Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E8BF7/EEE6EFAC0AA211EEAA1E21434AD9E6FC/xzPtGnZ0IO71PgVhh4EL45NKpSA.mft
File:                     xzPtGnZ0IO71PgVhh4EL45NKpSA.mft (raw, json)
Hash identifier:          Kngb4yGncaaV/cqb1iUzr9Cdoy2RZK40qwjV7Lg/Nrg=
Subject key identifier:   5F:63:AB:E6:06:5F:7E:92:EB:79:3C:83:36:9B:79:2E:6E:A0:9F:A9
Authority key identifier: C7:33:ED:1A:76:74:20:EE:F5:3E:05:61:87:81:0B:E3:93:4A:A5:20
Certificate issuer:       /CN=F36E8BF7AF/serialNumber=C733ED1A767420EEF53E056187810BE3934AA520
Certificate serial:       033F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/xzPtGnZ0IO71PgVhh4EL45NKpSA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E8BF7/EEE6EFAC0AA211EEAA1E21434AD9E6FC/xzPtGnZ0IO71PgVhh4EL45NKpSA.mft
Manifest number:          0336
Signing time:             Sat 09 Aug 2025 03:55:25 +0000
Manifest this update:     Sat 09 Aug 2025 03:55:24 +0000
Manifest next update:     Mon 11 Aug 2025 03:55:24 +0000
Files and hashes:         1: xzPtGnZ0IO71PgVhh4EL45NKpSA.crl (hash: Pe2+L6dA4t4Ix7Y3MG4x8BS7gLITZuFTlPd27sqbQZQ=)
                          2: 3B9C0E80353211EF900BF8A1762E951A.roa (hash: MElZ7ONbYF4j1b7yLCYGG8hDaXP7MrOVtbEMu319Jmg=)
                          3: ABF4D51E353111EFA677899D762E951A.roa (hash: yT0hru8iHgEWTgBifTCuUqU1fmi51TY4WdhFSmOp3EM=)
                          4: AE6AFD92353011EF959AA994762E951A.roa (hash: vSgA9/geIa/jjYfuxFpaP7EurXT4Nf4QWhe78zClV7I=)
                          5: E4EAD8C4353011EFBA2CCD98762E951A.roa (hash: Afj2XOaT1THQy02YkhBrihtMAAj3OFu2AXPVcjK91qY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E8BF7/EEE6EFAC0AA211EEAA1E21434AD9E6FC/xzPtGnZ0IO71PgVhh4EL45NKpSA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E8BF7/EEE6EFAC0AA211EEAA1E21434AD9E6FC/xzPtGnZ0IO71PgVhh4EL45NKpSA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/xzPtGnZ0IO71PgVhh4EL45NKpSA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 11 Aug 2025 00:06:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 831 (0x33f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E8BF7AF, serialNumber=C733ED1A767420EEF53E056187810BE3934AA520
        Validity
            Not Before: Aug  9 03:55:24 2025 GMT
            Not After : Aug 11 03:55:24 2025 GMT
        Subject: CN=6896c6ac-6222
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:08:ae:5a:13:36:03:dc:0e:26:d3:bd:32:d2:
                    78:9d:35:78:ec:ec:6a:6c:e6:7b:a9:54:2a:17:1d:
                    3a:cf:b4:41:d1:e2:95:bd:55:4b:04:b2:31:a7:84:
                    74:0d:63:3a:a5:88:b8:33:bc:69:3e:23:57:5a:84:
                    7c:80:6a:84:62:2a:53:d1:a6:b3:e4:71:e4:a2:e7:
                    40:ad:e8:7d:8c:79:9a:6f:be:10:cf:e4:ff:5f:8d:
                    f1:0e:60:82:f6:30:0b:a6:f1:a6:93:1c:3b:21:9c:
                    2e:00:17:d0:fd:70:af:61:77:3d:d5:c0:14:d4:52:
                    90:23:59:84:3c:6c:80:2f:7c:b6:cc:94:47:e8:6c:
                    a2:ec:97:89:cf:92:b0:40:fe:53:44:3d:f3:13:f1:
                    38:1d:ac:b4:80:ec:b6:0d:56:6a:4f:b4:1d:41:26:
                    ba:8d:81:c1:c9:86:c9:ce:b2:7d:14:1b:56:0e:58:
                    6b:c0:0c:42:46:60:63:85:cf:d3:b3:5c:b5:4f:92:
                    05:c4:81:a4:e8:72:1d:95:72:66:c4:67:50:b6:c6:
                    4f:29:f3:6f:1e:be:ea:a1:a7:df:30:a2:1b:5e:d9:
                    40:0d:fa:ac:c3:fd:d4:30:11:e7:09:fb:11:4d:f7:
                    ae:a3:ae:8b:f0:55:4a:33:6b:c0:26:c9:2c:66:85:
                    a0:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:63:AB:E6:06:5F:7E:92:EB:79:3C:83:36:9B:79:2E:6E:A0:9F:A9
            X509v3 Authority Key Identifier:
                keyid:C7:33:ED:1A:76:74:20:EE:F5:3E:05:61:87:81:0B:E3:93:4A:A5:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E8BF7/EEE6EFAC0AA211EEAA1E21434AD9E6FC/xzPtGnZ0IO71PgVhh4EL45NKpSA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xzPtGnZ0IO71PgVhh4EL45NKpSA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E8BF7/EEE6EFAC0AA211EEAA1E21434AD9E6FC/xzPtGnZ0IO71PgVhh4EL45NKpSA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:de:af:88:59:53:68:b3:67:b6:f4:78:8e:82:6a:81:3d:06:
         a6:aa:18:21:f2:4e:3e:0f:77:97:7e:ac:e0:da:64:02:e9:20:
         8b:3e:8f:55:48:25:4b:13:75:39:ca:47:42:dd:46:00:32:b2:
         03:dd:32:65:66:20:2b:e3:f4:65:af:76:3d:22:5b:8f:e0:30:
         9b:a6:c1:eb:0c:bd:52:46:d6:bb:05:a8:11:58:da:2d:55:a6:
         b0:be:5b:75:d7:39:24:73:58:d2:13:0a:c1:9b:12:9e:b4:79:
         02:30:46:da:c5:6d:33:2b:3e:f7:d6:cf:b8:f4:75:9e:45:ba:
         ad:17:cf:7a:34:63:2f:cd:78:4b:98:77:14:9a:3e:f7:d4:d0:
         c9:99:dc:24:df:c8:cd:98:d7:c8:91:0d:f1:88:f9:e8:ab:79:
         7c:8c:cf:ed:ca:1a:a1:93:62:97:4f:d9:83:f1:fc:b6:d2:6d:
         e7:83:20:73:e7:56:77:b4:c8:19:bb:8a:fb:12:e6:e9:71:c4:
         b8:62:73:fc:51:e7:00:d1:e9:ea:62:8a:0d:bf:6e:7f:b3:23:
         f8:37:b6:77:69:4d:f8:85:10:18:4c:d8:33:00:37:d4:9a:49:
         71:ed:6a:5f:e0:0b:06:bb:b8:db:08:0f:a7:5d:48:65:55:64:
         25:23:3c:7b
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAz8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RThCRjdBRjExMC8GA1UEBRMoQzczM0VEMUE3Njc0MjBFRUY1M0UwNTYxODc4MTBC
RTM5MzRBQTUyMDAeFw0yNTA4MDkwMzU1MjRaFw0yNTA4MTEwMzU1MjRaMBgxFjAU
BgNVBAMTDTY4OTZjNmFjLTYyMjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCoCK5aEzYD3A4m070y0nidNXjs7Gps5nupVCoXHTrPtEHR4pW9VUsEsjGn
hHQNYzqliLgzvGk+I1dahHyAaoRiKlPRprPkceSi50Ct6H2MeZpvvhDP5P9fjfEO
YIL2MAum8aaTHDshnC4AF9D9cK9hdz3VwBTUUpAjWYQ8bIAvfLbMlEfobKLsl4nP
krBA/lNEPfMT8TgdrLSA7LYNVmpPtB1BJrqNgcHJhsnOsn0UG1YOWGvADEJGYGOF
z9OzXLVPkgXEgaToch2VcmbEZ1C2xk8p828evuqhp98wohte2UAN+qzD/dQwEecJ
+xFN966jrovwVUoza8AmySxmhaAlAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUX2Or
5gZffpLreTyDNpt5Lm6gn6kwHwYDVR0jBBgwFoAUxzPtGnZ0IO71PgVhh4EL45NK
pSAwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkU4QkY3L0VFRTZFRkFDMEFBMjExRUVBQTFFMjE0MzRBRDlFNkZDL3h6UHRH
blowSU83MVBnVmhoNEVMNDVOS3BTQS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3h6UHRHblowSU83MVBnVmhoNEVMNDVOS3BTQS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RThCRjcvRUVFNkVGQUMwQUEyMTFFRUFBMUUyMTQzNEFE
OUU2RkMveHpQdEduWjBJTzcxUGdWaGg0RUw0NU5LcFNBLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCE3q+IWVNos2e29HiOgmqBPQamqhgh
8k4+D3eXfqzg2mQC6SCLPo9VSCVLE3U5ykdC3UYAMrID3TJlZiAr4/Rlr3Y9IluP
4DCbpsHrDL1SRta7BagRWNotVaawvlt11zkkc1jSEwrBmxKetHkCMEbaxW0zKz73
1s+49HWeRbqtF896NGMvzXhLmHcUmj731NDJmdwk38jNmNfIkQ3xiPnoq3l8jM/t
yhqhk2KXT9mD8fy20m3ngyBz51Z3tMgZu4r7EubpccS4YnP8UecA0enqYooNv25/
syP4N7Z3aU34hRAYTNgzADfUmklx7Wpf4AsGu7jbCA+nXUhlVWQlIzx7
-----END CERTIFICATE-----
Generated at Sat Aug 9 22:42:18 2025 by rpki-client