Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361785A/87ADD7309FF011EFB75B2B9D762E951A/rMoLOe836hkY2RAi6kHS1ZNtJCY.mft
File:                     rMoLOe836hkY2RAi6kHS1ZNtJCY.mft (raw, json)
Hash identifier:          sB4NqqHNvWILqJ8C5T7QTf7E0enR0FBuFl6N/vhkxNA=
Subject key identifier:   7A:0B:74:49:D1:EB:9F:8A:66:A6:CC:3B:A7:C2:E4:CB:48:15:31:D1
Authority key identifier: AC:CA:0B:39:EF:37:EA:19:18:D9:10:22:EA:41:D2:D5:93:6D:24:26
Certificate issuer:       /CN=F361785AAF/serialNumber=ACCA0B39EF37EA1918D91022EA41D2D5936D2426
Certificate serial:       0119
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rMoLOe836hkY2RAi6kHS1ZNtJCY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361785A/87ADD7309FF011EFB75B2B9D762E951A/rMoLOe836hkY2RAi6kHS1ZNtJCY.mft
Manifest number:          0116
Signing time:             Thu 31 Jul 2025 05:10:14 +0000
Manifest this update:     Thu 31 Jul 2025 05:10:13 +0000
Manifest next update:     Sat 02 Aug 2025 05:10:13 +0000
Files and hashes:         1: rMoLOe836hkY2RAi6kHS1ZNtJCY.crl (hash: bXNBeow2Stuk6ffIBJdvHaEVQBHE2znhcUK42NXeZs4=)
                          2: 0865A9A03F8011F09D9EB4C0DAE4EC9C.roa (hash: eAtT77xV4NEBf1cf+HT8ySye2iBWrSOl4kk6XxsESlo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361785A/87ADD7309FF011EFB75B2B9D762E951A/rMoLOe836hkY2RAi6kHS1ZNtJCY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361785A/87ADD7309FF011EFB75B2B9D762E951A/rMoLOe836hkY2RAi6kHS1ZNtJCY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/rMoLOe836hkY2RAi6kHS1ZNtJCY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 02 Aug 2025 00:08:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 281 (0x119)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361785AAF, serialNumber=ACCA0B39EF37EA1918D91022EA41D2D5936D2426
        Validity
            Not Before: Jul 31 05:10:13 2025 GMT
            Not After : Aug  2 05:10:13 2025 GMT
        Subject: CN=688afab6-ec23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:a2:63:8e:3c:e8:1f:59:62:dc:60:68:c4:e2:
                    c6:7b:98:fe:63:8b:cc:51:b3:e0:7d:58:2e:08:4b:
                    c7:67:94:b8:4a:15:64:84:4e:33:d5:68:c4:0e:2a:
                    57:31:a3:a9:fe:77:92:df:21:c9:3d:05:6a:53:eb:
                    c0:a7:86:a8:50:ed:9a:35:58:21:7b:14:7e:bc:24:
                    f9:f8:b1:bd:42:18:b9:af:f3:9f:09:60:9b:a6:32:
                    3c:0b:86:7e:15:d1:59:73:d8:37:84:e5:c6:e4:00:
                    08:b4:fc:30:a3:97:0c:ee:83:41:be:88:b8:55:86:
                    bc:1b:f3:98:79:3e:71:85:3d:87:06:fd:a3:fb:d1:
                    8c:88:6a:bf:e9:f5:b8:ae:18:0f:de:19:f5:a8:34:
                    14:fa:2f:d4:93:f9:11:71:16:d6:aa:37:2f:74:fc:
                    8f:6e:fd:c9:bc:fe:6e:39:73:70:78:50:4f:c2:f2:
                    61:12:03:bb:3d:b8:ba:86:ac:b7:a2:05:e3:01:95:
                    fa:61:c2:1f:03:39:0e:f0:43:96:00:86:ac:a4:20:
                    2e:e7:b8:03:e1:7e:70:0c:67:47:80:25:8d:94:fa:
                    c4:d4:da:ce:a5:24:29:24:88:20:14:a8:05:3f:0d:
                    4b:de:d2:d1:70:d2:46:72:cf:52:aa:c6:e0:cf:36:
                    ca:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:0B:74:49:D1:EB:9F:8A:66:A6:CC:3B:A7:C2:E4:CB:48:15:31:D1
            X509v3 Authority Key Identifier:
                keyid:AC:CA:0B:39:EF:37:EA:19:18:D9:10:22:EA:41:D2:D5:93:6D:24:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361785A/87ADD7309FF011EFB75B2B9D762E951A/rMoLOe836hkY2RAi6kHS1ZNtJCY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rMoLOe836hkY2RAi6kHS1ZNtJCY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361785A/87ADD7309FF011EFB75B2B9D762E951A/rMoLOe836hkY2RAi6kHS1ZNtJCY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:84:f7:33:68:a2:36:5c:85:18:6e:15:f6:82:e9:62:8d:c7:
         a9:d1:b8:15:04:e9:99:1a:85:48:d8:ad:f5:bf:be:f1:2e:e5:
         8e:47:d5:f6:de:f6:03:3a:39:e6:ab:27:f0:8d:c8:5a:21:dc:
         09:35:41:cb:0d:39:24:16:01:7e:14:04:1f:a6:f4:a6:63:88:
         17:9b:72:d2:8e:64:87:ed:bc:be:de:13:e3:ef:aa:e3:56:e3:
         e7:e9:99:29:42:2c:8b:71:12:3c:25:6f:f0:a6:34:cc:81:df:
         55:27:22:b9:4b:c7:fd:af:97:e9:ae:38:12:8c:8f:79:3d:2d:
         4f:8f:62:cd:77:61:b9:6b:5d:53:aa:00:3b:62:0b:6d:e5:9e:
         7a:78:93:af:0f:91:2e:24:bc:27:46:b0:18:ac:ea:f3:82:31:
         95:8d:80:ce:3d:f9:75:0b:93:c9:94:ba:ff:11:50:9a:e5:2f:
         a3:71:67:0b:c1:5f:65:0b:2c:fd:65:8f:d9:16:69:84:b3:f6:
         6a:47:24:ee:9c:1e:b7:b1:db:ff:aa:b3:90:66:4c:4d:a8:a6:
         48:93:d2:47:65:a9:23:9b:70:64:cd:63:c5:13:7c:79:77:26:
         b8:15:a0:76:ec:38:e5:db:ee:a8:9c:4b:8c:96:ef:4b:ee:4d:
         47:f2:13:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 10:00:55 2025 by rpki-client