Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3619C8C/DE28B16C5FDA11EF8ACEB9A9762E951A/D1pm1nbRb8eSfE4kaUoejHekQGs.mft
File:                     D1pm1nbRb8eSfE4kaUoejHekQGs.mft (raw, json)
Hash identifier:          87TUTpo16T/SoaMS7K8jHVfqWkc3Ik0+HGqs5Ok2xOI=
Subject key identifier:   16:36:F8:74:44:E1:05:57:77:95:4F:0A:FF:C6:5F:82:79:E9:B3:F5
Authority key identifier: 0F:5A:66:D6:76:D1:6F:C7:92:7C:4E:24:69:4A:1E:8C:77:A4:40:6B
Certificate issuer:       /CN=F3619C8CRI/serialNumber=0F5A66D676D16FC7927C4E24694A1E8C77A4406B
Certificate serial:       0198
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/D1pm1nbRb8eSfE4kaUoejHekQGs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3619C8C/DE28B16C5FDA11EF8ACEB9A9762E951A/D1pm1nbRb8eSfE4kaUoejHekQGs.mft
Manifest number:          0197
Signing time:             Tue 16 Sep 2025 04:28:34 +0000
Manifest this update:     Tue 16 Sep 2025 04:28:33 +0000
Manifest next update:     Thu 18 Sep 2025 04:28:33 +0000
Files and hashes:         1: D1pm1nbRb8eSfE4kaUoejHekQGs.crl (hash: ZnRNu6dnSpoq4UZSO2axjbYXgiCcPXrIygJrHqj0iOU=)
                          2: 556811145FEA11EF84A2058A762E951A.roa (hash: P0gvfxM0hcVTDkEmLqEkHZpP55/CRPi31FOdnN+KXYg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3619C8C/DE28B16C5FDA11EF8ACEB9A9762E951A/D1pm1nbRb8eSfE4kaUoejHekQGs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3619C8C/DE28B16C5FDA11EF8ACEB9A9762E951A/D1pm1nbRb8eSfE4kaUoejHekQGs.mft
                          rsync://rpki.afrinic.net/repository/ripe/D1pm1nbRb8eSfE4kaUoejHekQGs.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 18 Sep 2025 00:45:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 408 (0x198)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3619C8CRI, serialNumber=0F5A66D676D16FC7927C4E24694A1E8C77A4406B
        Validity
            Not Before: Sep 16 04:28:33 2025 GMT
            Not After : Sep 18 04:28:33 2025 GMT
        Subject: CN=68c8e772-54c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:0a:62:7c:74:5b:97:df:e5:8a:db:b2:d9:79:
                    41:0c:c1:f5:dd:6d:8e:fa:8b:52:70:36:83:08:df:
                    82:2c:76:26:37:75:d7:93:0f:cc:ae:9f:2e:74:93:
                    d4:68:94:1c:e2:6b:7a:2c:c2:f4:08:b1:4e:75:76:
                    ac:c0:0a:2c:07:30:5e:75:07:b7:e7:69:3f:77:65:
                    79:78:d4:07:e3:e6:23:e5:7b:b2:08:30:4b:36:3f:
                    7a:8e:f8:30:41:eb:e2:c6:5d:32:7c:f7:28:44:3d:
                    46:5b:63:bf:2c:b1:aa:e8:f5:e1:52:f7:26:20:92:
                    01:75:08:47:b4:c5:2e:f4:dc:ce:5d:90:25:cd:07:
                    dc:e3:64:2f:c7:0c:2c:17:26:1e:c6:1a:d4:d3:b9:
                    37:3a:0c:c3:dd:d3:91:cc:13:fc:fd:6b:54:99:c2:
                    a8:dc:02:66:7a:73:14:be:23:0f:fd:23:22:9f:56:
                    c7:61:26:f4:3a:c3:66:71:4b:ff:c0:74:82:eb:37:
                    75:18:58:8a:bb:ed:02:aa:b2:fa:db:8c:5a:bc:65:
                    08:ba:01:1c:25:8f:6f:61:88:0d:eb:38:a5:1d:f4:
                    79:26:f2:cd:4b:c9:2b:e8:f7:74:df:c0:85:22:17:
                    e4:1a:64:8e:e1:b3:a7:36:92:a3:f2:fa:87:99:1d:
                    a1:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:36:F8:74:44:E1:05:57:77:95:4F:0A:FF:C6:5F:82:79:E9:B3:F5
            X509v3 Authority Key Identifier:
                keyid:0F:5A:66:D6:76:D1:6F:C7:92:7C:4E:24:69:4A:1E:8C:77:A4:40:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3619C8C/DE28B16C5FDA11EF8ACEB9A9762E951A/D1pm1nbRb8eSfE4kaUoejHekQGs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/D1pm1nbRb8eSfE4kaUoejHekQGs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3619C8C/DE28B16C5FDA11EF8ACEB9A9762E951A/D1pm1nbRb8eSfE4kaUoejHekQGs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:c3:2d:4e:55:d7:e4:8c:fa:8d:66:27:05:69:13:a3:1e:35:
         d3:ab:7d:2d:b8:b6:7c:3a:44:dd:0b:06:1a:8b:8f:b4:80:ea:
         40:16:8a:65:15:ca:3e:1c:b5:6d:82:18:95:77:6d:0b:7a:6d:
         53:af:00:ea:6f:f7:58:1b:ab:77:14:0f:52:13:dd:80:4a:ac:
         7f:b8:de:79:1e:29:40:6c:2e:23:02:7c:6c:77:43:2b:fa:79:
         8b:7a:76:62:70:4f:85:fc:ba:c2:98:97:35:04:07:3a:ad:cc:
         4d:ff:c1:b1:6d:52:31:62:fb:27:db:2b:c4:1c:20:27:35:06:
         8a:82:e2:12:55:7c:1e:c0:e7:30:c5:41:8a:a1:a6:dd:95:0f:
         3a:0f:a1:63:f6:d0:5a:d4:87:7d:75:af:e0:48:58:17:d4:a3:
         84:4d:eb:f6:60:9d:0b:f9:4d:1f:b8:fb:a5:72:d5:eb:26:d5:
         41:d5:08:6f:da:55:30:35:8a:10:a4:d7:a2:00:4c:12:0a:cd:
         61:73:ce:e4:14:d1:ac:6c:53:7a:fc:88:f8:83:50:86:1e:a3:
         bb:1c:05:7e:8b:24:a3:ca:97:40:5b:a7:de:cd:de:7c:5c:de:
         85:9a:25:00:ad:a6:16:ae:7a:57:da:3c:64:bf:db:84:45:ea:
         ec:09:58:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 01:08:44 2025 by rpki-client