Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3644FCC/9E115C3CD12A11EC9A8943EAF1222468/iP6Ne9O33D1UQluMc20s7Dh_c3w.mft
File:                     iP6Ne9O33D1UQluMc20s7Dh_c3w.mft (raw, json)
Hash identifier:          KpaAP889xL9kDE99SIvm5bu398q+DC8SSoKnc2Pml0s=
Subject key identifier:   88:DD:FE:BB:EC:D0:B6:E5:86:2F:59:05:54:FD:DD:75:17:D8:32:16
Authority key identifier: 88:FE:8D:7B:D3:B7:DC:3D:54:42:5B:8C:73:6D:2C:EC:38:7F:73:7C
Certificate issuer:       /CN=F3644FCCAR/serialNumber=88FE8D7BD3B7DC3D54425B8C736D2CEC387F737C
Certificate serial:       04BB
Authority info access:    rsync://rpki.afrinic.net/repository/arin/iP6Ne9O33D1UQluMc20s7Dh_c3w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3644FCC/9E115C3CD12A11EC9A8943EAF1222468/iP6Ne9O33D1UQluMc20s7Dh_c3w.mft
Manifest number:          04BA
Signing time:             Sun 27 Jul 2025 02:56:22 +0000
Manifest this update:     Sun 27 Jul 2025 02:56:21 +0000
Manifest next update:     Tue 29 Jul 2025 02:56:21 +0000
Files and hashes:         1: iP6Ne9O33D1UQluMc20s7Dh_c3w.crl (hash: a9SkI1sBvnpo/b6dYjeBIKxh53zAWci9ZNHngRC63Io=)
                          2: 33698F34D12B11ECA93204ECF1222468.roa (hash: hag20uRl3/i6kvsUjp3dDDisdoIlpZDsNJowq7IAf4U=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3644FCC/9E115C3CD12A11EC9A8943EAF1222468/iP6Ne9O33D1UQluMc20s7Dh_c3w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3644FCC/9E115C3CD12A11EC9A8943EAF1222468/iP6Ne9O33D1UQluMc20s7Dh_c3w.mft
                          rsync://rpki.afrinic.net/repository/arin/iP6Ne9O33D1UQluMc20s7Dh_c3w.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Jul 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1211 (0x4bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3644FCCAR, serialNumber=88FE8D7BD3B7DC3D54425B8C736D2CEC387F737C
        Validity
            Not Before: Jul 27 02:56:21 2025 GMT
            Not After : Jul 29 02:56:21 2025 GMT
        Subject: CN=68859555-5d22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:12:4b:19:08:4b:0d:7a:3e:ed:cb:97:26:9e:
                    30:47:d9:ea:59:28:49:07:19:b7:48:d5:7b:d3:e0:
                    61:51:05:99:72:29:e7:b7:64:9f:9d:20:4e:93:64:
                    c1:a0:63:aa:63:5f:32:04:c0:09:05:e1:d0:56:8a:
                    ad:59:e2:9f:1f:30:fc:fe:2f:3e:2e:46:e9:f8:a1:
                    3c:39:c7:19:8e:74:b5:3b:97:aa:fd:1e:4d:cc:9b:
                    c1:41:8b:01:23:bf:37:19:0d:a8:cc:c8:d9:d0:0a:
                    ee:4d:6a:24:45:cd:22:a4:16:b3:02:b2:46:55:48:
                    17:d3:79:c9:e5:93:b6:57:34:46:2a:a1:81:52:30:
                    0a:ae:48:46:68:4d:7a:b9:17:e2:14:de:a4:4d:18:
                    ab:c9:26:9d:e9:34:36:34:44:93:e1:65:44:ee:6a:
                    c9:42:70:53:da:e8:b4:03:7a:31:06:be:cd:36:c6:
                    1e:28:1b:ba:ee:bf:21:f6:b0:0f:2a:7c:d1:79:02:
                    1a:d9:4c:ea:13:1a:9c:f6:a2:7f:0a:fc:d9:59:55:
                    fb:a4:3b:e7:fb:6b:db:f2:59:68:a2:7d:ea:13:12:
                    9b:9c:fc:45:ab:07:e9:42:81:cf:f3:ac:df:c7:7c:
                    bd:09:c1:4e:a0:f5:35:92:f1:0f:9a:82:00:4b:25:
                    50:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:DD:FE:BB:EC:D0:B6:E5:86:2F:59:05:54:FD:DD:75:17:D8:32:16
            X509v3 Authority Key Identifier:
                keyid:88:FE:8D:7B:D3:B7:DC:3D:54:42:5B:8C:73:6D:2C:EC:38:7F:73:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3644FCC/9E115C3CD12A11EC9A8943EAF1222468/iP6Ne9O33D1UQluMc20s7Dh_c3w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/iP6Ne9O33D1UQluMc20s7Dh_c3w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3644FCC/9E115C3CD12A11EC9A8943EAF1222468/iP6Ne9O33D1UQluMc20s7Dh_c3w.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:17:1a:ee:6d:ff:a8:87:4a:23:9a:88:4e:0e:7f:fd:7d:10:
         54:6d:09:c5:a7:03:34:b6:e4:c6:44:2b:e5:e0:c9:ef:3b:06:
         f1:01:38:12:7c:8e:aa:45:16:2d:2e:b9:ef:fc:9f:fb:cb:14:
         00:8e:bf:77:12:b5:f4:1f:0a:96:a5:de:31:a5:6f:41:b7:18:
         99:1f:02:5e:ce:8b:95:9a:16:21:1a:3f:19:05:ce:59:84:b9:
         8a:a0:13:63:6a:42:8a:e4:36:3c:f7:77:85:7a:7c:fb:bf:0f:
         25:98:e5:3b:c5:e2:6f:f2:6f:12:a3:60:7c:e0:6f:fd:c5:4e:
         69:6f:0b:fe:9c:5f:49:f7:29:bc:b9:b5:f8:cf:4c:9e:57:da:
         de:d6:97:39:5a:4a:45:5a:93:40:05:1c:f1:20:87:28:13:93:
         d2:de:6a:c6:55:d2:14:4c:18:18:be:85:ff:62:9d:7a:4f:4a:
         16:39:69:5f:4c:24:8a:d3:05:d7:7b:36:24:45:6f:3c:6c:17:
         6b:0a:e5:fd:28:4e:27:54:a3:56:48:be:a5:6e:5d:64:11:bb:
         b9:75:ec:4e:23:56:60:07:35:0a:29:74:4f:46:f0:99:b5:02:
         7d:47:09:a4:6b:3d:b9:8a:47:b0:e4:b0:13:0c:58:c3:b5:9d:
         ba:a0:78:d0
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICBLswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NDRGQ0NBUjExMC8GA1UEBRMoODhGRThEN0JEM0I3REMzRDU0NDI1QjhDNzM2RDJD
RUMzODdGNzM3QzAeFw0yNTA3MjcwMjU2MjFaFw0yNTA3MjkwMjU2MjFaMBgxFjAU
BgNVBAMTDTY4ODU5NTU1LTVkMjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDAEksZCEsNej7ty5cmnjBH2epZKEkHGbdI1XvT4GFRBZlyKee3ZJ+dIE6T
ZMGgY6pjXzIEwAkF4dBWiq1Z4p8fMPz+Lz4uRun4oTw5xxmOdLU7l6r9Hk3Mm8FB
iwEjvzcZDajMyNnQCu5NaiRFzSKkFrMCskZVSBfTecnlk7ZXNEYqoYFSMAquSEZo
TXq5F+IU3qRNGKvJJp3pNDY0RJPhZUTuaslCcFPa6LQDejEGvs02xh4oG7ruvyH2
sA8qfNF5AhrZTOoTGpz2on8K/NlZVfukO+f7a9vyWWiifeoTEpuc/EWrB+lCgc/z
rN/HfL0JwU6g9TWS8Q+aggBLJVAzAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUiN3+
u+zQtuWGL1kFVP3ddRfYMhYwHwYDVR0jBBgwFoAUiP6Ne9O33D1UQluMc20s7Dh/
c3wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjQ0RkNDLzlFMTE1QzNDRDEyQTExRUM5QTg5NDNFQUYxMjIyNDY4L2lQNk5l
OU8zM0QxVVFsdU1jMjBzN0RoX2Mzdy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2lQNk5lOU8zM0QxVVFsdU1jMjBzN0RoX2Mzdy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2NDRGQ0MvOUUxMTVDM0NEMTJBMTFFQzlBODk0M0VBRjEyMjI0
NjgvaVA2TmU5TzMzRDFVUWx1TWMyMHM3RGhfYzN3Lm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQADFxrubf+oh0ojmohODn/9fRBUbQnFpwM0
tuTGRCvl4MnvOwbxATgSfI6qRRYtLrnv/J/7yxQAjr93ErX0HwqWpd4xpW9BtxiZ
HwJezouVmhYhGj8ZBc5ZhLmKoBNjakKK5DY893eFenz7vw8lmOU7xeJv8m8So2B8
4G/9xU5pbwv+nF9J9ym8ubX4z0yeV9re1pc5WkpFWpNABRzxIIcoE5PS3mrGVdIU
TBgYvoX/Yp16T0oWOWlfTCSK0wXXezYkRW88bBdrCuX9KE4nVKNWSL6lbl1kEbu5
dexOI1ZgBzUKKXRPRvCZtQJ9Rwmkaz25ikew5LATDFjDtZ26oHjQ
-----END CERTIFICATE-----
Generated at Sun Jul 27 07:55:11 2025 by rpki-client