Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F4212/53BD7852CFB911EEBADF1A6A775412E6/jipNb8UYDX1HWKp5jDiYAu7zv7M.mft
File:                     jipNb8UYDX1HWKp5jDiYAu7zv7M.mft (raw, json)
Hash identifier:          gPZ0uhvtMtNgCxiEeI/dpmd+PFOK7LpXg0aXhWFm6BQ=
Subject key identifier:   84:1F:D5:F2:7A:ED:67:F5:0B:A0:7C:A9:E3:45:8D:BD:85:95:5F:EC
Authority key identifier: 8E:2A:4D:6F:C5:18:0D:7D:47:58:AA:79:8C:38:98:02:EE:F3:BF:B3
Certificate issuer:       /CN=F36F4212AF/serialNumber=8E2A4D6FC5180D7D4758AA798C389802EEF3BFB3
Certificate serial:       038B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/jipNb8UYDX1HWKp5jDiYAu7zv7M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F4212/53BD7852CFB911EEBADF1A6A775412E6/jipNb8UYDX1HWKp5jDiYAu7zv7M.mft
Manifest number:          038A
Signing time:             Tue 28 Jul 2026 04:03:48 +0000
Manifest this update:     Tue 28 Jul 2026 04:03:48 +0000
Manifest next update:     Thu 30 Jul 2026 04:03:48 +0000
Files and hashes:         1: jipNb8UYDX1HWKp5jDiYAu7zv7M.crl (hash: PeN55TpqE+z9+lvS/3KiMZSVQYmPIHonMTAXFuVGOLE=)
                          2: BDA909CACFB911EEA2EBAB6A775412E6.roa (hash: oOsN7fS/FRC6cCK/W7sGcZ0zEfirLAaFD65Y5zMuPNM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F4212/53BD7852CFB911EEBADF1A6A775412E6/jipNb8UYDX1HWKp5jDiYAu7zv7M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F4212/53BD7852CFB911EEBADF1A6A775412E6/jipNb8UYDX1HWKp5jDiYAu7zv7M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/jipNb8UYDX1HWKp5jDiYAu7zv7M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 30 Jul 2026 04:03:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 907 (0x38b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F4212AF, serialNumber=8E2A4D6FC5180D7D4758AA798C389802EEF3BFB3
        Validity
            Not Before: Jul 28 04:03:48 2026 GMT
            Not After : Jul 30 04:03:48 2026 GMT
        Subject: CN=6a682a24-7deb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c4:62:b0:21:2a:e1:60:a5:f4:b5:83:50:0a:
                    46:14:d4:70:a0:78:9b:50:e6:f9:d1:d0:7e:d2:90:
                    1e:de:2e:7c:d7:0c:e7:5b:36:80:d4:7c:41:a4:ab:
                    aa:86:91:fd:eb:6a:55:70:d7:7b:28:b9:5a:8e:69:
                    87:ae:3a:56:91:06:f5:39:7a:2e:da:8e:a7:c2:60:
                    1c:4c:d3:56:53:9c:9b:31:b2:32:d1:76:a3:8a:6d:
                    33:ab:3e:25:ff:52:19:b9:b1:32:6f:fa:34:00:37:
                    e2:6d:de:07:0a:29:15:2b:09:05:ff:56:63:80:6f:
                    dd:ef:a6:4d:18:58:f2:31:cc:11:0f:46:bf:ef:94:
                    1a:34:84:cc:af:80:c0:88:66:2e:dc:6c:c0:0b:cf:
                    09:99:bc:b3:6f:e4:b6:39:8b:45:5d:59:34:2e:d8:
                    1d:8e:27:15:5d:2d:41:17:f0:8d:7f:69:9f:c7:df:
                    3a:99:3b:df:93:b3:29:c8:68:67:0f:ad:87:85:5a:
                    4c:cf:73:2d:d9:b4:1b:6c:a7:ec:68:16:77:9e:5a:
                    a5:d2:ba:ee:49:28:4f:84:79:54:de:d7:c2:af:42:
                    1d:8a:89:fe:f3:d9:5f:f0:f9:3e:bb:29:a0:85:b9:
                    a7:69:3c:d7:b2:b5:a5:85:12:c8:e6:80:de:36:02:
                    dd:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:1F:D5:F2:7A:ED:67:F5:0B:A0:7C:A9:E3:45:8D:BD:85:95:5F:EC
            X509v3 Authority Key Identifier:
                keyid:8E:2A:4D:6F:C5:18:0D:7D:47:58:AA:79:8C:38:98:02:EE:F3:BF:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F4212/53BD7852CFB911EEBADF1A6A775412E6/jipNb8UYDX1HWKp5jDiYAu7zv7M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/jipNb8UYDX1HWKp5jDiYAu7zv7M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F4212/53BD7852CFB911EEBADF1A6A775412E6/jipNb8UYDX1HWKp5jDiYAu7zv7M.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:d1:1f:48:dd:3b:47:c4:7a:8c:f3:af:99:53:cf:66:96:3d:
         87:ae:77:09:0d:6b:34:9b:66:93:8e:c5:75:47:82:9e:dc:6a:
         2d:78:6a:3d:87:32:db:51:8a:80:18:84:09:00:5e:c8:7c:20:
         ec:43:0d:42:3d:17:9b:f7:c6:e8:ec:04:fd:98:2d:57:98:36:
         6c:bb:9f:07:a2:a1:f3:26:80:9c:c9:63:4a:db:38:1d:00:ff:
         6e:e4:82:32:7f:f9:54:ef:dd:32:7d:a0:de:95:5a:7f:b4:cf:
         85:5a:01:e6:97:20:67:44:f3:8e:55:c4:27:5d:a9:7d:f9:c4:
         29:8a:6c:6a:83:b9:13:e5:46:fd:8b:1b:9b:79:75:da:ad:13:
         63:c6:47:32:bd:2e:3c:d7:19:58:be:d6:20:7c:2c:6b:3f:ff:
         18:bc:23:9f:21:e4:11:0d:2f:13:d8:29:e5:d3:11:86:a1:2c:
         a2:d5:83:f4:df:47:a9:5b:aa:3f:28:5b:db:71:f7:45:09:a2:
         5d:a3:fe:99:73:37:dd:f9:69:82:e0:4f:cc:af:e7:5d:89:a5:
         7f:61:c3:c8:da:08:42:3b:c6:00:24:13:e0:fa:15:f3:e8:ae:
         ab:9d:74:78:03:b0:fa:6c:a2:50:6b:a3:2b:8c:7b:f9:df:7b:
         fc:d6:b6:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:23:41 2026 by rpki-client