Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3613254/C9012ADE023411EFA096505F017001B1/H0D8xXwmpt22Bfd5iktTwJ0rYiA.mft
File:                     H0D8xXwmpt22Bfd5iktTwJ0rYiA.mft (raw, json)
Hash identifier:          b+mRgJ63iOolTVhhQgAytW8aI9w5cM6/lL0n8JyHr9M=
Subject key identifier:   7F:DA:EC:62:1F:2D:69:89:90:62:F3:60:29:9E:9F:AE:51:F8:3D:D1
Authority key identifier: 1F:40:FC:C5:7C:26:A6:DD:B6:05:F7:79:8A:4B:53:C0:9D:2B:62:20
Certificate issuer:       /CN=F3613254AF/serialNumber=1F40FCC57C26A6DDB605F7798A4B53C09D2B6220
Certificate serial:       01E3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/H0D8xXwmpt22Bfd5iktTwJ0rYiA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3613254/C9012ADE023411EFA096505F017001B1/H0D8xXwmpt22Bfd5iktTwJ0rYiA.mft
Manifest number:          01E0
Signing time:             Sun 27 Jul 2025 04:33:47 +0000
Manifest this update:     Sun 27 Jul 2025 04:33:46 +0000
Manifest next update:     Tue 29 Jul 2025 04:33:46 +0000
Files and hashes:         1: H0D8xXwmpt22Bfd5iktTwJ0rYiA.crl (hash: aD60IOr0xfIVWQyMBEFY/0thN6nCke0Vkw0p/tJF5nk=)
                          2: 9870DA98AD8511EFAF5F92BE762E951A.roa (hash: udUtVTYo1f4IoYFUNzyEYnX9Hdol3KZafB9piQO6pRw=)
                          3: 5E7ADBA27F0611EF8AB52199762E951A.roa (hash: dAYZmcrceI9rIzI+ESJgarCN4u4uQsZdMnZ5kPEI1u0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3613254/C9012ADE023411EFA096505F017001B1/H0D8xXwmpt22Bfd5iktTwJ0rYiA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3613254/C9012ADE023411EFA096505F017001B1/H0D8xXwmpt22Bfd5iktTwJ0rYiA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/H0D8xXwmpt22Bfd5iktTwJ0rYiA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Jul 2025 00:06:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 483 (0x1e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3613254AF, serialNumber=1F40FCC57C26A6DDB605F7798A4B53C09D2B6220
        Validity
            Not Before: Jul 27 04:33:46 2025 GMT
            Not After : Jul 29 04:33:46 2025 GMT
        Subject: CN=6885ac2b-0b0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:64:a2:ee:22:73:65:0d:e0:11:8d:a7:92:7f:
                    af:9b:6a:6f:06:99:51:10:55:ae:db:3a:69:22:2d:
                    56:dd:04:08:32:f5:32:ba:f8:45:cb:9f:40:86:fa:
                    cf:ba:9f:6c:ec:30:1f:62:d7:4f:16:33:9d:e8:c9:
                    c3:46:89:4f:a3:19:5d:6e:49:3e:58:d1:d3:70:eb:
                    2a:0e:ac:24:22:9e:49:e3:37:33:a4:f6:c6:d6:63:
                    cb:af:c8:a2:99:d8:3e:14:cd:39:d2:51:50:0e:2c:
                    33:25:ae:84:a1:d5:a6:f1:ba:28:ec:dd:9e:2a:f6:
                    5b:e8:9d:ed:37:f9:c9:7e:09:ba:b6:11:2d:c3:a6:
                    70:09:9f:c5:e4:78:f1:fe:8d:ff:32:da:a8:8f:aa:
                    9e:14:e9:34:91:55:31:cc:eb:0f:51:b0:ff:5c:32:
                    f0:c3:05:6c:3d:c3:b3:e6:58:22:97:03:0b:23:d9:
                    df:75:a4:e3:69:72:52:ec:29:68:fa:4e:c1:fe:40:
                    0c:eb:bd:52:7a:9e:04:2b:fc:52:30:70:83:3c:14:
                    32:34:63:3d:fe:22:c9:ca:2e:e8:6f:2b:a9:a6:48:
                    42:91:37:4c:84:12:01:1b:4d:5d:8f:ec:cb:9f:85:
                    d8:b5:b7:e1:a7:b3:5a:52:b3:13:aa:6e:8d:f5:33:
                    5c:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:DA:EC:62:1F:2D:69:89:90:62:F3:60:29:9E:9F:AE:51:F8:3D:D1
            X509v3 Authority Key Identifier:
                keyid:1F:40:FC:C5:7C:26:A6:DD:B6:05:F7:79:8A:4B:53:C0:9D:2B:62:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3613254/C9012ADE023411EFA096505F017001B1/H0D8xXwmpt22Bfd5iktTwJ0rYiA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/H0D8xXwmpt22Bfd5iktTwJ0rYiA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3613254/C9012ADE023411EFA096505F017001B1/H0D8xXwmpt22Bfd5iktTwJ0rYiA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:11:8e:c3:ce:c9:ab:49:72:54:7e:45:16:01:11:c8:e3:0f:
         83:fd:a3:20:06:9c:03:11:11:c7:6f:df:11:86:b8:5d:85:2a:
         72:f5:52:ee:84:31:af:a8:da:1f:4f:b8:bd:13:7b:eb:20:db:
         89:42:b5:e6:5a:fc:62:08:2e:64:ae:e7:d6:28:e2:8b:29:a9:
         c0:3d:68:18:e5:27:85:75:93:61:6d:b2:eb:4d:0d:46:a8:a8:
         8c:d1:b6:80:8a:21:fc:d2:e3:5d:55:d2:68:98:ca:5d:c2:75:
         5a:30:cf:93:b5:f6:18:6a:71:ee:00:01:d8:25:bd:85:6c:2e:
         a8:6d:e3:88:c8:b1:7d:0d:f3:30:b3:ac:f5:51:70:e0:4a:b1:
         3d:92:14:27:bc:06:00:03:db:d7:4a:e8:bf:4d:9b:3c:3b:fb:
         ca:d3:39:11:be:00:7a:a2:48:14:db:fd:88:8e:4a:48:d6:2d:
         fd:53:87:78:6f:97:d3:d1:b1:64:27:2c:28:62:75:b9:84:b3:
         6f:75:4a:d3:f9:a8:34:2a:42:7f:8a:cd:e7:76:b6:8e:16:92:
         75:ca:de:d5:aa:d3:8b:5b:62:ca:75:b1:7e:bd:78:df:d8:d9:
         11:b7:0c:b9:1b:7a:81:04:77:e9:86:d8:b1:79:23:4c:5b:da:
         a5:d1:0f:5d
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAeMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MTMyNTRBRjExMC8GA1UEBRMoMUY0MEZDQzU3QzI2QTZEREI2MDVGNzc5OEE0QjUz
QzA5RDJCNjIyMDAeFw0yNTA3MjcwNDMzNDZaFw0yNTA3MjkwNDMzNDZaMBgxFjAU
BgNVBAMTDTY4ODVhYzJiLTBiMGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCYZKLuInNlDeARjaeSf6+bam8GmVEQVa7bOmkiLVbdBAgy9TK6+EXLn0CG
+s+6n2zsMB9i108WM53oycNGiU+jGV1uST5Y0dNw6yoOrCQinknjNzOk9sbWY8uv
yKKZ2D4UzTnSUVAOLDMlroSh1abxuijs3Z4q9lvone03+cl+Cbq2ES3DpnAJn8Xk
ePH+jf8y2qiPqp4U6TSRVTHM6w9RsP9cMvDDBWw9w7PmWCKXAwsj2d91pONpclLs
KWj6TsH+QAzrvVJ6ngQr/FIwcIM8FDI0Yz3+IsnKLuhvK6mmSEKRN0yEEgEbTV2P
7Mufhdi1t+Gns1pSsxOqbo31M1zXAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUf9rs
Yh8taYmQYvNgKZ6frlH4PdEwHwYDVR0jBBgwFoAUH0D8xXwmpt22Bfd5iktTwJ0r
YiAwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjEzMjU0L0M5MDEyQURFMDIzNDExRUZBMDk2NTA1RjAxNzAwMUIxL0gwRDh4
WHdtcHQyMkJmZDVpa3RUd0owcllpQS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0gwRDh4WHdtcHQyMkJmZDVpa3RUd0owcllpQS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MTMyNTQvQzkwMTJBREUwMjM0MTFFRkEwOTY1MDVGMDE3
MDAxQjEvSDBEOHhYd21wdDIyQmZkNWlrdFR3SjByWWlBLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDDEY7DzsmrSXJUfkUWARHI4w+D/aMg
BpwDERHHb98RhrhdhSpy9VLuhDGvqNofT7i9E3vrINuJQrXmWvxiCC5krufWKOKL
KanAPWgY5SeFdZNhbbLrTQ1GqKiM0baAiiH80uNdVdJomMpdwnVaMM+TtfYYanHu
AAHYJb2FbC6obeOIyLF9DfMws6z1UXDgSrE9khQnvAYAA9vXSui/TZs8O/vK0zkR
vgB6okgU2/2IjkpI1i39U4d4b5fT0bFkJywoYnW5hLNvdUrT+ag0KkJ/is3ndraO
FpJ1yt7VqtOLW2LKdbF+vXjf2NkRtwy5G3qBBHfphtixeSNMW9ql0Q9d
-----END CERTIFICATE-----
Generated at Sun Jul 27 07:59:34 2025 by rpki-client