Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DF2C0/D50D7F0E5A0311EFABD2477A762E951A/ksDdANVwLjkO0njypv3Heeq3uoo.mft
File:                     ksDdANVwLjkO0njypv3Heeq3uoo.mft (raw, json)
Hash identifier:          UCi0YYb5QVQ+luLgIkxUw8Nzp+A6wfyLsS6B4w94P8M=
Subject key identifier:   E0:69:46:5E:85:69:D9:8D:88:2F:6A:DE:90:BF:6F:0E:54:30:BF:39
Authority key identifier: 92:C0:DD:00:D5:70:2E:39:0E:D2:78:F2:A6:FD:C7:79:EA:B7:BA:8A
Certificate issuer:       /CN=F36DF2C0AF/serialNumber=92C0DD00D5702E390ED278F2A6FDC779EAB7BA8A
Certificate serial:       02D2
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ksDdANVwLjkO0njypv3Heeq3uoo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DF2C0/D50D7F0E5A0311EFABD2477A762E951A/ksDdANVwLjkO0njypv3Heeq3uoo.mft
Manifest number:          02D1
Signing time:             Tue 21 Jul 2026 04:22:58 +0000
Manifest this update:     Tue 21 Jul 2026 04:22:57 +0000
Manifest next update:     Thu 23 Jul 2026 04:22:57 +0000
Files and hashes:         1: ksDdANVwLjkO0njypv3Heeq3uoo.crl (hash: On6uZuL+oKqjwRQQq/2hbKKyKm7rH+UAiR41CpwPohQ=)
                          2: 66FDD6885A0A11EFBC9CDBA8762E951A.roa (hash: aVnUgk3NY8yjcG/DFLWQpoxsTPLV3bCNwJvFvS9FExw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36DF2C0/D50D7F0E5A0311EFABD2477A762E951A/ksDdANVwLjkO0njypv3Heeq3uoo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36DF2C0/D50D7F0E5A0311EFABD2477A762E951A/ksDdANVwLjkO0njypv3Heeq3uoo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ksDdANVwLjkO0njypv3Heeq3uoo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 23 Jul 2026 00:08:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 722 (0x2d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DF2C0AF, serialNumber=92C0DD00D5702E390ED278F2A6FDC779EAB7BA8A
        Validity
            Not Before: Jul 21 04:22:57 2026 GMT
            Not After : Jul 23 04:22:57 2026 GMT
        Subject: CN=6a5ef422-33ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:88:ee:b4:a5:fd:bd:65:21:ef:a7:db:c5:b1:
                    78:18:d6:e1:44:a7:aa:99:f6:5a:18:bf:2c:d4:04:
                    86:dd:e3:0d:97:3b:7b:94:82:44:8e:10:86:4b:1d:
                    7f:e2:4c:6a:41:47:91:06:1b:3d:e3:45:3a:a6:c8:
                    ad:4b:2d:7b:c1:59:80:6f:e4:36:01:35:7f:0d:fb:
                    f8:0c:2a:37:8d:62:5e:9b:dd:7c:5f:f8:4f:63:c1:
                    5f:fb:3c:c0:93:09:64:d3:12:0f:cd:2b:38:ef:02:
                    0b:df:39:b4:3c:bd:b7:48:e8:30:b6:fb:4a:4c:fd:
                    7a:9f:85:a2:53:1e:1f:de:fc:ce:74:24:44:57:f2:
                    a7:98:5d:38:93:2b:ae:1c:0e:26:00:36:ad:72:4b:
                    4c:25:51:9c:c7:e9:e3:e9:b6:50:8d:0b:26:1a:85:
                    f1:9f:42:7c:6e:33:98:3c:46:7d:15:3a:79:e7:d5:
                    fc:f9:c4:4e:ab:06:60:86:1d:7b:65:c4:74:73:60:
                    3b:ab:95:7b:d2:09:9e:da:56:db:1f:a1:0b:45:02:
                    ee:21:ca:20:c6:df:3b:a4:72:09:3c:c5:b9:3d:89:
                    2e:f2:b8:6d:38:16:28:16:40:45:60:52:15:69:05:
                    61:3e:6f:19:f0:55:32:7f:17:de:97:09:84:64:46:
                    e5:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:69:46:5E:85:69:D9:8D:88:2F:6A:DE:90:BF:6F:0E:54:30:BF:39
            X509v3 Authority Key Identifier:
                keyid:92:C0:DD:00:D5:70:2E:39:0E:D2:78:F2:A6:FD:C7:79:EA:B7:BA:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DF2C0/D50D7F0E5A0311EFABD2477A762E951A/ksDdANVwLjkO0njypv3Heeq3uoo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ksDdANVwLjkO0njypv3Heeq3uoo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DF2C0/D50D7F0E5A0311EFABD2477A762E951A/ksDdANVwLjkO0njypv3Heeq3uoo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:a7:52:32:9c:7d:fa:7c:1e:36:d8:9e:07:d4:2d:fb:99:7b:
         ec:43:7d:f1:7f:86:c4:c8:0a:46:61:bc:ae:7a:ff:85:9c:4c:
         88:ca:a2:74:06:0b:18:72:0e:bd:32:ca:ba:a5:08:15:14:c8:
         19:a0:28:47:37:3f:79:bf:5b:b1:91:63:db:ee:31:ca:80:21:
         8d:9d:37:1b:cd:16:61:1e:84:7e:11:b7:39:d4:4b:e3:4c:6d:
         66:d6:fe:8a:44:cf:b8:2c:a0:ed:16:bf:60:60:b4:a7:7e:64:
         10:2f:23:cc:26:51:3d:ed:0e:b5:83:05:35:91:34:d1:c3:a8:
         36:03:10:bf:98:d8:e5:dc:b4:1e:c3:0e:d9:5d:96:47:9e:af:
         63:16:e6:e3:80:54:40:d0:0b:c9:90:be:d4:a3:d3:0f:3f:81:
         1b:0a:d3:05:14:fc:d8:64:80:42:3c:83:76:40:08:e3:bf:00:
         8d:60:94:fe:70:0d:38:a9:d3:cc:67:9f:ff:01:87:1b:74:10:
         3c:01:a2:ad:a1:25:5c:86:2a:be:ec:66:63:dd:84:2d:dc:ff:
         09:5b:70:bb:47:42:ac:7d:42:26:7c:3b:4a:ac:50:c5:ec:8f:
         86:0a:b8:57:28:9c:c8:13:c7:8a:1c:df:42:aa:79:e8:8b:88:
         1d:b2:3e:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:58:41 2026 by rpki-client