Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3642CB1/2A238452348911EF96C98D9E762E951A/SC3uwpEw7SAtg5nWmhMmmqYSr9M.mft
File:                     SC3uwpEw7SAtg5nWmhMmmqYSr9M.mft (raw, json)
Hash identifier:          6KIU3XJCzYA6Vt9C1JrLP9TAVMZmfUcoLQaBeoR5lMo=
Subject key identifier:   82:81:55:23:7A:2D:8D:F5:EF:87:6E:64:02:45:BB:DF:BE:CC:10:9B
Authority key identifier: 48:2D:EE:C2:91:30:ED:20:2D:83:99:D6:9A:13:26:9A:A6:12:AF:D3
Certificate issuer:       /CN=F3642CB1AF/serialNumber=482DEEC29130ED202D8399D69A13269AA612AFD3
Certificate serial:       01CB
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SC3uwpEw7SAtg5nWmhMmmqYSr9M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/2A238452348911EF96C98D9E762E951A/SC3uwpEw7SAtg5nWmhMmmqYSr9M.mft
Manifest number:          01B4
Signing time:             Sun 27 Jul 2025 04:40:45 +0000
Manifest this update:     Sun 27 Jul 2025 04:40:44 +0000
Manifest next update:     Tue 29 Jul 2025 04:40:44 +0000
Files and hashes:         1: SC3uwpEw7SAtg5nWmhMmmqYSr9M.crl (hash: 0T0v7+OTSspaeFX231BtR3Oj8zgf6Uw20NFqIOnNbdE=)
                          2: FA56183C4A2E11EF935CD441762E951A.roa (hash: qasmLn0THzKUXPfZdrwuy9yINB8A6qwmZTMMTYcCuGE=)
                          3: 7A3144EE4A2211EFB67B7D60762E951A.roa (hash: j3JAykS4OQX/hDoFdEl316HNecziqAF0XC9NdGRUFKs=)
                          4: ACA70A7E4A1F11EFB750724B762E951A.roa (hash: jJTJnCCr3s4j/KC7iphB3k6ogrQ8G2LscLSFEQgVdg0=)
                          5: 9C73B5384A2611EF8F9A1380762E951A.roa (hash: nRAl69sp6vxHIEfCOCmW9Tz389R1auBc2Q7TENAtRGg=)
                          6: 148FD532495611EFAF07166C762E951A.roa (hash: ceOINoEGaKZPmp9jQxtF1qPs3DuclWxOvdxTt3Kbm/Q=)
                          7: B8A021FA4A2211EF8E185461762E951A.roa (hash: REvrDWvDpOLHYskkTXn9T4RA7HGDSP4fR+NvvGDn1uM=)
                          8: 6C108DB64A3611EF92C1C272762E951A.roa (hash: 3LWWxZduhASOp99bwc0yFeC4A2HSLl0PaRIJhKGmd80=)
                          9: 3CBFED64495411EFB6814C5D762E951A.roa (hash: rYrqlqO0kH8b1oM3UkYuWQ0BlyjcbnvQAaOtL36BdpY=)
                          10: 5452C2DA495911EFB60F9885762E951A.roa (hash: jm5I0TsEDHwv7ouFvepzTDlWJcMqPxPV2YIxH7RtI10=)
                          11: 498D37264A2711EFA1894F85762E951A.roa (hash: VQjB7QxkyWPW6zXkuLfk+fW9phqSykjKICBVdLaBH3M=)
                          12: BFD83C124A2E11EFB4893BBC762E951A.roa (hash: f5W6wC5Z6Pqj371DpiEXu2jOcFA6/nWQTPbxHnSrCKQ=)
                          13: A8B9E3A0D23211EFA0D093AD762E951A.roa (hash: TwodjfSPJtOum7H0x8fQ1+YqsoDP0TA/A3LbvBR8fR0=)
                          14: B5F67940495A11EFBD9D1F91762E951A.roa (hash: Fxf/e9tt77VXipQwVutTjXDkhsLGh3QnCmbowhMJuac=)
                          15: 6D2E74EC495A11EF8DD0F68C762E951A.roa (hash: Tx9oqh45dbtkEF/evkOGPsO3I8D+e6jKaajVRCuI6SI=)
                          16: 36179DCE456511EFB6170CA4762E951A.roa (hash: fW31+smtFp89q7DbRmjBn7koBQzEeA4McjXb/UoaZ+8=)
                          17: CD63089443D511EFBF754787762E951A.roa (hash: rXdaal/ApEINvTRYPpslBerAIR2l4UEEtidE419g51Q=)
                          18: 335AE6084A2F11EF9F06A342762E951A.roa (hash: +Jag2XtPaReW28LLYskeApEkdXybNuIZuhATM6amnqA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/2A238452348911EF96C98D9E762E951A/SC3uwpEw7SAtg5nWmhMmmqYSr9M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/2A238452348911EF96C98D9E762E951A/SC3uwpEw7SAtg5nWmhMmmqYSr9M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/SC3uwpEw7SAtg5nWmhMmmqYSr9M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Jul 2025 00:06:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 459 (0x1cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3642CB1AF, serialNumber=482DEEC29130ED202D8399D69A13269AA612AFD3
        Validity
            Not Before: Jul 27 04:40:44 2025 GMT
            Not After : Jul 29 04:40:44 2025 GMT
        Subject: CN=6885adcc-04da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:64:93:5b:e3:76:a6:e7:6f:a2:2a:94:7f:3e:
                    8d:88:9e:e6:5c:3f:42:73:00:ef:6a:92:f3:7b:bc:
                    cb:a3:4f:f6:cc:2d:eb:34:ec:04:4a:38:2b:2a:c1:
                    5c:29:d2:02:7a:8f:fa:c8:bd:89:34:f7:c5:d7:42:
                    5f:c6:2c:b9:87:f3:c8:55:1d:80:2a:29:5b:bc:7c:
                    c2:53:ef:99:b0:b3:cd:9c:07:1e:9a:5c:b6:83:b0:
                    c1:e0:da:a7:76:f3:de:60:a0:45:b9:7e:a6:92:cd:
                    b7:60:58:83:11:dd:57:e3:2a:f4:d9:16:e1:d6:d0:
                    a2:eb:e3:dc:9f:cc:63:7f:3a:c3:3d:a8:ab:32:7b:
                    54:3e:92:b0:67:8a:b3:71:8a:dd:17:be:7b:c7:65:
                    a4:fb:7b:2f:e3:46:7b:c5:b5:b2:7b:22:fd:72:e9:
                    08:71:d7:0f:b8:b2:23:d1:2f:59:a6:82:e8:cb:6e:
                    f1:9e:6c:42:22:85:32:da:f6:97:97:eb:4f:ae:0b:
                    c6:62:d8:d5:6d:a7:ea:9e:af:3c:0a:6a:59:e9:42:
                    8a:f1:e3:4e:eb:b2:d3:52:65:b3:39:86:f1:da:67:
                    92:83:6b:47:52:1b:34:bd:3d:fc:62:cd:69:2f:fb:
                    cf:41:5d:a9:20:7b:2d:4e:68:97:2a:69:00:1e:62:
                    d5:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:81:55:23:7A:2D:8D:F5:EF:87:6E:64:02:45:BB:DF:BE:CC:10:9B
            X509v3 Authority Key Identifier:
                keyid:48:2D:EE:C2:91:30:ED:20:2D:83:99:D6:9A:13:26:9A:A6:12:AF:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/2A238452348911EF96C98D9E762E951A/SC3uwpEw7SAtg5nWmhMmmqYSr9M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SC3uwpEw7SAtg5nWmhMmmqYSr9M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/2A238452348911EF96C98D9E762E951A/SC3uwpEw7SAtg5nWmhMmmqYSr9M.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:b2:77:d0:0e:8b:12:94:97:05:a1:84:37:f2:69:b4:4b:f8:
         6e:f6:13:93:ea:1d:05:24:b2:48:e0:9b:3f:7a:1b:7c:2e:37:
         58:c7:08:18:3a:bd:a2:d5:a2:34:d1:54:8c:1f:4e:00:d3:57:
         f0:51:d8:f7:b4:08:07:54:96:d5:6f:f2:6a:e0:7a:ed:6a:65:
         72:a5:41:2d:f4:3a:47:55:ed:7c:17:4d:b9:41:e7:43:1e:1d:
         1f:e0:69:41:bb:d3:38:b5:00:bf:c0:a1:cb:10:3d:a4:dc:8f:
         70:f1:2c:0b:76:f5:0a:b4:61:10:f5:8d:6e:45:b5:24:21:ab:
         db:14:9e:87:58:80:56:65:6d:a6:8d:ee:26:2f:03:e0:ea:3c:
         eb:ca:e9:92:d6:71:20:84:d0:37:dc:72:56:27:6f:86:4b:f3:
         3d:d3:f9:1f:2c:e6:91:66:79:52:bb:2b:18:f6:c7:6c:34:a5:
         2b:1b:48:9c:78:e8:3c:ec:54:b5:25:0e:c6:8a:f8:1c:e6:3c:
         db:5f:cf:a5:c3:a3:98:cf:94:71:87:76:bb:02:a3:1c:4c:7f:
         60:5f:f2:e3:10:3d:14:89:a4:77:f3:64:ff:7f:91:6e:fb:ab:
         e4:c7:01:22:86:82:2d:b2:d8:b3:a5:45:95:53:47:9e:f7:85:
         b0:ea:e9:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:06:36 2025 by rpki-client