Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/cHofKGrimG32SRDDA05RiafCFt0.mft
File:                     cHofKGrimG32SRDDA05RiafCFt0.mft (raw, json)
Hash identifier:          UAuBdQLAusx3AdSqMNU5S3Yf5HgYZbR2PWh74nfF91I=
Subject key identifier:   FE:2E:A5:18:93:15:CC:2B:F1:01:28:59:42:E8:C6:00:06:12:0B:A6
Authority key identifier: 70:7A:1F:28:6A:E2:98:6D:F6:49:10:C3:03:4E:51:89:A7:C2:16:DD
Certificate issuer:       /CN=F3644DAEAF/serialNumber=707A1F286AE2986DF64910C3034E5189A7C216DD
Certificate serial:       0838
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/cHofKGrimG32SRDDA05RiafCFt0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/cHofKGrimG32SRDDA05RiafCFt0.mft
Manifest number:          0832
Signing time:             Sun 25 Oct 2026 02:04:31 +0000
Manifest this update:     Sun 25 Oct 2026 02:04:30 +0000
Manifest next update:     Tue 27 Oct 2026 02:04:30 +0000
Files and hashes:         1: cHofKGrimG32SRDDA05RiafCFt0.crl (hash: 0oxHhokGDUkoe8nLYqDCnolxHtjGQT3HENe+kpr2TaY=)
                          2: 9B99DDBC8C3D11F185844CA1CE1D38B0.roa (hash: KokIk2KULECc1dFtONKHV+dFBQMWcKtBPAeRS7FVdiQ=)
                          3: 50D8D0088C3D11F191A5F11DCF1D38B0.roa (hash: IBM2C6jsoHdsOf5q7FavB/zdwqJP1c7Zo2tcyx9bIiI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/cHofKGrimG32SRDDA05RiafCFt0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/cHofKGrimG32SRDDA05RiafCFt0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/cHofKGrimG32SRDDA05RiafCFt0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 00:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2104 (0x838)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3644DAEAF, serialNumber=707A1F286AE2986DF64910C3034E5189A7C216DD
        Validity
            Not Before: Oct 25 02:04:30 2026 GMT
            Not After : Oct 27 02:04:30 2026 GMT
        Subject: CN=6add63af-dab3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f1:c7:5a:36:bc:47:e1:68:28:f4:20:1a:51:
                    59:93:9b:41:af:21:84:9a:e1:53:0a:85:c0:39:14:
                    5d:5b:82:e2:c7:24:7a:37:91:7d:a2:7d:77:86:b6:
                    c4:76:d6:30:ee:9c:ea:90:4c:8b:b0:29:18:43:5d:
                    84:1e:20:22:ab:1c:3a:87:d2:7d:96:69:c9:f9:49:
                    5f:02:8d:11:1a:88:bd:3c:ff:d2:f5:13:da:97:ef:
                    3e:da:44:a9:96:da:e2:a3:a5:60:1e:6c:3b:62:55:
                    e2:a5:e1:ae:8e:25:ec:1d:ea:51:70:90:85:9e:88:
                    b3:43:6a:c4:8c:e6:67:61:8b:79:49:0e:13:f0:98:
                    c3:89:e1:75:c1:88:26:9e:cb:ba:e5:8d:85:25:18:
                    21:e0:5f:bb:13:13:a8:c4:00:65:be:47:4a:6a:5c:
                    d2:46:e0:42:24:94:63:fe:51:0d:7e:7d:4a:70:2d:
                    40:a8:69:69:d1:c7:42:15:a7:8a:e6:41:ce:0e:6a:
                    a6:ba:c9:9e:4d:4b:62:cc:3d:be:9e:98:8a:9b:ae:
                    1f:f3:0f:ab:e0:09:74:52:4a:9f:fb:88:7a:16:49:
                    61:0e:37:16:d7:dd:bc:9c:55:2c:84:86:0c:e1:56:
                    1b:7b:f1:12:9e:00:8b:f2:d4:06:91:e6:0a:0d:4d:
                    06:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:2E:A5:18:93:15:CC:2B:F1:01:28:59:42:E8:C6:00:06:12:0B:A6
            X509v3 Authority Key Identifier:
                keyid:70:7A:1F:28:6A:E2:98:6D:F6:49:10:C3:03:4E:51:89:A7:C2:16:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/cHofKGrimG32SRDDA05RiafCFt0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/cHofKGrimG32SRDDA05RiafCFt0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/cHofKGrimG32SRDDA05RiafCFt0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:92:3b:3e:a5:3d:73:73:53:dd:fd:9b:0f:a9:dc:1a:62:f3:
         00:71:a1:23:41:39:f3:e5:79:ae:c2:f1:c2:e1:39:02:9b:a2:
         00:48:27:6a:7a:e2:7c:14:30:8f:a9:d6:5c:b9:9d:53:14:fa:
         73:9d:2f:11:66:ac:71:7e:56:26:41:0c:a3:ca:5a:db:f9:5e:
         0a:52:81:3f:06:ae:62:81:be:dc:af:38:5b:77:c2:ee:3a:36:
         45:56:76:f0:02:5b:48:5d:a2:dc:9e:4e:1d:95:10:dd:8b:5c:
         52:d9:bb:22:61:b0:9c:80:16:2d:57:eb:26:c0:f9:21:56:7a:
         80:82:d2:a0:1e:21:eb:6a:4f:d8:7b:73:e3:3e:72:3a:42:b7:
         aa:0a:79:5c:c1:74:e6:cd:21:45:cd:b2:4e:b9:cc:b0:32:29:
         6f:a1:a0:7b:aa:62:25:5b:b5:43:35:ad:21:ba:11:21:d8:50:
         de:c3:f4:01:7a:97:a2:27:c1:b8:fd:4b:37:b0:68:a6:82:6b:
         13:7f:58:38:be:87:17:f6:52:6f:02:e7:09:eb:78:b3:8d:45:
         11:7d:08:55:a8:b3:ad:13:e5:20:ad:91:f0:25:cf:52:eb:2a:
         a0:6f:dd:f2:13:fa:b4:b4:1c:1a:56:ac:dd:7b:22:63:63:71:
         c7:b2:27:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----