Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3668CFE/A5F271EA375711EEAAAA53184AD9E6FC/3ctMnFuiLYifJQktxc7JJbqEO3g.mft
File:                     3ctMnFuiLYifJQktxc7JJbqEO3g.mft (raw, json)
Hash identifier:          q3z5UcgG1C7ySCW8yMO+khnSBncn2pOKK0fDgtKZvWQ=
Subject key identifier:   1B:62:BC:18:AF:3D:09:DC:B1:D5:33:C0:88:67:66:49:0A:A5:BC:A2
Authority key identifier: DD:CB:4C:9C:5B:A2:2D:88:9F:25:09:2D:C5:CE:C9:25:BA:84:3B:78
Certificate issuer:       /CN=F3668CFEAR/serialNumber=DDCB4C9C5BA22D889F25092DC5CEC925BA843B78
Certificate serial:       04B7
Authority info access:    rsync://rpki.afrinic.net/repository/arin/3ctMnFuiLYifJQktxc7JJbqEO3g.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/A5F271EA375711EEAAAA53184AD9E6FC/3ctMnFuiLYifJQktxc7JJbqEO3g.mft
Manifest number:          04B6
Signing time:             Tue 03 Nov 2026 03:38:30 +0000
Manifest this update:     Tue 03 Nov 2026 03:38:29 +0000
Manifest next update:     Thu 05 Nov 2026 03:38:29 +0000
Files and hashes:         1: 3ctMnFuiLYifJQktxc7JJbqEO3g.crl (hash: wmPWreQoHWTNgIdRaFuf6GvbfFM/cjlN4noZdZaRpyA=)
                          2: 271BDC865B7D11EEA292A6744AD9E6FC.roa (hash: AqQFl42y4KiidXEIHNkOHS5rhMlmNLvCnwgSSzLowX0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/A5F271EA375711EEAAAA53184AD9E6FC/3ctMnFuiLYifJQktxc7JJbqEO3g.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/A5F271EA375711EEAAAA53184AD9E6FC/3ctMnFuiLYifJQktxc7JJbqEO3g.mft
                          rsync://rpki.afrinic.net/repository/arin/3ctMnFuiLYifJQktxc7JJbqEO3g.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 05 Nov 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1207 (0x4b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3668CFEAR, serialNumber=DDCB4C9C5BA22D889F25092DC5CEC925BA843B78
        Validity
            Not Before: Nov  3 03:38:29 2026 GMT
            Not After : Nov  5 03:38:29 2026 GMT
        Subject: CN=6ae95735-e227
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:22:b5:1b:5c:ff:2d:ed:46:2a:40:16:3f:d4:
                    d4:06:74:18:d2:14:30:89:6d:de:53:3a:e4:f7:95:
                    3a:a2:de:a8:55:20:22:71:49:fd:60:55:79:8b:77:
                    05:37:81:5a:4b:b4:66:98:0d:ff:3d:23:01:c6:e1:
                    e5:2b:b9:c8:43:08:b3:ec:0f:61:43:1d:43:50:24:
                    de:22:68:88:2a:3d:d8:ba:a8:85:a1:57:21:5c:e8:
                    d2:ef:b4:aa:bf:69:e4:0b:3c:b4:79:5c:ba:1b:5c:
                    a0:78:20:2d:32:b5:c0:c7:c4:6f:47:8d:06:aa:d7:
                    90:18:d9:89:e5:ab:b7:aa:90:d5:79:20:c4:9f:fd:
                    7d:84:14:31:9a:88:ec:3b:42:47:4a:aa:e4:c5:cf:
                    87:af:27:61:3e:65:b4:77:bb:6e:fc:31:97:68:a6:
                    d7:27:ff:e5:be:f7:33:58:88:11:09:1e:54:5e:12:
                    d4:ba:f9:59:0c:39:85:13:54:bc:5f:42:99:6d:b9:
                    2a:82:dd:4c:30:53:3e:cf:40:87:f4:7b:65:6b:7c:
                    b6:09:a8:a9:7c:f8:4d:50:fb:c1:57:b9:bf:ae:e0:
                    88:f5:82:7e:3d:7c:3d:34:9a:7f:3a:4a:84:43:b5:
                    50:1d:58:a7:38:04:1e:ce:9f:17:e9:19:02:71:b0:
                    99:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:62:BC:18:AF:3D:09:DC:B1:D5:33:C0:88:67:66:49:0A:A5:BC:A2
            X509v3 Authority Key Identifier:
                keyid:DD:CB:4C:9C:5B:A2:2D:88:9F:25:09:2D:C5:CE:C9:25:BA:84:3B:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/A5F271EA375711EEAAAA53184AD9E6FC/3ctMnFuiLYifJQktxc7JJbqEO3g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/3ctMnFuiLYifJQktxc7JJbqEO3g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/A5F271EA375711EEAAAA53184AD9E6FC/3ctMnFuiLYifJQktxc7JJbqEO3g.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:8c:df:4d:18:09:e3:32:9a:f3:aa:d8:e2:af:7a:45:e3:0a:
         0b:ff:b4:14:4b:64:38:ba:d0:5d:ac:7a:93:46:18:5c:db:b6:
         50:99:d4:59:a7:73:32:97:87:49:08:63:3e:56:f0:cb:43:24:
         ea:4d:69:ac:39:3e:5f:43:cc:0e:29:71:b3:46:42:00:58:9b:
         38:3c:2b:fc:b5:4d:56:a1:9c:67:16:e7:c7:21:b5:7d:16:cd:
         41:02:c5:b5:d9:f5:c6:9b:31:59:4c:62:71:d4:4c:d6:01:ca:
         62:70:4c:3f:cd:e8:7e:02:13:2a:04:67:d4:34:65:f2:99:95:
         ea:e9:87:a3:b9:74:06:e4:7f:c2:74:b8:64:d3:b6:7b:64:d4:
         ed:cd:92:7e:d3:fc:1b:ca:a8:78:3a:bc:b3:8a:81:4c:44:5c:
         8c:b4:db:35:01:47:40:df:51:72:be:58:a6:58:49:74:d8:7f:
         ba:e9:e5:a8:2b:a5:ce:90:5b:eb:66:1b:ef:df:11:87:65:62:
         37:04:b4:d0:b4:a0:1c:cb:e9:05:42:93:35:89:b9:8e:9f:6a:
         82:72:bc:f1:c7:88:9b:6e:d6:b4:bb:a6:87:bc:7f:5b:fc:b6:
         2d:af:f3:cf:b8:6d:b4:af:f2:78:64:1a:47:ab:9e:01:fc:87:
         c8:a8:2f:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----