Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DE42D/CC9AA0E641DA11EEB03EBE374AD9E6FC/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.mft
File:                     nYXa0C_Bd6QOm5BwI3BvP5d0TaA.mft (raw, json)
Hash identifier:          Gl0+d8kpBQnQ896R4dyidINqmM+MCVwPnhv3LPeNI6g=
Subject key identifier:   C3:EA:34:43:C2:CC:DA:B7:DA:B3:78:70:1F:50:0A:57:20:31:36:4B
Authority key identifier: 9D:85:DA:D0:2F:C1:77:A4:0E:9B:90:70:23:70:6F:3F:97:74:4D:A0
Certificate issuer:       /CN=F36DE42DRI/serialNumber=9D85DAD02FC177A40E9B907023706F3F97744DA0
Certificate serial:       02E7
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DE42D/CC9AA0E641DA11EEB03EBE374AD9E6FC/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.mft
Manifest number:          02E6
Signing time:             Sun 10 Aug 2025 04:07:14 +0000
Manifest this update:     Sun 10 Aug 2025 04:07:13 +0000
Manifest next update:     Tue 12 Aug 2025 04:07:13 +0000
Files and hashes:         1: nYXa0C_Bd6QOm5BwI3BvP5d0TaA.crl (hash: 0PfvplVGjL8mX35uOUOr+Olz/xBwxEWvdb+BRKa4CT4=)
                          2: CC9C343441E311EEA3DA33544AD9E6FC.roa (hash: O2w06Y8bPWrlQlM0KiCR/CDJJh42Y1TIJDGWDlX/VL0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36DE42D/CC9AA0E641DA11EEB03EBE374AD9E6FC/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36DE42D/CC9AA0E641DA11EEB03EBE374AD9E6FC/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.mft
                          rsync://rpki.afrinic.net/repository/ripe/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 12 Aug 2025 00:45:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 743 (0x2e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DE42DRI, serialNumber=9D85DAD02FC177A40E9B907023706F3F97744DA0
        Validity
            Not Before: Aug 10 04:07:13 2025 GMT
            Not After : Aug 12 04:07:13 2025 GMT
        Subject: CN=68981af2-13bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ec:13:75:97:bc:f4:5d:b0:62:56:21:04:08:
                    4d:21:62:e7:cd:a7:4b:de:62:44:27:3b:93:27:d1:
                    a9:16:bc:e0:88:c6:96:17:b3:68:80:fd:cb:68:21:
                    7f:9e:d5:8e:64:0b:1c:1c:86:ce:8c:7e:eb:d1:59:
                    a0:a0:68:e3:6d:71:2b:12:d3:52:40:14:50:20:29:
                    1c:ad:1b:be:e2:b4:dc:74:a5:99:ac:42:97:6e:55:
                    5b:2b:07:69:64:b6:8a:f1:2f:6f:d6:12:d8:5c:08:
                    04:a6:8e:7b:17:19:b6:9d:df:8e:83:5e:e2:a8:77:
                    e9:e4:a4:d7:f7:c0:57:b4:68:58:50:11:39:b7:cc:
                    65:e2:35:ac:b5:9e:8e:69:bc:e1:3e:d6:25:05:97:
                    06:d0:18:52:53:ea:b3:82:1d:83:89:3f:93:88:5b:
                    26:8f:b8:df:44:84:45:b1:15:d3:f0:a5:67:d6:c9:
                    eb:ed:0e:40:d5:0c:6b:cc:9b:b6:f0:1d:55:7f:7c:
                    f5:c1:85:81:95:4d:e4:a4:ac:12:02:c2:74:57:73:
                    00:78:d3:9c:86:73:4d:35:4d:12:32:e3:c8:d2:06:
                    0f:10:5a:a8:2f:61:6c:bd:73:67:af:4a:bb:38:a6:
                    a1:e6:dc:c6:67:24:16:aa:71:a5:15:00:4a:db:71:
                    53:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:EA:34:43:C2:CC:DA:B7:DA:B3:78:70:1F:50:0A:57:20:31:36:4B
            X509v3 Authority Key Identifier:
                keyid:9D:85:DA:D0:2F:C1:77:A4:0E:9B:90:70:23:70:6F:3F:97:74:4D:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DE42D/CC9AA0E641DA11EEB03EBE374AD9E6FC/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DE42D/CC9AA0E641DA11EEB03EBE374AD9E6FC/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:bb:5b:10:a9:2f:7e:96:ce:e6:98:43:be:96:cf:74:fa:76:
         62:a2:03:24:20:10:7b:30:2e:ed:e7:19:49:99:87:c7:f3:9e:
         04:48:90:bf:a1:ba:90:54:e0:54:85:fa:47:25:96:41:86:1a:
         c5:56:b8:7b:4c:19:2a:5b:16:8d:c5:6e:d3:14:51:bd:f6:e4:
         fd:60:4e:c6:b7:99:87:f0:a2:a4:67:28:5d:48:1b:c3:03:d8:
         f5:b1:b1:53:fc:46:b7:ae:e5:f4:da:3c:45:69:29:33:31:51:
         64:c5:c7:33:3d:34:e5:70:a8:dd:76:29:f1:e5:3b:59:10:66:
         bd:48:b7:7f:b9:d2:1a:07:db:97:cb:66:2b:4d:de:3d:ff:66:
         55:31:b6:9f:85:4c:66:ed:27:40:36:79:52:b0:f9:12:88:e7:
         72:aa:16:8d:b9:a4:52:71:0e:d9:0c:83:ff:18:67:69:38:cb:
         84:1b:9d:38:5d:3f:0a:c2:be:09:71:70:77:ab:84:b6:09:d8:
         90:31:3a:b4:e8:02:6e:15:e5:f4:0c:e4:44:ab:08:3c:f5:05:
         34:b5:56:e5:f9:ab:e9:e7:6b:2b:e1:db:a3:0b:d0:64:7e:89:
         5b:a7:57:2b:bb:3c:d7:9f:91:3d:3c:ef:78:db:53:33:a8:d7:
         76:a4:52:02
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICAucwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
REU0MkRSSTExMC8GA1UEBRMoOUQ4NURBRDAyRkMxNzdBNDBFOUI5MDcwMjM3MDZG
M0Y5Nzc0NERBMDAeFw0yNTA4MTAwNDA3MTNaFw0yNTA4MTIwNDA3MTNaMBgxFjAU
BgNVBAMTDTY4OTgxYWYyLTEzYmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCk7BN1l7z0XbBiViEECE0hYufNp0veYkQnO5Mn0akWvOCIxpYXs2iA/cto
IX+e1Y5kCxwchs6MfuvRWaCgaONtcSsS01JAFFAgKRytG77itNx0pZmsQpduVVsr
B2lktorxL2/WEthcCASmjnsXGbad346DXuKod+nkpNf3wFe0aFhQETm3zGXiNay1
no5pvOE+1iUFlwbQGFJT6rOCHYOJP5OIWyaPuN9EhEWxFdPwpWfWyevtDkDVDGvM
m7bwHVV/fPXBhYGVTeSkrBICwnRXcwB405yGc001TRIy48jSBg8QWqgvYWy9c2ev
Srs4pqHm3MZnJBaqcaUVAErbcVNDAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUw+o0
Q8LM2rfas3hwH1AKVyAxNkswHwYDVR0jBBgwFoAUnYXa0C/Bd6QOm5BwI3BvP5d0
TaAwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkRFNDJEL0NDOUFBMEU2NDFEQTExRUVCMDNFQkUzNzRBRDlFNkZDL25ZWGEw
Q19CZDZRT201QndJM0J2UDVkMFRhQS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9yaXBl
L25ZWGEwQ19CZDZRT201QndJM0J2UDVkMFRhQS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2REU0MkQvQ0M5QUEwRTY0MURBMTFFRUIwM0VCRTM3NEFEOUU2
RkMvbllYYTBDX0JkNlFPbTVCd0kzQnZQNWQwVGFBLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAiu1sQqS9+ls7mmEO+ls90+nZiogMkIBB7
MC7t5xlJmYfH854ESJC/obqQVOBUhfpHJZZBhhrFVrh7TBkqWxaNxW7TFFG99uT9
YE7Gt5mH8KKkZyhdSBvDA9j1sbFT/Ea3ruX02jxFaSkzMVFkxcczPTTlcKjddinx
5TtZEGa9SLd/udIaB9uXy2YrTd49/2ZVMbafhUxm7SdANnlSsPkSiOdyqhaNuaRS
cQ7ZDIP/GGdpOMuEG504XT8Kwr4JcXB3q4S2CdiQMTq06AJuFeX0DOREqwg89QU0
tVbl+avp52sr4dujC9Bkfolbp1cruzzXn5E9PO9421MzqNd2pFIC
-----END CERTIFICATE-----
Generated at Sun Aug 10 20:58:57 2025 by rpki-client