Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.mft
File:                     YKDl0axmyK47fJ5qjvW8BLi7uI4.mft (raw, json)
Hash identifier:          RrgEl+rBJkmi6KGYQQcFbpBX57G0oq1vhUPP5g43Jec=
Subject key identifier:   54:DB:18:70:7D:AB:EE:72:18:2B:9D:32:58:5E:37:C6:01:91:CC:15
Authority key identifier: 60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
Certificate issuer:       /CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Certificate serial:       0895
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.mft
Manifest number:          07E2
Signing time:             Sun 02 Aug 2026 02:35:41 +0000
Manifest this update:     Sun 02 Aug 2026 02:35:40 +0000
Manifest next update:     Tue 04 Aug 2026 02:35:40 +0000
Files and hashes:         1: YKDl0axmyK47fJ5qjvW8BLi7uI4.crl (hash: 9U21YPdN4jfMkjdwfFfQ7JFtfPJdzkCruPYyfTjI9Tw=)
                          2: 2857AB583E0F11F1BBCF171ECF1D38B0.roa (hash: zXKX4+aphgAq7cWal19QXfuEMLB96KnGjV9AjHPPGP0=)
                          3: 488D3EB060B211EF87A97782762E951A.roa (hash: MVYbN3+gCL8uNH5R81Zu9Ge2lQxWhVsfh/rM4ZRyn/w=)
                          4: BC9C52986C5811F099231397DAE4EC9C.roa (hash: HouG8yLobXovUgqovzMNrrKkzd8yvO2tiqmIiHxJg5I=)
                          5: 9D00E53A042411F0AE942178762E951A.roa (hash: 3lO4ySirvSBJZhZS0yYuZYZ1ZoMcdgb1UxXC64iMMus=)
                          6: 675B538879D111F1806496E2CE1D38B0.roa (hash: bp+YaCSeLhLpcUdTFTWzyzlCYsw83e8JSVdbDNSccAA=)
                          7: 702BAEE858AA11F0AE7EFB8BDAE4EC9C.roa (hash: HZftb7SkoPVv8c3p79wmuz6GJ/7AyE9u3ys6HyH6VV8=)
                          8: 293DA02E0E9411EFB4C6A635017001B1.roa (hash: 3+KIiU4tfg4VsfxzRAEbpE5pkr5DnXevqMRkIzk01FM=)
                          9: 6C7ACBF26E0A11EFAC0C4258762E951A.roa (hash: 4grD6nGcP4ytHOjXft0LrvgGLuVL2rG269xNQf6k+eI=)
                          10: 11B6AE7E838F11F1994E2B1DCF1D38B0.roa (hash: 107O5Hc0T8kufuDN9DDsdJ548skzB1wVpr+HsKnPrE0=)
                          11: 3D55B2F0C43211EF8166C3BD762E951A.roa (hash: Af+fAJ8B4YCQU1OF1pDiIpmVk8a59qwsOLlr9TGYlBo=)
                          12: 4EFCF00622C111F1AAA1EFF2DAE4EC9C.roa (hash: 3D+Quaj4BMO4jtOSxnbnu0sxbAWpBZqh6HWx8W4zicM=)
                          13: 94B69FC84F1B11EFBF7CDAAE762E951A.roa (hash: KbxuO2uDPTezjLzyouQUc4XGgC1J865f/dnmoPHmv0Q=)
                          14: 0C083320B24F11EF80B52F71762E951A.roa (hash: swBYnhkImW9LhM0qswhHNCFqzYvKajWSuD7zcbFshH8=)
                          15: 373D29E4095511F096A41CBE762E951A.roa (hash: myBILke2RQ0OYPU057gGO3OXC3ByHG2noie9RgjT7qM=)
                          16: BA9BAA3C22C111F1ACA8CAF4DAE4EC9C.roa (hash: GYZpxLycHzLHmSDiBRqQ7uyBVa2S5xBQXI3/KUPkbHc=)
                          17: 467A6B4248DF11EFA203A954762E951A.roa (hash: j6LGYpvEwxNC35muXut5alaxgRUMQT87ILx6kToC8Qs=)
                          18: 21FFF270243711F19BF46CF5DAE4EC9C.roa (hash: y+yR/BjY5lbVDSiSHrjGsQSh+U1LLc7b06ohNZElnJ0=)
                          19: E2FD811CBC6511EF9197B567762E951A.roa (hash: EXiNgxy7d0tjLX1SpsLd379Zi3cAwKIMh7UFB0zyfF0=)
                          20: 646F613C003311F0A1A285B3762E951A.roa (hash: bJ1ILmkYuUC3NN3I2YJ1a0bc80c543GbkB4NCNMhrPc=)
                          21: 97CCC2681C5C11F1AE1F85A3DAE4EC9C.roa (hash: DsBjO5rK+mU2qS73wFVI/SMQlpsQmkwrtPwNgodDHRk=)
                          22: A8566A94136C11EF9A119E33017001B1.roa (hash: 8n6hGcHTkYJois2LH442hMoRDS4eG3DkPDkUW4heEZ8=)
                          23: BC5D3D90032D11F09ED36D5F762E951A.roa (hash: fZkSIZKqHjYLVMmlSF8FT38HnKjU0BqJ7lEBUixZVJ0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 04 Aug 2026 02:35:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2197 (0x895)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3614659AF, serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
        Validity
            Not Before: Aug  2 02:35:40 2026 GMT
            Not After : Aug  4 02:35:40 2026 GMT
        Subject: CN=6a6eacfd-302a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:3a:71:be:16:54:37:73:d5:43:20:0c:4c:9e:
                    50:16:52:00:a0:1b:f6:bc:18:d0:48:d9:56:b7:36:
                    f1:18:1f:de:0a:e0:b8:fe:d7:ea:21:c5:5a:3d:10:
                    ac:23:50:17:84:a5:e7:3e:ab:28:7c:1b:25:cf:63:
                    a5:d9:27:d7:48:ee:c7:22:53:45:cf:79:06:59:1f:
                    c5:79:31:6a:9c:2c:d3:dd:76:6d:be:e1:06:93:f5:
                    21:ac:11:f4:3b:aa:4b:2f:d2:c1:bc:15:db:4e:37:
                    f5:5e:d8:07:63:4d:df:f8:00:97:86:24:3b:19:20:
                    3d:04:67:b9:1c:5e:58:a1:e2:24:8e:ad:21:2b:f5:
                    c2:46:71:14:32:b9:fe:19:28:4c:f7:cc:54:49:6f:
                    a1:31:62:d7:ab:26:b3:43:09:b3:81:ba:8a:e7:6e:
                    3f:9b:7b:7e:24:ec:8c:5b:b7:76:5b:d4:d7:62:2f:
                    3d:65:82:29:53:3b:c7:5b:b6:85:f8:af:07:45:6f:
                    b4:ef:67:4a:83:1b:c2:a5:f0:59:42:03:be:2c:51:
                    6e:f0:3e:3b:37:3e:e8:c2:ed:55:39:7d:42:2f:d2:
                    1f:46:6a:69:40:13:62:21:79:6e:82:8e:b3:3b:77:
                    b7:78:f9:fe:04:9d:6e:52:67:fb:66:e4:c6:7b:d6:
                    74:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:DB:18:70:7D:AB:EE:72:18:2B:9D:32:58:5E:37:C6:01:91:CC:15
            X509v3 Authority Key Identifier:
                keyid:60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:9d:a6:4f:ab:6a:8d:da:94:1b:be:03:db:6d:c8:07:35:df:
         a2:7d:f6:1d:81:3b:37:be:1e:c8:40:2c:07:01:92:9f:d3:c7:
         9b:87:8e:80:1e:89:b3:81:d0:82:cf:78:0e:b4:7d:28:a4:c6:
         c2:06:7e:03:af:85:85:54:1a:49:52:e3:d1:c1:73:2c:c8:50:
         46:ea:ec:ba:8b:de:fd:c5:5d:d9:7e:39:3f:e1:8b:25:b1:9a:
         ae:f6:ac:ff:4a:b9:e4:4f:6a:e7:54:df:82:07:9c:20:91:ff:
         2b:aa:bb:bd:a8:b4:52:44:f9:f8:0d:4e:23:da:53:d0:91:60:
         be:cc:35:3d:45:78:c6:6d:7e:fd:63:7b:5f:ca:b5:f5:14:93:
         e3:56:c7:0a:fc:5c:a5:8c:9f:ec:d6:82:02:b3:d9:7c:47:2e:
         3d:59:bc:94:db:32:50:22:43:f2:a7:db:0f:a1:b1:d7:53:0e:
         b4:86:ac:60:5e:59:45:a5:f2:e5:97:50:39:f1:1f:5e:d2:e6:
         34:28:2f:bf:13:e8:80:5c:e6:52:5a:54:77:b1:c3:22:99:c7:
         1b:eb:20:2b:91:af:cf:18:85:37:f5:b4:de:88:36:05:80:99:
         85:41:c8:ae:e4:f4:b1:35:da:3c:e5:d8:e1:91:d4:aa:70:2e:
         51:08:6e:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 2 15:34:26 2026 by rpki-client