Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36E3D54/10D7FDF8077C11F18A9EE389DAE4EC9C/nDG_Ybi28H3SmbmF5zKd-qo84qc.mft
File:                     nDG_Ybi28H3SmbmF5zKd-qo84qc.mft (raw, json)
Hash identifier:          1CKg8/cZfsDmToKoqqNDr8DzfXXJQg5aBhu5p/UIaLo=
Subject key identifier:   BC:C5:C5:37:67:CB:6E:77:8A:36:B7:F9:4C:57:C0:B0:77:2B:7E:31
Authority key identifier: 9C:31:BF:61:B8:B6:F0:7D:D2:99:B9:85:E7:32:9D:FA:AA:3C:E2:A7
Certificate issuer:       /CN=F36E3D54AF/serialNumber=9C31BF61B8B6F07DD299B985E7329DFAAA3CE2A7
Certificate serial:       E4
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/nDG_Ybi28H3SmbmF5zKd-qo84qc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E3D54/10D7FDF8077C11F18A9EE389DAE4EC9C/nDG_Ybi28H3SmbmF5zKd-qo84qc.mft
Manifest number:          E2
Signing time:             Mon 21 Sep 2026 05:27:02 +0000
Manifest this update:     Mon 21 Sep 2026 05:27:01 +0000
Manifest next update:     Wed 23 Sep 2026 05:27:01 +0000
Files and hashes:         1: nDG_Ybi28H3SmbmF5zKd-qo84qc.crl (hash: XLG+WmyXoiRugRtQYGd41PgvEKsxAsizppam16AvtJ0=)
                          2: FCE69F10077C11F1B6D7578EDAE4EC9C.roa (hash: l9w1XT16v5pOs6ZmyalOJI7UHw3oAkl12LArNgvLDY8=)
                          3: D03272A4077D11F1B2E27D92DAE4EC9C.roa (hash: MNGXrpINz1Q16hHZ2N8QvRAzr2kMre4hq/Y0Tbq6HLY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E3D54/10D7FDF8077C11F18A9EE389DAE4EC9C/nDG_Ybi28H3SmbmF5zKd-qo84qc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E3D54/10D7FDF8077C11F18A9EE389DAE4EC9C/nDG_Ybi28H3SmbmF5zKd-qo84qc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/nDG_Ybi28H3SmbmF5zKd-qo84qc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 05:27:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 228 (0xe4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E3D54AF, serialNumber=9C31BF61B8B6F07DD299B985E7329DFAAA3CE2A7
        Validity
            Not Before: Sep 21 05:27:01 2026 GMT
            Not After : Sep 23 05:27:01 2026 GMT
        Subject: CN=6ab0c026-a094
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:ce:46:84:d4:40:19:66:87:fa:88:a0:7e:ae:
                    52:9f:ce:25:73:2c:99:df:31:68:88:f5:07:8b:57:
                    af:51:c5:e9:21:62:4f:19:ea:76:9d:33:0f:cc:28:
                    51:32:31:1a:8e:23:0a:66:49:28:22:23:32:bc:f0:
                    37:ec:b3:d8:02:f5:c3:fa:c3:5d:af:ff:5d:40:6a:
                    ff:ad:9b:25:bb:98:eb:1d:c7:18:74:27:d8:ec:e3:
                    2b:c1:1c:e8:83:a5:5a:34:f5:4c:d7:5a:ed:68:d2:
                    03:e5:61:73:e6:53:f0:f1:e5:ec:3a:a8:c7:fd:e8:
                    0a:53:88:92:28:2b:b3:ac:2c:ea:30:04:02:3d:ea:
                    63:72:9d:1f:84:ba:9d:a1:39:07:3e:06:41:55:a4:
                    20:20:78:3f:db:98:79:d2:5e:5c:d0:82:a6:a2:5f:
                    6e:a3:00:60:52:81:b3:7a:45:91:7b:4f:e6:3f:f3:
                    1c:b6:e3:f9:b1:3b:b4:01:60:60:2e:9b:cb:a2:46:
                    e8:f4:e4:f8:d9:c4:61:4b:91:bf:8b:43:63:b5:8c:
                    a7:e0:42:12:53:67:93:9e:32:2b:72:61:e4:f0:06:
                    54:be:ec:95:ac:fa:7e:44:8c:7c:d0:46:73:d7:34:
                    f9:39:7f:2e:cf:37:b9:83:cf:56:97:ed:cb:83:58:
                    88:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:C5:C5:37:67:CB:6E:77:8A:36:B7:F9:4C:57:C0:B0:77:2B:7E:31
            X509v3 Authority Key Identifier:
                keyid:9C:31:BF:61:B8:B6:F0:7D:D2:99:B9:85:E7:32:9D:FA:AA:3C:E2:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E3D54/10D7FDF8077C11F18A9EE389DAE4EC9C/nDG_Ybi28H3SmbmF5zKd-qo84qc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/nDG_Ybi28H3SmbmF5zKd-qo84qc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E3D54/10D7FDF8077C11F18A9EE389DAE4EC9C/nDG_Ybi28H3SmbmF5zKd-qo84qc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:ed:92:04:a6:60:a7:97:10:68:87:6d:e6:47:b8:9b:36:24:
         60:b1:ad:3a:43:16:1b:7f:75:c0:6c:29:64:80:92:d1:ae:83:
         51:79:96:44:5c:42:55:bb:d2:dc:dc:e5:bb:ee:cb:8b:a2:40:
         37:03:aa:72:1d:43:1b:b6:56:63:e2:46:4c:03:77:2b:6f:73:
         c9:81:58:51:62:16:e1:c9:4c:2d:44:41:fc:d6:0e:c2:fc:9e:
         8c:b3:cd:4c:a0:30:7e:2c:f0:72:55:36:ee:22:58:ce:6e:6e:
         a8:9c:ce:4a:97:70:79:14:8f:a1:40:14:46:05:26:b8:28:e6:
         7a:85:08:37:c7:19:96:ac:dd:97:15:ca:7f:00:44:0a:4a:2c:
         72:23:94:97:d4:c1:b5:83:eb:aa:fb:a0:dc:24:96:36:b3:ea:
         9f:43:e3:29:73:07:5e:15:7b:27:93:21:fd:44:26:97:b8:e2:
         d0:e9:f0:2a:d7:21:f9:f4:e1:7a:ba:0b:fa:71:ba:86:8e:04:
         ac:14:9a:ad:59:71:ee:4a:2a:ff:65:05:ae:58:b4:d3:fd:24:
         d4:b7:53:08:f0:33:2c:e0:00:b5:ee:ce:0e:6b:6f:c5:87:d0:
         51:8b:2f:01:9a:0c:46:e5:f4:ef:b4:45:2f:2a:91:cd:c3:a0:
         f6:d9:a4:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----