Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EBDD7/67F004C6BE1D11EB8576B942F8AEA228/lyz9rusSb2_NRpalkPcBiDeqX_I.mft
File:                     lyz9rusSb2_NRpalkPcBiDeqX_I.mft (raw, json)
Hash identifier:          G5a4lET2WENV2p9e+92XmuVRhIbx4N30iDxtQ2uEP9M=
Subject key identifier:   31:B9:42:38:7D:3F:76:4D:BA:8A:9F:EE:F5:E3:88:A3:C4:C4:B6:90
Authority key identifier: 97:2C:FD:AE:EB:12:6F:6F:CD:46:96:A5:90:F7:01:88:37:AA:5F:F2
Certificate issuer:       /CN=F36EBDD7RI/serialNumber=972CFDAEEB126F6FCD4696A590F7018837AA5FF2
Certificate serial:       0688
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/lyz9rusSb2_NRpalkPcBiDeqX_I.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EBDD7/67F004C6BE1D11EB8576B942F8AEA228/lyz9rusSb2_NRpalkPcBiDeqX_I.mft
Manifest number:          0687
Signing time:             Wed 05 Nov 2025 02:16:49 +0000
Manifest this update:     Wed 05 Nov 2025 02:16:48 +0000
Manifest next update:     Fri 07 Nov 2025 02:16:48 +0000
Files and hashes:         1: lyz9rusSb2_NRpalkPcBiDeqX_I.crl (hash: FyrtykpdTxssdjqn5rgIo+cB9huRiUIA17MPHsBdoeI=)
                          2: FCF2744EE4DD11ED83CFE7E95C736454.roa (hash: 7tfnNvaHIqZ7VHDcLuyEzEdaFsax5cOARy6FVza2SjE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36EBDD7/67F004C6BE1D11EB8576B942F8AEA228/lyz9rusSb2_NRpalkPcBiDeqX_I.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36EBDD7/67F004C6BE1D11EB8576B942F8AEA228/lyz9rusSb2_NRpalkPcBiDeqX_I.mft
                          rsync://rpki.afrinic.net/repository/ripe/lyz9rusSb2_NRpalkPcBiDeqX_I.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 07 Nov 2025 00:45:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1672 (0x688)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EBDD7RI, serialNumber=972CFDAEEB126F6FCD4696A590F7018837AA5FF2
        Validity
            Not Before: Nov  5 02:16:48 2025 GMT
            Not After : Nov  7 02:16:48 2025 GMT
        Subject: CN=690ab391-a843
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d8:f1:d8:84:cc:9d:22:16:0c:18:d7:14:69:
                    cf:a2:90:10:a7:81:b6:c7:d8:2e:9e:eb:08:d2:15:
                    d2:2f:72:7b:ef:10:9e:8b:52:a8:7d:b1:1e:bb:0a:
                    ef:51:c6:44:ae:49:4b:b7:e8:6f:a8:7a:e6:d1:59:
                    4a:9a:f0:e8:06:25:dd:31:e6:57:47:e2:8b:59:b8:
                    f1:45:31:7c:4a:7d:e2:2a:ef:3c:13:4f:49:5f:f6:
                    94:5b:4f:3b:42:8c:5d:96:b7:56:ee:31:21:08:a8:
                    8c:4b:90:1e:0f:45:5e:c4:e1:8b:c1:11:ba:88:5c:
                    6b:26:4e:c9:72:c4:ee:56:d9:f7:f8:b5:2d:3f:d5:
                    c8:2f:a6:31:63:7d:e6:49:76:81:65:57:ee:07:1a:
                    96:9e:50:37:59:1f:3c:5b:5f:0f:8d:f9:c0:d9:84:
                    a2:9e:6e:a9:3e:03:05:ee:e2:0d:ab:c2:78:f6:03:
                    8c:99:c1:fd:06:75:90:30:cb:2c:dd:34:d9:18:8d:
                    66:73:9d:05:b3:b3:a2:54:1b:60:2c:7c:34:78:21:
                    d6:84:34:f4:fd:0a:74:95:ed:4c:a3:13:9f:b3:de:
                    fa:82:65:38:66:33:82:3f:a9:50:60:32:d8:b6:6b:
                    1b:37:31:b2:79:f6:46:9d:a2:d9:c9:c9:b3:e8:ec:
                    99:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:B9:42:38:7D:3F:76:4D:BA:8A:9F:EE:F5:E3:88:A3:C4:C4:B6:90
            X509v3 Authority Key Identifier:
                keyid:97:2C:FD:AE:EB:12:6F:6F:CD:46:96:A5:90:F7:01:88:37:AA:5F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EBDD7/67F004C6BE1D11EB8576B942F8AEA228/lyz9rusSb2_NRpalkPcBiDeqX_I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/lyz9rusSb2_NRpalkPcBiDeqX_I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EBDD7/67F004C6BE1D11EB8576B942F8AEA228/lyz9rusSb2_NRpalkPcBiDeqX_I.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:df:15:b8:c5:f6:60:8c:1a:ae:0d:35:5e:21:ed:9d:1a:5c:
         2c:17:4b:1d:f0:91:bc:1c:90:4c:5a:34:1c:a2:c5:d3:99:53:
         76:10:8d:a9:15:2f:98:ae:70:49:d2:8e:fb:76:81:a2:8b:2b:
         e7:14:a7:33:d7:f0:ed:6e:e3:52:9f:42:59:3e:25:33:82:51:
         b2:51:55:2c:b0:52:8d:71:10:a9:fb:e6:b0:fa:46:5f:2d:e2:
         95:aa:44:af:6e:a2:e2:6f:5a:77:28:01:b2:e7:47:50:47:80:
         00:45:ca:b6:47:18:fc:75:d3:5c:da:50:93:62:bc:61:24:ee:
         c8:6d:14:ec:41:ac:da:c9:fc:c2:87:75:c4:58:50:ac:c6:cd:
         4d:3a:d8:05:77:6b:f6:e6:c3:57:81:b8:c9:34:42:0b:3e:88:
         f6:a4:60:ee:11:ab:b7:70:70:be:2a:4b:34:41:ba:ca:d7:48:
         cb:00:d3:f3:76:38:bb:48:c2:23:5a:64:12:54:9e:36:b9:90:
         3b:cc:88:27:84:73:51:22:5b:ab:88:cf:2c:ea:7b:8a:94:90:
         02:d7:43:fe:ff:6d:33:8c:a8:40:77:58:34:37:34:65:a9:be:
         a9:38:c7:91:6c:4b:3d:14:da:6e:19:6f:12:f6:49:ae:03:6e:
         e6:78:85:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 01:12:39 2025 by rpki-client