Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E558E/A29897C88CEF11F08BB0D17CDAE4EC9C/ShihNoN8fkklQFrLpOOnPS4t9d4.mft
File:                     ShihNoN8fkklQFrLpOOnPS4t9d4.mft (raw, json)
Hash identifier:          WWjRrYAyvdF3gvKqQ5SttiEXPFLedhTAUx9yBSnxkjc=
Subject key identifier:   64:E7:56:36:8C:1C:18:81:35:62:77:98:1C:BC:6E:B6:67:16:41:AF
Authority key identifier: 4A:18:A1:36:83:7C:7E:49:25:40:5A:CB:A4:E3:A7:3D:2E:2D:F5:DE
Certificate issuer:       /CN=F36E558ERI/serialNumber=4A18A136837C7E4925405ACBA4E3A73D2E2DF5DE
Certificate serial:       3C
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/ShihNoN8fkklQFrLpOOnPS4t9d4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E558E/A29897C88CEF11F08BB0D17CDAE4EC9C/ShihNoN8fkklQFrLpOOnPS4t9d4.mft
Manifest number:          3C
Signing time:             Wed 05 Nov 2025 05:43:09 +0000
Manifest this update:     Wed 05 Nov 2025 05:43:08 +0000
Manifest next update:     Fri 07 Nov 2025 05:43:08 +0000
Files and hashes:         1: ShihNoN8fkklQFrLpOOnPS4t9d4.crl (hash: YRl84l3pHWlp7lAkj5lic3KXQh5wItlw9KwIQneFLOc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E558E/A29897C88CEF11F08BB0D17CDAE4EC9C/ShihNoN8fkklQFrLpOOnPS4t9d4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E558E/A29897C88CEF11F08BB0D17CDAE4EC9C/ShihNoN8fkklQFrLpOOnPS4t9d4.mft
                          rsync://rpki.afrinic.net/repository/ripe/ShihNoN8fkklQFrLpOOnPS4t9d4.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 07 Nov 2025 00:45:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 60 (0x3c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E558ERI, serialNumber=4A18A136837C7E4925405ACBA4E3A73D2E2DF5DE
        Validity
            Not Before: Nov  5 05:43:08 2025 GMT
            Not After : Nov  7 05:43:08 2025 GMT
        Subject: CN=690ae3ed-c9a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a4:b3:df:50:27:ef:18:1c:16:8b:86:20:11:
                    b4:65:6e:fa:ca:f1:e9:10:24:0d:fb:da:e6:b6:89:
                    31:78:a8:76:b1:07:4b:2f:f0:a1:d4:02:c5:28:56:
                    53:6a:f8:61:6e:9a:89:5c:f1:f7:50:7a:6a:60:86:
                    e8:e3:6e:8b:6e:f5:f4:5e:73:b6:c5:56:4b:19:60:
                    11:a7:63:da:3e:3c:6b:e3:62:98:c3:2f:e1:9b:b3:
                    a3:e7:93:1e:5c:e6:98:3b:fa:56:f0:31:d9:ff:7e:
                    f1:0b:76:73:8a:da:28:2e:1a:69:62:03:ca:7c:bc:
                    8e:be:ee:7c:0f:13:b7:29:2e:49:9a:7e:b2:89:c6:
                    fc:69:7a:f9:4a:b2:ba:70:e3:9b:89:63:a7:05:b3:
                    8e:4c:ba:d6:40:e9:3e:ee:8c:a7:9a:4a:e3:37:81:
                    62:fd:26:8b:98:ab:5a:ef:17:27:82:13:fe:ef:d7:
                    7c:90:dc:4c:55:0d:e4:15:c6:fd:b3:43:a7:ff:a1:
                    bf:17:70:52:e6:57:e2:eb:10:b3:84:12:e4:6c:0f:
                    1f:5c:9f:8d:69:60:b0:46:5f:36:4e:67:b4:0d:67:
                    88:2f:a0:52:90:34:c2:18:94:15:9a:de:95:10:66:
                    82:27:db:25:63:88:3f:4f:21:5b:2e:b5:4d:60:b4:
                    9a:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:E7:56:36:8C:1C:18:81:35:62:77:98:1C:BC:6E:B6:67:16:41:AF
            X509v3 Authority Key Identifier:
                keyid:4A:18:A1:36:83:7C:7E:49:25:40:5A:CB:A4:E3:A7:3D:2E:2D:F5:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E558E/A29897C88CEF11F08BB0D17CDAE4EC9C/ShihNoN8fkklQFrLpOOnPS4t9d4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/ShihNoN8fkklQFrLpOOnPS4t9d4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E558E/A29897C88CEF11F08BB0D17CDAE4EC9C/ShihNoN8fkklQFrLpOOnPS4t9d4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:90:cc:72:a0:c3:ce:a2:f3:7e:8b:be:79:69:c5:03:c8:d1:
         75:c9:b3:09:00:40:9e:94:91:be:b8:51:2b:14:1b:5d:e5:ec:
         24:8e:26:33:fe:ac:e2:3d:43:aa:d0:33:6b:36:12:91:d8:50:
         34:8b:38:96:2a:0f:4a:42:7a:0d:3d:01:1a:ee:7e:6b:ba:f0:
         d8:15:e6:4f:cb:f0:a8:d8:0f:3f:f2:e8:ee:3d:cd:2e:20:fb:
         56:1b:98:79:b8:f5:d5:cf:76:10:3f:32:b8:5c:71:1f:c2:26:
         37:2d:75:31:e6:4e:c4:98:ff:f3:81:76:bf:0b:68:76:b0:d2:
         fe:20:34:8e:0a:f6:6f:2d:b2:3a:8c:c9:47:ee:cd:ab:f6:ac:
         91:dc:ea:c7:b3:e8:6d:6a:0d:f0:d9:8f:71:35:f7:28:dd:a1:
         be:8b:6f:db:c7:bd:5b:cc:0a:9a:55:eb:e7:b6:df:0a:b7:1b:
         e5:5d:0b:69:75:97:6e:85:5e:20:13:79:e2:b1:fd:ce:2d:71:
         40:27:64:1a:a4:5e:22:a6:25:99:70:c0:63:d8:31:e3:38:09:
         0a:e4:37:94:d3:5e:60:ba:27:fc:54:55:d6:ec:fa:13:43:c8:
         81:97:44:96:d1:74:ef:26:38:9a:12:ec:d6:50:8f:01:e2:c9:
         ae:74:e3:29
-----BEGIN CERTIFICATE-----
MIIFkjCCBHqgAwIBAgIBPDANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzZF
NTU4RVJJMTEwLwYDVQQFEyg0QTE4QTEzNjgzN0M3RTQ5MjU0MDVBQ0JBNEUzQTcz
RDJFMkRGNURFMB4XDTI1MTEwNTA1NDMwOFoXDTI1MTEwNzA1NDMwOFowGDEWMBQG
A1UEAxMNNjkwYWUzZWQtYzlhMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMiks99QJ+8YHBaLhiARtGVu+srx6RAkDfva5raJMXiodrEHSy/wodQCxShW
U2r4YW6aiVzx91B6amCG6ONui2719F5ztsVWSxlgEadj2j48a+NimMMv4Zuzo+eT
HlzmmDv6VvAx2f9+8Qt2c4raKC4aaWIDyny8jr7ufA8TtykuSZp+sonG/Gl6+Uqy
unDjm4ljpwWzjky61kDpPu6Mp5pK4zeBYv0mi5irWu8XJ4IT/u/XfJDcTFUN5BXG
/bNDp/+hvxdwUuZX4usQs4QS5GwPH1yfjWlgsEZfNk5ntA1niC+gUpA0whiUFZre
lRBmgifbJWOIP08hWy61TWC0mjcCAwEAAaOCArUwggKxMB0GA1UdDgQWBBRk51Y2
jBwYgTVid5gcvG62ZxZBrzAfBgNVHSMEGDAWgBRKGKE2g3x+SSVAWsuk46c9Li31
3jAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2RTU1OEUvQTI5ODk3Qzg4Q0VGMTFGMDhCQjBEMTdDREFFNEVDOUMvU2hpaE5v
Tjhma2tsUUZyTHBPT25QUzR0OWQ0LmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L3JpcGUv
U2hpaE5vTjhma2tsUUZyTHBPT25QUzR0OWQ0LmNlcjBPBgNVHSABAf8ERTBDMEEG
CCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmljLm5l
dC9wb2xpY3kvQ1BTLnBkZjCB1QYIKwYBBQUHAQsEgcgwgcUwgYsGCCsGAQUFBzAL
hn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVw
b3NpdG9yeS9GMzZFNTU4RS9BMjk4OTdDODhDRUYxMUYwOEJCMEQxN0NEQUU0RUM5
Qy9TaGloTm9OOGZra2xRRnJMcE9PblBTNHQ5ZDQubWZ0MDUGCCsGAQUFBzANhilo
dHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEF
BQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwDQYJKoZIhvcNAQELBQADggEBACaQzHKgw86i836LvnlpxQPI0XXJswkAQJ6U
kb64USsUG13l7CSOJjP+rOI9Q6rQM2s2EpHYUDSLOJYqD0pCeg09ARrufmu68NgV
5k/L8KjYDz/y6O49zS4g+1YbmHm49dXPdhA/MrhccR/CJjctdTHmTsSY//OBdr8L
aHaw0v4gNI4K9m8tsjqMyUfuzav2rJHc6sez6G1qDfDZj3E19yjdob6Lb9vHvVvM
CppV6+e23wq3G+VdC2l1l26FXiATeeKx/c4tcUAnZBqkXiKmJZlwwGPYMeM4CQrk
N5TTXmC6J/xUVdbs+hNDyIGXRJbRdO8mOJoS7NZQjwHiya504yk=
-----END CERTIFICATE-----
Generated at Wed Nov 5 23:44:04 2025 by rpki-client