Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36390A9/1B3A425486E211EFB4686096762E951A/8GzMRNUs-b4RXOx6TaaxMJukOaU.mft
File:                     8GzMRNUs-b4RXOx6TaaxMJukOaU.mft (raw, json)
Hash identifier:          jeOO9gme5L2A0wk1ixiL8DaZP7xdKG9SZ1J4KgSeOHg=
Subject key identifier:   27:EC:11:19:45:00:BD:51:64:F5:6E:2C:02:75:23:37:68:F9:F6:FC
Authority key identifier: F0:6C:CC:44:D5:2C:F9:BE:11:5C:EC:7A:4D:A6:B1:30:9B:A4:39:A5
Certificate issuer:       /CN=F36390A9RI/serialNumber=F06CCC44D52CF9BE115CEC7A4DA6B1309BA439A5
Certificate serial:       0133
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/8GzMRNUs-b4RXOx6TaaxMJukOaU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36390A9/1B3A425486E211EFB4686096762E951A/8GzMRNUs-b4RXOx6TaaxMJukOaU.mft
Manifest number:          0132
Signing time:             Sat 02 Aug 2025 05:01:50 +0000
Manifest this update:     Sat 02 Aug 2025 05:01:49 +0000
Manifest next update:     Mon 04 Aug 2025 05:01:49 +0000
Files and hashes:         1: 8GzMRNUs-b4RXOx6TaaxMJukOaU.crl (hash: KOL3V1IqxjLQZ60YSfktZfUeboMdb3WMYOsbehc8Nzw=)
                          2: 7F1695F2871411EF981CC64F762E951A.roa (hash: y+9csfTO7VjobZ1q8Iv+RH3EIrHQat1B/mZ0hIosNpk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36390A9/1B3A425486E211EFB4686096762E951A/8GzMRNUs-b4RXOx6TaaxMJukOaU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36390A9/1B3A425486E211EFB4686096762E951A/8GzMRNUs-b4RXOx6TaaxMJukOaU.mft
                          rsync://rpki.afrinic.net/repository/ripe/8GzMRNUs-b4RXOx6TaaxMJukOaU.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 04 Aug 2025 00:45:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 307 (0x133)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36390A9RI, serialNumber=F06CCC44D52CF9BE115CEC7A4DA6B1309BA439A5
        Validity
            Not Before: Aug  2 05:01:49 2025 GMT
            Not After : Aug  4 05:01:49 2025 GMT
        Subject: CN=688d9bbe-2ffa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:90:99:64:7d:de:8d:2f:5d:83:93:a8:6a:85:
                    e0:b9:0c:dc:8a:4a:2a:a8:49:63:ce:fd:4d:ce:5d:
                    df:72:c8:00:89:a5:d0:58:86:46:e2:fc:a2:f7:d3:
                    6b:38:11:7c:8d:80:24:c7:0d:bd:64:1f:11:a9:18:
                    78:7f:cf:dc:29:70:be:a0:94:aa:ed:32:0f:eb:12:
                    fa:47:87:61:fd:45:32:5f:ec:f2:42:bc:b8:05:f8:
                    88:22:60:ce:ed:cb:de:b9:50:0f:30:a0:64:d3:a6:
                    04:1c:79:cf:d2:74:d0:20:85:37:43:e2:c6:b6:ec:
                    7c:85:f0:69:cf:73:15:44:4c:77:6e:f3:d2:d0:6c:
                    26:83:af:d9:34:c0:fb:2f:8e:19:12:0a:eb:4f:4c:
                    52:85:d9:bb:62:21:54:c0:fa:53:b7:b8:94:1f:30:
                    eb:73:7b:3f:44:c3:2b:08:cf:89:66:b8:f2:b4:eb:
                    9f:ac:3d:70:33:eb:39:a9:41:87:5d:13:12:ee:30:
                    bf:df:20:3b:f7:28:16:20:b5:1c:b1:61:5f:68:66:
                    be:c3:b7:f0:17:09:26:af:d1:81:8d:a8:d3:32:6d:
                    1a:6e:52:8b:9b:2d:62:6a:36:49:6d:9e:14:e5:06:
                    fc:09:a0:a0:77:37:bf:41:44:79:82:8d:12:30:7d:
                    7a:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:EC:11:19:45:00:BD:51:64:F5:6E:2C:02:75:23:37:68:F9:F6:FC
            X509v3 Authority Key Identifier:
                keyid:F0:6C:CC:44:D5:2C:F9:BE:11:5C:EC:7A:4D:A6:B1:30:9B:A4:39:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36390A9/1B3A425486E211EFB4686096762E951A/8GzMRNUs-b4RXOx6TaaxMJukOaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/8GzMRNUs-b4RXOx6TaaxMJukOaU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36390A9/1B3A425486E211EFB4686096762E951A/8GzMRNUs-b4RXOx6TaaxMJukOaU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:4b:34:e1:75:6f:c4:76:61:71:c4:f5:11:43:be:ac:84:5b:
         5e:fd:bd:80:b2:5b:78:c7:8b:13:a7:34:30:d0:52:ec:ff:9f:
         ed:19:7a:f0:19:df:97:26:ad:c9:05:ea:5d:81:54:93:1d:b6:
         e6:06:f0:c3:39:f6:03:41:ec:f8:cd:02:ae:b2:0f:de:fe:ab:
         98:6c:9d:f2:a2:fd:c5:32:eb:26:03:6d:23:38:a9:1e:0d:9d:
         92:ff:de:a9:ce:45:41:3b:ee:99:b3:98:9f:c6:44:42:23:51:
         c7:ed:f7:71:4d:50:0a:b2:f0:68:18:97:ae:06:61:ba:a7:99:
         2e:96:a2:f2:e9:25:97:b1:a9:c4:4d:8e:1a:b6:01:2e:0a:19:
         ac:1f:c3:5e:64:47:c7:a8:cb:06:00:a0:b9:c0:0a:97:8a:62:
         30:7f:9d:18:cc:19:9c:ba:10:c0:68:a4:e5:93:96:5f:ef:f0:
         a1:d3:8a:62:32:3c:4f:4b:59:fa:bf:68:69:bc:db:f9:c1:3b:
         42:85:26:85:df:f6:89:b6:61:bc:43:ad:79:f7:55:94:4d:da:
         78:e1:2b:fe:91:ff:a9:30:6e:57:7f:91:ac:02:5f:ff:71:ae:
         ec:5d:7b:2a:7e:70:91:91:50:3a:c3:a2:54:ee:9a:d1:1c:4a:
         dd:a7:39:d0
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICATMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MzkwQTlSSTExMC8GA1UEBRMoRjA2Q0NDNDRENTJDRjlCRTExNUNFQzdBNERBNkIx
MzA5QkE0MzlBNTAeFw0yNTA4MDIwNTAxNDlaFw0yNTA4MDQwNTAxNDlaMBgxFjAU
BgNVBAMTDTY4OGQ5YmJlLTJmZmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDNkJlkfd6NL12Dk6hqheC5DNyKSiqoSWPO/U3OXd9yyACJpdBYhkbi/KL3
02s4EXyNgCTHDb1kHxGpGHh/z9wpcL6glKrtMg/rEvpHh2H9RTJf7PJCvLgF+Igi
YM7ty965UA8woGTTpgQcec/SdNAghTdD4sa27HyF8GnPcxVETHdu89LQbCaDr9k0
wPsvjhkSCutPTFKF2btiIVTA+lO3uJQfMOtzez9EwysIz4lmuPK065+sPXAz6zmp
QYddExLuML/fIDv3KBYgtRyxYV9oZr7Dt/AXCSav0YGNqNMybRpuUoubLWJqNklt
nhTlBvwJoKB3N79BRHmCjRIwfXoRAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUJ+wR
GUUAvVFk9W4sAnUjN2j59vwwHwYDVR0jBBgwFoAU8GzMRNUs+b4RXOx6TaaxMJuk
OaUwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjM5MEE5LzFCM0E0MjU0ODZFMjExRUZCNDY4NjA5Njc2MkU5NTFBLzhHek1S
TlVzLWI0UlhPeDZUYWF4TUp1a09hVS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9yaXBl
LzhHek1STlVzLWI0UlhPeDZUYWF4TUp1a09hVS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2MzkwQTkvMUIzQTQyNTQ4NkUyMTFFRkI0Njg2MDk2NzYyRTk1
MUEvOEd6TVJOVXMtYjRSWE94NlRhYXhNSnVrT2FVLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCGSzThdW/EdmFxxPURQ76shFte/b2Aslt4
x4sTpzQw0FLs/5/tGXrwGd+XJq3JBepdgVSTHbbmBvDDOfYDQez4zQKusg/e/quY
bJ3yov3FMusmA20jOKkeDZ2S/96pzkVBO+6Zs5ifxkRCI1HH7fdxTVAKsvBoGJeu
BmG6p5kulqLy6SWXsanETY4atgEuChmsH8NeZEfHqMsGAKC5wAqXimIwf50YzBmc
uhDAaKTlk5Zf7/Ch04piMjxPS1n6v2hpvNv5wTtChSaF3/aJtmG8Q61591WUTdp4
4Sv+kf+pMG5Xf5GsAl//ca7sXXsqfnCRkVA6w6JU7prRHErdpznQ
-----END CERTIFICATE-----
Generated at Sat Aug 2 18:21:33 2025 by rpki-client