CC9C343441E311EEA3DA33544AD9E6FC.roa (hash: O2w06Y8bPWrlQlM0KiCR/CDJJh42Y1TIJDGWDlX/VL0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36DE42D/CC9AA0E641DA11EEB03EBE374AD9E6FC/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36DE42D/CC9AA0E641DA11EEB03EBE374AD9E6FC/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.mft
                          rsync://rpki.afrinic.net/repository/ripe/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Mar 2026 00:45:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 950 (0x3b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DE42DRI, serialNumber=9D85DAD02FC177A40E9B907023706F3F97744DA0
        Validity
            Not Before: Mar  2 02:35:48 2026 GMT
            Not After : Mar  4 02:35:48 2026 GMT
        Subject: CN=69a4f784-b425
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ce:02:cf:4c:32:68:45:ad:4a:5b:26:a5:17:
                    dc:77:36:c1:c5:d7:34:a8:1e:54:19:fe:08:a5:51:
                    cf:0b:a3:39:37:14:a5:39:06:13:6a:6d:0e:36:07:
                    20:7b:97:f6:1c:6a:4d:69:94:c0:60:cf:07:e4:4e:
                    0a:3d:e3:44:74:f3:86:55:2d:4e:01:b0:0f:8e:3e:
                    e0:50:55:47:b4:32:b1:f8:f2:10:78:3a:f3:12:b0:
                    21:3e:fd:41:8f:75:fa:d1:4e:db:18:97:dd:28:c9:
                    b8:43:d3:15:65:c3:fa:58:4c:9d:01:ca:b0:9f:25:
                    d3:09:61:5e:55:8f:f6:95:3f:33:d5:5b:64:c7:b5:
                    90:8f:68:d0:84:d5:2e:e8:37:09:64:f1:33:fd:f9:
                    53:a0:91:9f:6a:b3:70:7e:4b:85:fd:99:9d:ce:3e:
                    94:58:c3:57:7f:8e:dc:b8:29:94:0b:71:4f:3e:05:
                    15:55:aa:15:63:dd:70:5a:00:01:8a:83:e1:5a:c3:
                    78:2a:59:22:8c:54:88:ef:1c:3a:55:c9:bb:71:0b:
                    c4:40:f4:ad:bf:4b:07:f8:10:95:93:91:09:54:e7:
                    d8:59:7c:f4:a7:24:27:63:18:e8:47:88:be:3f:94:
                    fa:be:a7:2c:f5:37:ac:38:9e:41:51:2d:79:fe:9a:
                    53:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:FF:64:21:A3:67:16:8A:0D:82:6A:CE:AE:DD:FE:2B:6C:4F:8D:58
            X509v3 Authority Key Identifier:
                keyid:9D:85:DA:D0:2F:C1:77:A4:0E:9B:90:70:23:70:6F:3F:97:74:4D:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DE42D/CC9AA0E641DA11EEB03EBE374AD9E6FC/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DE42D/CC9AA0E641DA11EEB03EBE374AD9E6FC/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:a5:f7:1d:7c:ac:2e:ee:0f:ab:6e:66:6b:e6:48:c2:51:bd:
         8a:6c:7a:99:53:10:48:6c:36:61:2c:aa:0b:0d:bd:4e:fd:4e:
         af:d8:fd:86:5d:e0:5c:0f:bf:07:21:01:48:48:36:71:d5:7b:
         89:7f:4c:73:ca:92:d6:85:f3:06:93:5a:dc:97:f3:7f:04:8b:
         45:ac:17:25:45:8a:a5:f3:2e:7e:f6:f0:01:73:d3:90:da:14:
         ab:63:41:e5:5a:ab:a3:46:b5:4b:d9:29:33:c1:19:f6:ec:c8:
         89:2e:57:b5:bd:27:3a:61:4f:9b:37:78:b4:d6:07:df:0d:8c:
         ff:2b:40:c6:d8:e0:42:02:0e:73:0b:be:6a:f0:7d:4c:b3:48:
         04:46:bf:6d:6a:be:01:b6:fb:83:12:e8:89:e7:2d:21:4d:25:
         af:5d:0e:eb:0d:88:ec:a3:8d:41:a1:90:9c:1d:c0:5b:1f:72:
         a5:7f:34:a0:a0:9e:94:a6:6e:58:74:a2:67:05:b4:28:6f:13:
         0c:c9:72:31:6d:26:94:af:d0:e6:87:df:d5:10:29:a9:b5:8d:
         df:a0:2a:2c:22:66:92:dd:85:50:0e:d0:5d:20:92:0d:3b:1a:
         f9:36:1f:c4:de:9e:fd:c1:8e:70:3b:a9:d1:94:b0:9a:d0:98:
         fc:86:5b:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:23:32 2026 by rpki-client