Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36DE42D/CC9AA0E641DA11EEB03EBE374AD9E6FC/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.mft
File:                     nYXa0C_Bd6QOm5BwI3BvP5d0TaA.mft (raw, json)
Hash identifier:          EIaV07njmIBQbqK5L516Sg19oyQfAfED3PP5Zkwokyg=
Subject key identifier:   77:D8:41:8D:8F:34:96:2F:9C:CF:EC:FB:6E:FB:3C:56:08:25:D6:54
Authority key identifier: 9D:85:DA:D0:2F:C1:77:A4:0E:9B:90:70:23:70:6F:3F:97:74:4D:A0
Certificate issuer:       /CN=F36DE42DRI/serialNumber=9D85DAD02FC177A40E9B907023706F3F97744DA0
Certificate serial:       0495
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DE42D/CC9AA0E641DA11EEB03EBE374AD9E6FC/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.mft
Manifest number:          0494
Signing time:             Sun 11 Oct 2026 03:41:49 +0000
Manifest this update:     Sun 11 Oct 2026 03:41:48 +0000
Manifest next update:     Tue 13 Oct 2026 03:41:48 +0000
Files and hashes:         1: nYXa0C_Bd6QOm5BwI3BvP5d0TaA.crl (hash: J8UyY/9GKVAvfKiVT6bzFjm6MNd+CB24eZpDyljY7x4=)
                          2: CC9C343441E311EEA3DA33544AD9E6FC.roa (hash: O2w06Y8bPWrlQlM0KiCR/CDJJh42Y1TIJDGWDlX/VL0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36DE42D/CC9AA0E641DA11EEB03EBE374AD9E6FC/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36DE42D/CC9AA0E641DA11EEB03EBE374AD9E6FC/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.mft
                          rsync://rpki.afrinic.net/repository/ripe/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:45:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1173 (0x495)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DE42DRI, serialNumber=9D85DAD02FC177A40E9B907023706F3F97744DA0
        Validity
            Not Before: Oct 11 03:41:48 2026 GMT
            Not After : Oct 13 03:41:48 2026 GMT
        Subject: CN=6acb057d-97c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:eb:05:98:77:56:fa:a2:2d:a6:1f:c3:9d:60:
                    a5:e2:ba:b7:d1:e6:bd:72:a7:d3:f1:50:d2:bb:2f:
                    30:e3:6e:53:0f:b5:2d:ae:28:b8:17:ca:fe:03:7d:
                    97:01:eb:80:5f:9a:80:16:f9:b3:4f:8d:6e:24:26:
                    34:87:c1:62:8a:55:95:1b:53:1e:6c:b2:18:e9:6a:
                    b3:65:57:69:20:70:79:4b:e9:e8:c5:12:a4:8c:b1:
                    5a:5f:cb:83:30:d6:fe:56:78:6f:5b:a9:94:d1:30:
                    4f:d8:fc:60:dc:73:c9:cb:71:2c:6e:00:90:15:90:
                    a2:d0:55:b0:79:76:ba:b2:2b:a5:08:c6:89:22:1a:
                    34:1f:4a:0b:a4:1e:6a:1e:93:84:34:b8:d8:10:11:
                    09:df:18:88:cb:30:c9:b5:8f:56:5c:7a:40:da:4e:
                    8b:e7:92:3d:01:48:88:18:d7:1e:69:c8:eb:0d:57:
                    81:40:7e:88:71:a9:97:ee:fd:43:bc:94:85:c7:9e:
                    ca:32:12:a3:7d:fe:6a:e7:ca:bb:34:20:47:81:76:
                    ab:64:91:ac:96:2f:21:67:07:ac:83:3d:af:06:91:
                    33:87:e5:9a:22:d3:e5:1f:87:2e:82:c1:d0:ca:3c:
                    0f:07:0f:7a:91:67:c9:58:b5:87:7c:ba:14:a9:c9:
                    0c:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:D8:41:8D:8F:34:96:2F:9C:CF:EC:FB:6E:FB:3C:56:08:25:D6:54
            X509v3 Authority Key Identifier:
                keyid:9D:85:DA:D0:2F:C1:77:A4:0E:9B:90:70:23:70:6F:3F:97:74:4D:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DE42D/CC9AA0E641DA11EEB03EBE374AD9E6FC/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DE42D/CC9AA0E641DA11EEB03EBE374AD9E6FC/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:10:f6:6f:c4:b9:27:0f:8f:77:11:af:1e:f1:06:71:67:42:
         28:69:5b:c9:1d:0f:1d:3c:7d:f0:73:de:0d:72:62:d8:ff:42:
         a0:0b:a9:9d:ec:d4:93:14:cf:c4:54:67:dd:5b:6d:92:f4:06:
         2b:08:60:5a:07:78:80:6b:f2:f4:38:4c:3f:c7:1c:92:14:97:
         9f:fc:57:3c:76:2d:81:c8:17:cb:be:17:02:02:fa:d1:d8:22:
         37:b7:53:37:f5:75:0d:b6:4a:e8:e1:9e:65:91:b2:09:1b:bc:
         fe:a2:ff:a2:e4:fa:16:a8:fd:e2:65:18:83:3d:47:b8:b5:b4:
         ce:46:bd:d7:ea:ad:7f:1a:6a:bf:5d:30:52:98:ca:07:41:39:
         ff:53:84:a1:99:16:a1:b7:6e:b0:38:41:ab:5d:79:da:cf:3e:
         5b:28:f2:0b:49:c1:0d:b2:ad:1b:76:c8:69:29:a1:5c:7c:39:
         de:73:71:da:04:22:ed:dc:3b:fa:e0:bf:4f:ae:e8:f9:2a:b4:
         13:8d:1d:76:bf:d7:8d:90:d8:40:b5:d8:5b:52:3f:33:2e:7c:
         ce:a7:37:a1:00:d9:cc:d4:ec:44:c0:f6:15:ce:02:c4:70:5f:
         61:bb:36:05:a6:54:1c:ba:a6:fd:5e:15:e9:4f:bd:d4:1d:99:
         38:c0:fc:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----