Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3619C8C/F5B78D8A5FDA11EFBF5D85AB762E951A/tIDko6bVxyRdD2BorIVLj3CuxU0.mft
File:                     tIDko6bVxyRdD2BorIVLj3CuxU0.mft (raw, json)
Hash identifier:          DaIG2g6oG0OToOy3ieA3YTIGO3hJwqwOxew6hmc2VaE=
Subject key identifier:   73:E6:75:81:D7:D9:F1:F1:EA:D2:3A:AD:4F:73:33:13:9F:CE:1A:71
Authority key identifier: B4:80:E4:A3:A6:D5:C7:24:5D:0F:60:68:AC:85:4B:8F:70:AE:C5:4D
Certificate issuer:       /CN=F3619C8CAR/serialNumber=B480E4A3A6D5C7245D0F6068AC854B8F70AEC54D
Certificate serial:       0167
Authority info access:    rsync://rpki.afrinic.net/repository/arin/tIDko6bVxyRdD2BorIVLj3CuxU0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3619C8C/F5B78D8A5FDA11EFBF5D85AB762E951A/tIDko6bVxyRdD2BorIVLj3CuxU0.mft
Manifest number:          0166
Signing time:             Tue 29 Jul 2025 04:53:59 +0000
Manifest this update:     Tue 29 Jul 2025 04:53:58 +0000
Manifest next update:     Thu 31 Jul 2025 04:53:58 +0000
Files and hashes:         1: tIDko6bVxyRdD2BorIVLj3CuxU0.crl (hash: OzrNB+4pkRyoeiLH3BPfW5HjmfJvEmrDbR2zBY5MuNs=)
                          2: 58AECC145FEA11EFAFEC128A762E951A.roa (hash: jcK/gU7qGSgzHysiBsZbtsCedDHATQtaNVIo0wEs3Ro=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3619C8C/F5B78D8A5FDA11EFBF5D85AB762E951A/tIDko6bVxyRdD2BorIVLj3CuxU0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3619C8C/F5B78D8A5FDA11EFBF5D85AB762E951A/tIDko6bVxyRdD2BorIVLj3CuxU0.mft
                          rsync://rpki.afrinic.net/repository/arin/tIDko6bVxyRdD2BorIVLj3CuxU0.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 31 Jul 2025 00:26:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 359 (0x167)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3619C8CAR, serialNumber=B480E4A3A6D5C7245D0F6068AC854B8F70AEC54D
        Validity
            Not Before: Jul 29 04:53:58 2025 GMT
            Not After : Jul 31 04:53:58 2025 GMT
        Subject: CN=688853e7-937d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:e1:f8:21:c9:58:d7:72:c9:64:94:cf:73:d3:
                    1c:e3:93:5a:61:2b:6d:fb:7b:26:79:45:39:30:e0:
                    d8:86:67:80:29:33:d7:50:21:5e:e7:63:22:90:42:
                    21:77:a0:a5:7e:78:2b:3c:72:7e:c5:ef:0e:02:71:
                    27:75:1f:da:57:92:e7:a0:77:28:de:04:3d:40:3b:
                    58:ee:6c:86:1b:91:3c:9d:c2:00:82:ba:4b:bc:56:
                    85:0e:87:76:53:2b:07:24:cc:04:c3:b4:f7:9a:94:
                    a6:91:37:9d:c7:e9:49:8f:d2:81:5e:d4:86:17:26:
                    58:33:80:51:a4:cf:6d:f3:79:cf:2c:12:d2:b2:36:
                    15:17:ed:22:ad:2a:8d:8e:ae:4c:20:0d:ff:3c:96:
                    ab:17:04:eb:4e:39:bf:05:87:58:58:cf:8f:f1:12:
                    a3:a2:64:fa:85:d2:f9:e0:95:ee:a7:6f:bb:96:d9:
                    5e:bf:a6:5f:4e:a8:23:7d:05:e4:6a:82:c4:09:64:
                    1b:d0:9f:0b:33:8e:5b:1b:ce:05:2f:74:64:75:a9:
                    44:8c:b2:83:27:f6:ff:1c:c5:1a:cd:c3:af:9a:23:
                    18:a9:c5:d1:c2:84:19:99:c8:b1:0e:fc:ca:05:4d:
                    1e:d8:0a:6a:f2:e9:19:f9:75:c9:be:a8:ea:e8:17:
                    0a:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:E6:75:81:D7:D9:F1:F1:EA:D2:3A:AD:4F:73:33:13:9F:CE:1A:71
            X509v3 Authority Key Identifier:
                keyid:B4:80:E4:A3:A6:D5:C7:24:5D:0F:60:68:AC:85:4B:8F:70:AE:C5:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3619C8C/F5B78D8A5FDA11EFBF5D85AB762E951A/tIDko6bVxyRdD2BorIVLj3CuxU0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/tIDko6bVxyRdD2BorIVLj3CuxU0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3619C8C/F5B78D8A5FDA11EFBF5D85AB762E951A/tIDko6bVxyRdD2BorIVLj3CuxU0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:53:da:fa:2e:d1:a9:a2:0e:30:00:84:d1:46:27:25:ed:4f:
         42:2c:30:52:50:b5:77:3e:80:00:3f:4f:41:01:ee:34:0e:f2:
         c6:53:eb:3e:f5:bd:53:ca:9a:32:3c:95:7d:0b:b9:2d:27:2d:
         d8:7c:09:4f:b9:19:5e:57:8c:b5:19:46:7d:8a:bc:c0:43:8a:
         9f:18:6a:44:5b:97:d3:39:9f:7b:93:ef:7e:c9:73:0f:99:ff:
         8d:0c:29:08:30:e5:72:1f:d1:9e:29:8c:03:51:66:95:a8:b0:
         60:51:09:8b:8d:fe:9f:da:db:26:d6:1f:3c:fb:90:0c:2c:8f:
         02:f1:1f:db:d3:3d:ad:7d:fa:b1:08:a4:7c:50:57:a3:aa:e0:
         97:57:27:25:4b:e3:3d:71:d7:01:5a:54:8f:4e:bd:c9:15:68:
         85:76:9e:4f:05:5f:76:c5:62:81:de:15:3f:69:55:e2:0f:97:
         18:86:f0:9e:a4:0d:0d:98:04:54:ca:81:bd:a5:68:0e:de:8f:
         a0:d2:4e:e1:4b:87:a5:d2:05:9e:b1:0a:b2:b3:67:28:b7:bc:
         7b:59:1f:ae:78:6b:f8:bd:f6:e7:3d:33:b9:8b:19:7b:fd:c2:
         1c:98:23:04:9f:83:57:5a:f8:b9:04:18:2c:31:15:ed:99:fe:
         60:39:fd:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 13:23:37 2025 by rpki-client