Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36390A9/1B3A425486E211EFB4686096762E951A/8GzMRNUs-b4RXOx6TaaxMJukOaU.mft
File:                     8GzMRNUs-b4RXOx6TaaxMJukOaU.mft (raw, json)
Hash identifier:          9kvNwaTSEU5G97n1RiATBtf3xfZ7q40vmcZNcaTyYnA=
Subject key identifier:   40:F3:9E:46:DA:6C:34:AA:6A:67:06:15:31:7E:EC:C2:EB:DA:FD:A7
Authority key identifier: F0:6C:CC:44:D5:2C:F9:BE:11:5C:EC:7A:4D:A6:B1:30:9B:A4:39:A5
Certificate issuer:       /CN=F36390A9RI/serialNumber=F06CCC44D52CF9BE115CEC7A4DA6B1309BA439A5
Certificate serial:       029D
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/8GzMRNUs-b4RXOx6TaaxMJukOaU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36390A9/1B3A425486E211EFB4686096762E951A/8GzMRNUs-b4RXOx6TaaxMJukOaU.mft
Manifest number:          029C
Signing time:             Sun 26 Jul 2026 04:34:09 +0000
Manifest this update:     Sun 26 Jul 2026 04:34:08 +0000
Manifest next update:     Tue 28 Jul 2026 04:34:08 +0000
Files and hashes:         1: 8GzMRNUs-b4RXOx6TaaxMJukOaU.crl (hash: xCQU1LgvLhXvpjiM0dBp/HO4HhvsI5sqeW22Hg2KJsk=)
                          2: 7F1695F2871411EF981CC64F762E951A.roa (hash: y+9csfTO7VjobZ1q8Iv+RH3EIrHQat1B/mZ0hIosNpk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36390A9/1B3A425486E211EFB4686096762E951A/8GzMRNUs-b4RXOx6TaaxMJukOaU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36390A9/1B3A425486E211EFB4686096762E951A/8GzMRNUs-b4RXOx6TaaxMJukOaU.mft
                          rsync://rpki.afrinic.net/repository/ripe/8GzMRNUs-b4RXOx6TaaxMJukOaU.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 28 Jul 2026 04:34:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 669 (0x29d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36390A9RI, serialNumber=F06CCC44D52CF9BE115CEC7A4DA6B1309BA439A5
        Validity
            Not Before: Jul 26 04:34:08 2026 GMT
            Not After : Jul 28 04:34:08 2026 GMT
        Subject: CN=6a658e40-a6a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:6c:43:18:15:5b:e2:d3:6e:91:61:43:a6:02:
                    2c:0f:10:be:42:25:1e:e0:17:05:a5:97:11:6b:1c:
                    16:86:d3:42:13:43:54:14:ca:4e:68:3a:df:6d:ca:
                    6b:ee:94:99:e0:76:0c:72:72:fa:9c:a3:55:1a:e1:
                    55:2a:7f:95:5d:aa:22:7e:79:ed:30:5f:b7:d8:7f:
                    61:68:65:4a:fd:a6:3d:2f:fb:10:5a:a7:1f:19:61:
                    6c:9a:f1:bb:06:c3:4a:15:79:45:b5:42:0d:34:42:
                    7d:16:6e:52:ad:19:0b:0b:b9:8d:d2:a4:c3:2e:ba:
                    4a:09:33:f6:cf:c0:10:fc:60:c6:a6:a0:6a:90:75:
                    57:74:24:90:25:a5:96:f1:80:69:75:4b:5e:7b:a6:
                    76:a5:5e:ba:3f:fe:04:ea:a7:9d:fc:0d:a6:57:40:
                    33:71:a6:e7:aa:0f:0c:6d:c6:b6:79:01:46:c2:8d:
                    8b:06:da:47:8b:9c:fe:9a:52:cc:80:23:62:cf:f9:
                    dc:7a:70:24:90:3a:fb:47:c2:ff:a9:88:b0:eb:f9:
                    4f:bd:7f:3d:a9:89:32:ac:8e:f6:ac:b3:cd:8a:13:
                    bb:48:8c:bd:f1:cf:b2:29:f6:3c:61:e0:9b:7a:8c:
                    e6:53:6c:9b:78:bd:32:ff:90:ef:23:01:46:e9:47:
                    90:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:F3:9E:46:DA:6C:34:AA:6A:67:06:15:31:7E:EC:C2:EB:DA:FD:A7
            X509v3 Authority Key Identifier:
                keyid:F0:6C:CC:44:D5:2C:F9:BE:11:5C:EC:7A:4D:A6:B1:30:9B:A4:39:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36390A9/1B3A425486E211EFB4686096762E951A/8GzMRNUs-b4RXOx6TaaxMJukOaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/8GzMRNUs-b4RXOx6TaaxMJukOaU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36390A9/1B3A425486E211EFB4686096762E951A/8GzMRNUs-b4RXOx6TaaxMJukOaU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:f8:5e:83:18:a4:5e:98:7d:78:da:02:53:50:31:9a:e1:69:
         bb:fd:dd:44:1a:62:10:e2:2c:98:6b:42:27:09:52:7e:b1:23:
         4e:43:74:2d:de:a2:a5:f1:83:29:22:93:c6:4f:e2:41:47:90:
         b5:d5:b2:33:c4:d1:44:76:94:c3:16:d7:a1:a4:98:df:9c:16:
         f6:4d:f6:47:dd:1d:dd:4b:99:c0:57:18:14:ab:4a:75:ae:33:
         6c:64:6a:1c:0f:ec:c5:53:5f:7c:cd:d4:d2:6d:e9:7d:c3:12:
         00:a8:d0:e3:96:d0:cc:10:83:82:24:c4:85:b6:7a:f1:46:c8:
         de:67:8b:61:77:35:bc:c6:6d:0f:fc:c6:0e:b6:51:f7:fe:91:
         69:6e:48:c2:05:44:dd:61:f0:67:a6:3f:99:aa:de:6e:b6:22:
         ee:c6:42:81:4a:88:6b:85:bb:fe:9e:fc:75:54:fb:b6:c4:6b:
         dd:84:3f:30:30:3c:43:b4:cb:26:7a:9d:0c:68:8b:e1:b5:32:
         87:97:a7:8a:df:bc:2d:22:cf:73:61:25:65:0f:df:23:7f:56:
         57:2e:7f:25:05:ea:09:5e:f9:92:42:fe:6e:f0:3c:a5:f2:6f:
         72:cd:f1:24:9e:7a:cf:52:d5:92:62:3b:ca:84:dc:dd:a9:eb:
         10:de:13:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 05:31:07 2026 by rpki-client