Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.mft
File:                     OlU7bvgL-SIxL5a43cHyGajEEhs.mft (raw, json)
Hash identifier:          Pz+QkpbrFEpUp8ikyxpUOC/f9whVqcb6GqKQAPUr8mc=
Subject key identifier:   D1:4E:8D:9B:2D:C0:4F:D5:F7:73:1D:FB:85:22:0B:17:2B:D1:C2:E4
Authority key identifier: 3A:55:3B:6E:F8:0B:F9:22:31:2F:96:B8:DD:C1:F2:19:A8:C4:12:1B
Certificate issuer:       /CN=F36EF7D0AF/serialNumber=3A553B6EF80BF922312F96B8DDC1F219A8C4121B
Certificate serial:       041A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.mft
Manifest number:          03EE
Signing time:             Tue 04 Nov 2025 04:46:10 +0000
Manifest this update:     Tue 04 Nov 2025 04:46:09 +0000
Manifest next update:     Thu 06 Nov 2025 04:46:09 +0000
Files and hashes:         1: OlU7bvgL-SIxL5a43cHyGajEEhs.crl (hash: aVkp4ljYIpzO5uvREr+XBNXnEVQueE2qVGr806cNGGo=)
                          2: BCE643A0B0D511F0BA9A61C3DAE4EC9C.roa (hash: 2BbLAs8GgVM6FOqDgIHAdtoiskiDxtPaueCw+9NrFMI=)
                          3: 401DB4F42F1E11F09B881AB3DAE4EC9C.roa (hash: xj4UFgtRmUF6hPhDY8QCTAupvw1psvGB0HcdO8EfGgk=)
                          4: 00C569A2002D11F08D8D918C762E951A.roa (hash: J2zGLkOSE56js9RNvJ4OT497mQJdthstAM3GPqfXq4g=)
                          5: A9777DB400A111F0BFE5D984762E951A.roa (hash: /NRI84ju86WCQqU5dc2FqAKEMK10FL0ooHDMUCIRqrU=)
                          6: 8A0596E448DE11EF82EDFA4F762E951A.roa (hash: pTkaYfOMalP4Ac9YVOrNd/HL6aUPMLSzJ9NLjfsNk8k=)
                          7: 1C19002A58A711EF91CC474E762E951A.roa (hash: 28b+AJrYiZxyaN6PahnQJz38qCvJBTTx3Q3ULsHDeuc=)
                          8: 7050CF3A2EAB11F0B4B053A7DAE4EC9C.roa (hash: aOFRM5Th4Ppr9x/V2gxhKzhGJiZ2YiGkDB5kt+uThQY=)
                          9: A46FECBA0D4611EF94FE720E017001B1.roa (hash: 1+eZFsoTVxew2nM8QAmKo9cbdoGw9gIVLATJ2Cve9BY=)
                          10: 487DF37800FE11F09431944D762E951A.roa (hash: vFH43GxrKZ9rqeJkPBqFNCpNF2wmx+m29HBGPHLRYRU=)
                          11: AE6DAEF23FE311F08E1CA0BADAE4EC9C.roa (hash: NcoPOIw5nkiJxRXHYEGD+Qp0wgE7N4ijW+oi6r7fxHs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 06 Nov 2025 00:06:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1050 (0x41a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EF7D0AF, serialNumber=3A553B6EF80BF922312F96B8DDC1F219A8C4121B
        Validity
            Not Before: Nov  4 04:46:09 2025 GMT
            Not After : Nov  6 04:46:09 2025 GMT
        Subject: CN=69098512-5068
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:88:0b:8b:60:3e:4f:ad:76:ca:5e:ee:f5:de:
                    8b:2b:9a:59:a4:e7:e1:6e:fb:29:9d:5a:2a:20:d0:
                    20:65:9b:be:a8:c1:62:c4:31:1e:68:d1:2b:2c:13:
                    b9:54:e2:54:b8:00:f0:a2:80:0b:bc:ed:54:bd:ef:
                    b6:ca:f9:c7:45:1b:9e:6a:37:58:4c:08:e8:cd:39:
                    3f:89:e6:52:0c:82:33:09:53:b5:08:28:28:d9:9f:
                    b8:42:98:25:ce:6e:9c:08:70:84:e2:bf:c9:55:29:
                    21:3e:f5:9b:7a:b6:ea:a5:c5:90:15:7b:69:62:d4:
                    cd:c0:2d:aa:29:44:1c:e7:72:38:c1:4e:2f:9e:1d:
                    87:c2:b8:a3:e2:31:17:cd:be:dc:97:9c:08:86:0f:
                    e4:68:a8:00:58:de:eb:59:fd:4d:7a:6e:a4:1e:63:
                    40:a7:8e:0a:b8:ec:24:ee:78:26:5c:b6:40:10:b6:
                    ec:25:84:22:1a:0b:41:92:5e:4d:c7:cf:21:07:19:
                    4f:6e:b5:1e:b8:5d:99:30:e1:5a:0a:bb:4c:99:0d:
                    2e:9c:34:9d:1c:b2:68:41:4b:e7:91:05:93:8b:83:
                    3f:c8:c6:30:22:a4:f8:f1:31:1e:a0:72:5f:d0:28:
                    22:90:01:fa:bb:df:d4:f8:6a:ab:57:ae:cc:80:52:
                    29:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:4E:8D:9B:2D:C0:4F:D5:F7:73:1D:FB:85:22:0B:17:2B:D1:C2:E4
            X509v3 Authority Key Identifier:
                keyid:3A:55:3B:6E:F8:0B:F9:22:31:2F:96:B8:DD:C1:F2:19:A8:C4:12:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:7e:9d:0d:de:3f:14:91:9f:9a:e5:5c:87:59:2e:ef:eb:09:
         04:cc:db:15:41:b3:64:82:19:e7:54:dc:1c:7f:53:51:43:dc:
         ba:90:00:b3:d1:1a:b9:fd:55:c5:98:04:3e:e9:4b:17:a1:f4:
         b5:8a:35:df:eb:e4:31:9c:6e:cb:0d:cd:7f:62:07:e7:64:e8:
         ef:f9:ab:ad:ef:38:77:d6:16:fb:c6:39:5f:87:fb:11:f2:4c:
         f5:89:93:74:bd:22:89:0d:c7:e0:d9:f6:88:db:5c:4d:95:54:
         f6:7a:07:07:95:53:45:5c:1c:fa:7d:dc:81:a3:d7:bb:28:6e:
         81:e0:63:7d:ff:70:39:4c:46:32:7b:24:ee:69:c1:97:92:15:
         fd:d8:58:f6:a2:c7:9f:95:76:9f:58:83:23:a0:2f:0e:bb:ce:
         b5:1f:31:2c:e5:e0:11:d5:24:51:c3:00:b5:2e:15:64:82:a2:
         48:fd:6f:7a:ad:c9:44:93:05:99:ed:f6:ab:92:0a:aa:e6:9a:
         20:f1:04:e6:25:f9:50:b9:eb:2e:9f:e2:e9:dd:5f:4d:2a:d0:
         b1:91:0f:bc:ec:5c:8a:98:1a:43:5e:79:44:32:3f:ad:ec:a8:
         57:15:11:86:8f:94:c3:b3:1f:a1:b7:50:dd:ee:ad:7d:98:78:
         8b:56:1d:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 16:41:18 2025 by rpki-client