Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
File:                     f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft (raw, json)
Hash identifier:          V6CMXHKDh+kw2nczg1UnW7tgWaKPfygDZ5ZH8jHIVgI=
Subject key identifier:   E0:59:B6:C2:0E:8B:25:EE:BA:33:37:CF:CB:03:35:24:5A:A3:C3:7C
Authority key identifier: 7F:7A:C1:80:89:79:83:E2:9E:93:7C:0A:18:78:03:C0:72:75:55:45
Certificate issuer:       /CN=RIPETOAFRINIC/serialNumber=7F7AC180897983E29E937C0A187803C072755545
Certificate serial:       107A
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
Subject info access:      rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
Manifest number:          0FD1
Signing time:             Wed 05 Nov 2025 00:45:33 +0000
Manifest this update:     Wed 05 Nov 2025 00:45:30 +0000
Manifest next update:     Fri 07 Nov 2025 00:45:30 +0000
Files and hashes:         1: f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl (hash: dCgQzqSuBC1qk0UpJgW4G+Wc6CtClMZkE7s5C6KFWnQ=)
                          2: KcDd4kMF8g5OWtC7_cAP8XSMpmU.cer (hash: 7QtdnaQza7N4jDnPovc1w8gF48Ij+qmzZLDIkyC63O8=)
                          3: n10GlKN56yP6tAip1LvVCOGqOSI.cer (hash: 4EvvdvWNdGnaHC0ksGa9n34SIrtveRqx7aUjfJ5vgAM=)
                          4: 9Iq-0-yjCOsi4bWiQoTP4eAyz9I.cer (hash: bBV5obWB28b3fjtHXuMC6GE0zb3F2jnXWysfemiYklw=)
                          5: ZbPoGBw9qNHWQehKRcjvgjndfqc.cer (hash: CC3hg+mcFc4UQvWif2Z6cGSaFUXRvXNRNJBbDnIHepk=)
                          6: sOuFTcDYmjIzySVR0W0U1DjPVR8.cer (hash: DpTRWhjCxqJPv0tA3HKAJTvp2o1a7CI8HDBrqVfTOTg=)
                          7: 1X3hPvIcIQ_suBv_eMQUm-o6fDI.cer (hash: dslyP+wRPUnioCJrBU2EarUy9Gis6BBRiNzD4Ok9qtg=)
                          8: OWSdY4-MUgk4TWK4gN9_jH5G4fs.cer (hash: rOTGOTt3lhWZ9SfTS235YkHvYjCeNdAkZtvftw0cvF4=)
                          9: 6vTkF_QNHJDUbdlViOspDev7ius.cer (hash: JYh5Iqrt4qoHSp6swIesPEtVVSEDDysMp71dOKb2ow0=)
                          10: 8GzMRNUs-b4RXOx6TaaxMJukOaU.cer (hash: AhHBgKR9j/6MxZii8GMzEcZ3icKR5vSn1U96Lut42oI=)
                          11: nYezEXqhvXgot91GTXMHa66NzJY.cer (hash: BA4R/qMEmq9shG2AzCjk53F+kykngTuQNTlYjUKEEzc=)
                          12: qEB8UNNVEmlZXYTPEkOl86_4EHA.cer (hash: jkPeHZLkph4AzMqn8n5gUr6W70YNpBkeTAvz2j8/sTw=)
                          13: D1pm1nbRb8eSfE4kaUoejHekQGs.cer (hash: NTfudnRepXxK1NGJ1lOWpfBClqBr1/uPZzAhn8ECkk0=)
                          14: SGm5dfSdmA_lFc7dSaDEDruBrKI.cer (hash: SWyEW0ny7DVt22fVGXyUitLE2JKk91dpiv1RN6IWJYM=)
                          15: 3P6jhHci0v7HoDnpkDj3U4JZ0DE.cer (hash: SKc016m8ZfBvJifk221ftKMQnw2b9DH1+uoR0q7sCrI=)
                          16: pyKwoONloK3D2e6zzL_MBi2Q76k.cer (hash: km5ZQRKr6MuRSMSkLPjEu48TVmAJxaKADCUvLLLg5pE=)
                          17: gQZ7oJrGc0TwLNTmS2v15M1zuBA.cer (hash: 2ldNgrPGbqk7UmMFXzOFMiDHVNv+SnifaFsIo1ljShU=)
                          18: YiXGU2dIRI8cYBvpr6uCfJptjJg.cer (hash: x30oGqbSvDOgtg8EVHsWv0U6J+s6R5CmW9IqDdDHFik=)
                          19: 7LrLcZq6XTK9mQ7zaFtao2sIygQ.cer (hash: 9hpPYklOD3XG/G8S7pdKH5CWcV6yfvG+mmcFzdbdANU=)
                          20: lyz9rusSb2_NRpalkPcBiDeqX_I.cer (hash: bxdyY+YC5sMpCqFa4CchM4qwJZ4/UDW29OSQHF8vXKg=)
                          21: 8ZI823Vz-wlzku4GArwdsbV78OM.cer (hash: uCddsWdTHuhu5zutaMvClmXkP3yNhSdEe0lg+ZnGJf8=)
                          22: BinJnUdgwom4TNvs8bbBPPUl6q8.cer (hash: qzqa/EWjKYt10shJo6iqZfyO12/WeiCNb221+cMBDl4=)
                          23: btXWd58RVP-e4YoO_T3bdQZOoeU.cer (hash: A7NGQB9Y2tDK0hdHpY14+eWiYUNSilHI6Cst0V4PN8g=)
                          24: 5jUkb-v3B1Mu2tICGvyHSMFxFq8.cer (hash: ogkdWMCSCp8TH1UsMGksxpT3c3fYVMvy5zn9Uq5GspE=)
                          25: W8VPKEgipxexrUw3z2nQls5_Z3M.cer (hash: s9iHUxqoqEycr0EEXtUBqyzDYCl+yqrLelwsJZWIgl0=)
                          26: 1F-q3w0PsrIYxNl-HvQbwMkznC8.cer (hash: pEQr+A60oSWY/kcRrRbGG0Tp9jeeN4neU7ayipYIlpw=)
                          27: MTy_73KkJrBHiE4HS7G7CwL8Vkk.cer (hash: NmhijwgaaRi7wfyDtBhDaDrHkolrhLeYVUkjNd6EoNc=)
                          28: 5pD7ZWuNfQ8PZ22dEnoy3406bYU.cer (hash: QY1uIbSDSrt6JZK4BqOanR6OMpSYU61g21V6Nk95CXY=)
                          29: nYXa0C_Bd6QOm5BwI3BvP5d0TaA.cer (hash: Vx8lkbe2NR9bjeDT7O6AuwX/6SOJPkcaQrSLwwrYULA=)
                          30: dP2KmbmPfFmCclePXqFPEhiXqVs.cer (hash: 2LL1qyXgeBRiJonvJRKLq/Q4yexHpVqtjOIDk4QZo6E=)
                          31: BMkLD2tuWZT2ZYfjcPf3y-ZhEgc.cer (hash: rS2pcd7r7ooWVJNNDn+2116kQ37UYpf+i3iwIY8mG5c=)
                          32: VCiBspPW4uKh8hlSyLwDISbuu8k.cer (hash: TNkTO/pixFRRXLoSIPl4IxLnS9nF1IoL86pR0YdCzQg=)
                          33: ShihNoN8fkklQFrLpOOnPS4t9d4.cer (hash: TD/rChZMStyBeKdEGSrDGDlahtRc7JCEAFzA6+l3cRM=)
                          34: bynJvMAklSDlBwZp-vZmUm98jzA.cer (hash: ikkS/ZM+jg2Wfqd8pmrhX/sC4BJhR/M0ONoBX5eZ3qM=)
                          35: 8qncFw2PMqBEwa8QUgRdbU4kIus.cer (hash: zDmK+MKgRiaziwVTgCusHGz8cinKCsIwDgBaRFvdSU0=)
                          36: i-GoLMm4kURYOcv-vplg8wM9pUI.cer (hash: a7LKY45MlLtsNts6PbOTMOHUPfe/UslJzJzAyod75Hc=)
                          37: BSuc0Q9q5nsxJ-0SNyR-isRLeaE.cer (hash: 1bY/LWpjUEz4TNJbFG0XryMvHG3oC1g3zrRLJvSnwXM=)
                          38: mwftdzFoum4LC-Pl3LLPeB96yCo.cer (hash: wqMcExsMYRVHd4ij2jyGrBfJAXDPQ5Idh6TDGeKZLXY=)
                          39: 48LJS_VpO0HwWh1WV9GnhLXVcmE.cer (hash: n1VD08oUn/IQqNfjAeJRzt/NrlyG0pwtoNy2cGABQKg=)
                          40: qq2zeUNQh6CU8n12Cd-4YvxcxGU.cer (hash: geB1ekaUnJR16eMRyFdk0rOgBzNirsc2PboPTc3PEPk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 07 Nov 2025 00:45:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4218 (0x107a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=RIPETOAFRINIC, serialNumber=7F7AC180897983E29E937C0A187803C072755545
        Validity
            Not Before: Nov  5 00:45:30 2025 GMT
            Not After : Nov  7 00:45:30 2025 GMT
        Subject: CN=690a9e2a-285f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:aa:7d:7d:68:16:12:4f:47:36:5b:49:1b:cc:
                    91:d8:b7:4b:16:fc:85:84:8a:9d:9c:78:a9:71:f1:
                    b4:5f:fc:cb:b9:c8:a6:45:53:46:28:07:5c:6e:32:
                    b0:fa:7e:b2:83:9d:21:69:5f:3f:bd:5a:32:d4:d6:
                    b7:9a:a9:72:0b:ac:c4:26:38:6c:4c:9c:5f:8e:a9:
                    56:db:c6:60:f1:1e:94:7e:3c:9a:de:f1:0a:6e:9d:
                    64:cd:eb:fb:28:c2:56:06:75:ec:a3:38:a5:3e:71:
                    ac:39:56:58:c2:22:1c:74:51:e8:f8:11:93:7f:cd:
                    64:db:16:69:44:d6:5c:41:b0:ce:7b:5b:16:c0:bb:
                    cc:32:4f:c7:fa:90:3f:e0:76:16:80:b1:fc:ce:e2:
                    92:be:32:8e:e2:74:e4:8b:c6:b0:cc:b6:ed:2f:85:
                    e2:1d:ad:a0:e6:b4:d6:e7:62:75:2c:b6:09:15:d8:
                    64:56:eb:ad:bf:d5:53:c2:96:ea:92:80:d7:49:36:
                    f9:8f:71:6b:3c:e5:0b:d0:82:38:f8:6e:46:63:82:
                    cd:63:ff:b0:5d:d3:a0:5f:a7:15:06:a9:7c:0d:6a:
                    b0:b8:6b:e3:55:a7:4f:1b:1d:c5:03:4e:67:15:6e:
                    dc:02:4c:2f:ad:6f:31:34:1e:d8:6a:46:7a:99:b6:
                    1d:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:59:B6:C2:0E:8B:25:EE:BA:33:37:CF:CB:03:35:24:5A:A3:C3:7C
            X509v3 Authority Key Identifier:
                keyid:7F:7A:C1:80:89:79:83:E2:9E:93:7C:0A:18:78:03:C0:72:75:55:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:4b:c4:31:dc:e0:06:4d:87:c6:02:1d:67:5e:f4:63:7a:a1:
         50:71:cf:e3:e2:bb:5b:f4:52:2e:4b:eb:88:5a:d1:30:b4:a5:
         49:b4:2c:26:86:1c:dd:41:32:e9:86:58:b4:17:ca:0b:d5:bf:
         79:ff:30:43:19:50:3f:18:72:c1:54:97:f9:cd:b3:ce:7d:c0:
         57:d8:e1:c4:b1:e0:33:4a:76:c1:85:1e:50:c6:f6:7a:6e:bc:
         b7:6e:ff:e3:09:34:63:3d:cd:16:39:71:0b:bd:1e:3d:ea:1f:
         95:3d:ae:58:9a:b7:f3:cf:22:5a:35:9e:74:df:ce:8b:60:43:
         bb:c0:26:a7:2e:1d:26:8a:9a:ba:fc:67:cf:b5:45:d0:2c:dd:
         39:17:31:c7:3a:58:31:fc:56:c8:54:61:19:aa:df:47:ec:46:
         f0:b5:5f:26:53:c8:22:d5:21:0d:ce:74:76:d2:97:cf:9a:3e:
         c4:4b:4b:37:51:03:06:c3:20:ab:c4:d6:90:39:30:0b:30:98:
         70:ed:ce:89:25:e9:9e:32:de:d3:3f:65:3b:85:60:2d:e9:e4:
         a2:f6:25:c1:d9:96:34:40:35:41:92:2a:e2:ec:d2:e9:dd:fd:
         67:d8:bb:64:b5:46:2c:d9:2e:2f:4c:01:1c:fb:ee:5d:d2:c4:
         c7:31:b2:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 18:36:56 2025 by rpki-client