Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3646FFE/AF17C9DEB02911ECABDF2FC05A40D577/JT8aaHcVEKZlbX1mD1A9VbBrkAQ.mft
File:                     JT8aaHcVEKZlbX1mD1A9VbBrkAQ.mft (raw, json)
Hash identifier:          c/maP4epIjA4LiaWHxLV2TiKg6xBpcUkY3H5enosQXs=
Subject key identifier:   82:31:89:5B:BA:A9:E6:3D:94:55:03:AA:23:CC:D4:EE:7F:2C:87:30
Authority key identifier: 25:3F:1A:68:77:15:10:A6:65:6D:7D:66:0F:50:3D:55:B0:6B:90:04
Certificate issuer:       /CN=F3646FFEAR/serialNumber=253F1A68771510A6656D7D660F503D55B06B9004
Certificate serial:       0676
Authority info access:    rsync://rpki.afrinic.net/repository/arin/JT8aaHcVEKZlbX1mD1A9VbBrkAQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3646FFE/AF17C9DEB02911ECABDF2FC05A40D577/JT8aaHcVEKZlbX1mD1A9VbBrkAQ.mft
Manifest number:          0674
Signing time:             Wed 26 Aug 2026 02:39:22 +0000
Manifest this update:     Wed 26 Aug 2026 02:39:22 +0000
Manifest next update:     Fri 28 Aug 2026 02:39:22 +0000
Files and hashes:         1: JT8aaHcVEKZlbX1mD1A9VbBrkAQ.crl (hash: sYqjmoA2dV56YH0MTYnY6WF+czxW/674XfLGiHCAeN8=)
                          2: CFF7610289D511F1BB657AE8CE1D38B0.roa (hash: WV9x2VI1s6Dp52p1mAl/nv0lnXkxmuZLfjrdawVPNEE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3646FFE/AF17C9DEB02911ECABDF2FC05A40D577/JT8aaHcVEKZlbX1mD1A9VbBrkAQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3646FFE/AF17C9DEB02911ECABDF2FC05A40D577/JT8aaHcVEKZlbX1mD1A9VbBrkAQ.mft
                          rsync://rpki.afrinic.net/repository/arin/JT8aaHcVEKZlbX1mD1A9VbBrkAQ.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 28 Aug 2026 00:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1654 (0x676)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3646FFEAR, serialNumber=253F1A68771510A6656D7D660F503D55B06B9004
        Validity
            Not Before: Aug 26 02:39:22 2026 GMT
            Not After : Aug 28 02:39:22 2026 GMT
        Subject: CN=6a8e51da-59e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:29:69:67:fe:0f:6f:f2:90:b3:d5:c6:11:3b:
                    9a:59:d9:72:8e:3e:0b:98:07:12:cd:9f:ed:79:19:
                    9d:97:b5:80:b1:73:6d:e4:4b:9a:af:67:b0:1e:ee:
                    20:90:b6:ea:76:84:89:65:e6:5a:2c:73:6d:64:76:
                    73:06:c1:10:70:cb:c2:1d:73:a6:98:12:0b:f0:a9:
                    cc:d3:6d:3c:b1:60:64:7d:72:00:82:29:d7:1c:fc:
                    b2:25:69:b0:02:30:fc:b1:e9:83:0e:5a:dd:02:11:
                    d4:d6:5c:35:4e:cb:01:1e:6e:c0:1b:df:34:1c:75:
                    37:cb:c8:a8:d2:61:9a:7e:ab:f2:30:aa:5e:b5:21:
                    5d:f7:16:ad:99:a7:bf:06:4b:3e:8b:58:20:23:04:
                    84:78:50:87:45:25:34:46:75:92:1c:1f:07:a7:cf:
                    7a:55:d7:d6:dd:20:a0:b0:84:d6:af:13:92:f5:b7:
                    e1:41:bf:61:5e:36:f0:b4:13:1a:5a:e7:4c:92:fa:
                    a2:42:4b:57:ac:f9:7f:89:ad:ea:8f:2c:20:c5:bc:
                    c7:e2:9b:ed:56:e9:b3:a5:12:f1:74:49:ce:e8:47:
                    07:29:b4:ed:54:f0:cb:b9:ca:88:30:c3:c8:74:3a:
                    ae:b5:ac:f6:0e:fe:8a:e2:3f:87:b8:7a:01:51:e9:
                    73:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:31:89:5B:BA:A9:E6:3D:94:55:03:AA:23:CC:D4:EE:7F:2C:87:30
            X509v3 Authority Key Identifier:
                keyid:25:3F:1A:68:77:15:10:A6:65:6D:7D:66:0F:50:3D:55:B0:6B:90:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3646FFE/AF17C9DEB02911ECABDF2FC05A40D577/JT8aaHcVEKZlbX1mD1A9VbBrkAQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/JT8aaHcVEKZlbX1mD1A9VbBrkAQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3646FFE/AF17C9DEB02911ECABDF2FC05A40D577/JT8aaHcVEKZlbX1mD1A9VbBrkAQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:7e:52:ba:e1:fa:e5:fc:3b:21:dc:16:68:0d:ce:85:5a:e9:
         f3:63:41:83:29:54:a7:02:74:1e:68:0e:d8:1c:e7:00:31:b3:
         18:8b:d7:ea:33:ae:59:6d:21:92:96:9d:68:6d:fb:ed:9b:c4:
         68:51:0a:7a:b2:a3:4b:9b:e9:ba:05:4b:e3:05:42:07:d0:48:
         f4:a4:a3:9e:d4:f4:32:a0:15:e8:be:03:b7:e6:e5:17:1f:e1:
         36:4e:cd:18:f7:f3:de:e3:16:49:82:58:7b:02:8c:51:c9:f2:
         0f:a8:25:94:5c:e7:ce:64:27:db:79:64:29:2a:27:c3:e1:ae:
         c8:f7:25:72:1a:0d:21:c2:d5:da:3c:39:ed:9d:68:c7:2d:b2:
         48:2c:2e:b0:13:9c:48:03:dd:7d:00:4a:7d:af:76:9a:b7:6c:
         f8:49:0a:d9:c6:22:bd:a5:67:72:29:eb:59:10:10:39:79:02:
         d0:1a:91:b7:f5:48:6e:8a:9c:58:c4:52:2a:5d:85:7f:71:0d:
         22:5d:f5:d8:bf:9b:fb:40:cc:17:7f:0f:34:9c:c0:c2:2d:8d:
         cc:c3:1d:5f:a1:39:93:df:69:1d:a9:54:67:e4:64:7b:1d:80:
         da:c0:c9:7d:3b:2d:19:33:ca:0b:67:25:60:66:77:d3:e1:21:
         71:3c:d2:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----