Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365C895/F420C6A485DC11E98087BF0BF8AEA228/qEB8UNNVEmlZXYTPEkOl86_4EHA.mft
File:                     qEB8UNNVEmlZXYTPEkOl86_4EHA.mft (raw, json)
Hash identifier:          v6F53NdqSZ8+6ymqyBYzwYo+l9nva+ixdI41hA8m0js=
Subject key identifier:   B4:D8:65:D1:B0:08:6D:AC:AA:B3:EA:6F:71:16:AE:5A:84:8E:78:C4
Authority key identifier: A8:40:7C:50:D3:55:12:69:59:5D:84:CF:12:43:A5:F3:AF:F8:10:70
Certificate issuer:       /CN=F365C895RI/serialNumber=A8407C50D3551269595D84CF1243A5F3AFF81070
Certificate serial:       0A72
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/qEB8UNNVEmlZXYTPEkOl86_4EHA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365C895/F420C6A485DC11E98087BF0BF8AEA228/qEB8UNNVEmlZXYTPEkOl86_4EHA.mft
Manifest number:          0A70
Signing time:             Tue 21 Jul 2026 01:25:11 +0000
Manifest this update:     Tue 21 Jul 2026 01:25:10 +0000
Manifest next update:     Thu 23 Jul 2026 01:25:10 +0000
Files and hashes:         1: qEB8UNNVEmlZXYTPEkOl86_4EHA.crl (hash: +lI84yKi7eIpYi6UbUDs6aQ4iMxZyC6jEO0T8c1RMW8=)
                          2: 42E0DF7E85E011E989E4CF0DF8AEA228.roa (hash: ub04iL+FdrPKe6xm0DlU5EWb8IsSt+07XZ7Am9PMCkI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365C895/F420C6A485DC11E98087BF0BF8AEA228/qEB8UNNVEmlZXYTPEkOl86_4EHA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365C895/F420C6A485DC11E98087BF0BF8AEA228/qEB8UNNVEmlZXYTPEkOl86_4EHA.mft
                          rsync://rpki.afrinic.net/repository/ripe/qEB8UNNVEmlZXYTPEkOl86_4EHA.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 23 Jul 2026 00:45:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2674 (0xa72)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365C895RI, serialNumber=A8407C50D3551269595D84CF1243A5F3AFF81070
        Validity
            Not Before: Jul 21 01:25:10 2026 GMT
            Not After : Jul 23 01:25:10 2026 GMT
        Subject: CN=6a5eca77-4e85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:dd:97:17:57:ac:a2:1b:ab:31:98:aa:60:df:
                    f9:a5:46:f8:b4:bf:28:0e:18:eb:e6:d2:79:65:b3:
                    e2:e7:74:06:64:95:11:5e:b5:29:0c:ee:fc:a7:e4:
                    79:f4:c7:1d:3b:10:16:4e:03:9b:90:b7:2a:ee:6a:
                    f6:2d:07:a0:dd:0c:93:5a:9e:81:5b:fb:e1:6e:52:
                    56:c5:db:9d:b3:e1:87:2a:3e:ae:d2:dd:22:bd:d7:
                    58:5d:7d:b3:e8:4b:6e:8d:84:f4:bf:44:fc:1a:84:
                    35:01:b0:1b:9b:e5:1b:03:79:b8:c3:ca:9e:58:7d:
                    6a:66:25:64:8e:8b:41:d9:f9:16:76:98:d6:9c:17:
                    31:59:d1:c6:8a:97:0d:86:c4:b0:0b:c1:b9:7b:47:
                    c5:92:1d:b5:8a:a6:6b:6a:0f:cb:2a:5b:74:d4:9d:
                    a3:de:25:53:54:b0:15:4a:fe:01:8f:ee:84:f0:94:
                    5a:9a:ec:ef:9f:3d:e1:b9:6c:9c:fa:00:e5:d6:cf:
                    d0:eb:c4:3a:e4:17:8c:06:ed:c7:1a:76:ad:d4:09:
                    19:4e:a0:43:7b:b4:94:e3:9c:15:ab:e0:d8:5d:cc:
                    3d:f5:03:b6:07:9e:21:7f:c9:d5:cb:9c:7f:ef:5d:
                    3b:5c:c9:30:ac:d5:3e:78:a5:ef:20:ba:33:87:30:
                    cd:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:D8:65:D1:B0:08:6D:AC:AA:B3:EA:6F:71:16:AE:5A:84:8E:78:C4
            X509v3 Authority Key Identifier:
                keyid:A8:40:7C:50:D3:55:12:69:59:5D:84:CF:12:43:A5:F3:AF:F8:10:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365C895/F420C6A485DC11E98087BF0BF8AEA228/qEB8UNNVEmlZXYTPEkOl86_4EHA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/qEB8UNNVEmlZXYTPEkOl86_4EHA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365C895/F420C6A485DC11E98087BF0BF8AEA228/qEB8UNNVEmlZXYTPEkOl86_4EHA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:21:b7:4f:d3:92:be:9c:07:04:77:83:8d:9e:2c:2b:7a:a6:
         37:8c:c9:b5:b5:a6:d4:16:c9:21:a9:4a:51:18:c3:64:db:d9:
         c2:e0:5c:36:cf:f5:70:03:be:11:80:f5:31:17:40:49:04:64:
         88:aa:60:96:bd:df:94:0d:60:f3:4b:29:c7:2b:b4:2d:34:95:
         73:22:87:75:8a:80:5d:fb:a8:92:1b:d5:94:be:8d:39:50:02:
         7d:a0:d2:65:39:92:51:34:c0:9f:9f:af:c9:00:32:6f:db:f9:
         39:f9:f2:9b:75:e9:c2:cc:7d:fd:6f:bc:9d:a7:28:1e:c0:6e:
         d5:93:4d:bd:d2:28:fc:67:70:d9:d8:3b:9d:88:c9:3a:5c:8c:
         31:36:1a:aa:05:a4:e2:dc:b7:3a:8e:fe:e6:09:45:95:6d:44:
         ec:02:8a:5e:08:b4:ee:6a:b6:26:0e:0a:98:3c:1a:c9:f7:0d:
         55:d7:2b:df:8c:f5:8b:43:ea:ee:25:90:18:cc:c9:bc:64:16:
         5d:90:7e:13:31:c7:39:f9:8c:52:93:38:6d:a2:64:23:6d:0c:
         00:16:07:11:5c:3b:8e:d2:23:b4:93:d7:47:c7:3e:a8:72:66:
         24:a1:92:50:d6:86:73:bf:36:fd:c3:a2:08:f1:ca:4b:ad:30:
         5d:9e:a8:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:46:58 2026 by rpki-client