Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3651B12/1CC77B125BF011F0936AE0D9DAE4EC9C/1F-q3w0PsrIYxNl-HvQbwMkznC8.mft
File:                     1F-q3w0PsrIYxNl-HvQbwMkznC8.mft (raw, json)
Hash identifier:          Jvn5dXH+GG4Tq6NDWCMv5/051VjSKWgYepUvTpvfgTw=
Subject key identifier:   10:C3:03:C4:F8:45:B0:BD:C6:A3:61:CA:67:D4:5B:6B:99:21:31:F3
Authority key identifier: D4:5F:AA:DF:0D:0F:B2:B2:18:C4:D9:7E:1E:F4:1B:C0:C9:33:9C:2F
Certificate issuer:       /CN=F3651B12RI/serialNumber=D45FAADF0D0FB2B218C4D97E1EF41BC0C9339C2F
Certificate serial:       FD
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/1F-q3w0PsrIYxNl-HvQbwMkznC8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3651B12/1CC77B125BF011F0936AE0D9DAE4EC9C/1F-q3w0PsrIYxNl-HvQbwMkznC8.mft
Manifest number:          FD
Signing time:             Fri 13 Mar 2026 04:27:06 +0000
Manifest this update:     Fri 13 Mar 2026 04:27:05 +0000
Manifest next update:     Sun 15 Mar 2026 04:27:05 +0000
Files and hashes:         1: 1F-q3w0PsrIYxNl-HvQbwMkznC8.crl (hash: V1yX1akd496Jl02K6asjXqe7a+cT/kF4ElQV+JUY24E=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3651B12/1CC77B125BF011F0936AE0D9DAE4EC9C/1F-q3w0PsrIYxNl-HvQbwMkznC8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3651B12/1CC77B125BF011F0936AE0D9DAE4EC9C/1F-q3w0PsrIYxNl-HvQbwMkznC8.mft
                          rsync://rpki.afrinic.net/repository/ripe/1F-q3w0PsrIYxNl-HvQbwMkznC8.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 15 Mar 2026 00:45:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 253 (0xfd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3651B12RI, serialNumber=D45FAADF0D0FB2B218C4D97E1EF41BC0C9339C2F
        Validity
            Not Before: Mar 13 04:27:05 2026 GMT
            Not After : Mar 15 04:27:05 2026 GMT
        Subject: CN=69b3921a-9ea6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:ab:80:6f:34:dc:ff:f3:8f:d3:26:8a:d7:51:
                    35:6f:26:d5:4c:92:7e:54:c8:8a:72:18:cc:08:5c:
                    a2:ec:85:87:e8:f2:ba:32:57:7f:c2:5c:af:a4:0a:
                    7f:1a:cf:7c:1d:3f:1b:f7:56:05:a7:24:3a:f8:a7:
                    b2:be:c0:cc:56:61:84:e2:09:1e:ef:e8:26:69:42:
                    21:ca:59:b5:da:60:44:8e:d6:1d:4e:64:e7:cc:98:
                    cf:9a:84:0f:94:13:6e:ec:62:a0:ba:8a:22:56:8e:
                    7a:59:e0:b2:b6:92:e8:58:cc:a9:f7:48:0c:ef:aa:
                    c8:75:13:fc:da:e5:55:50:3b:da:31:dd:2e:62:56:
                    56:c3:7c:9a:c6:b4:ea:81:c8:91:db:76:2c:94:af:
                    ec:07:35:50:a5:29:b9:1d:32:c6:53:be:37:bc:e4:
                    be:29:92:fd:4d:85:e3:56:d9:96:51:c1:a7:e1:8d:
                    ca:9a:6e:aa:f6:2f:02:57:31:c7:02:9a:7b:3c:a5:
                    89:d4:73:0a:09:5c:59:33:90:10:99:07:07:97:f2:
                    a0:ff:62:49:59:7f:81:3b:b8:85:a1:e6:fa:7f:4c:
                    56:18:2f:b0:c8:43:35:65:18:62:25:e6:bb:fb:cb:
                    c9:8a:88:62:9d:c7:6a:cb:fb:fe:05:dd:11:7a:e6:
                    bf:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:C3:03:C4:F8:45:B0:BD:C6:A3:61:CA:67:D4:5B:6B:99:21:31:F3
            X509v3 Authority Key Identifier:
                keyid:D4:5F:AA:DF:0D:0F:B2:B2:18:C4:D9:7E:1E:F4:1B:C0:C9:33:9C:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3651B12/1CC77B125BF011F0936AE0D9DAE4EC9C/1F-q3w0PsrIYxNl-HvQbwMkznC8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/1F-q3w0PsrIYxNl-HvQbwMkznC8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3651B12/1CC77B125BF011F0936AE0D9DAE4EC9C/1F-q3w0PsrIYxNl-HvQbwMkznC8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:18:fc:0d:22:a3:63:13:ce:94:43:15:52:b2:40:e6:e6:c6:
         17:f8:74:30:09:20:a4:f9:13:4d:b6:12:9a:cf:fe:f9:bb:77:
         b0:f5:08:ee:01:70:0c:aa:39:a2:f5:a9:7f:36:15:49:05:1d:
         7f:ee:c8:6b:03:22:1b:f8:36:59:06:94:f1:f0:e7:6f:42:88:
         89:3b:26:5a:c5:73:1d:29:bc:99:78:9e:f6:e4:ac:65:eb:b1:
         06:d9:90:f6:b1:27:d5:05:b1:44:ef:98:2c:59:ba:ae:f0:0c:
         51:d9:12:84:56:61:00:0b:8d:7b:6f:e0:7a:aa:c3:dd:43:8d:
         fc:a7:63:ed:68:fc:1b:15:0f:ad:7d:3e:08:e1:73:8d:a3:64:
         e8:c4:9b:6f:ae:42:55:04:f5:3a:c2:aa:1b:c0:ce:7e:c4:55:
         a4:f3:8a:f3:d6:d8:8d:8b:d5:cb:d9:83:54:0e:6e:df:a6:1c:
         46:30:3e:3b:43:2d:25:61:6a:26:68:43:69:b5:f4:c9:18:66:
         b4:47:bf:22:8b:6f:cb:64:ac:d5:32:bf:4c:c5:df:44:47:f7:
         45:27:1c:6f:24:da:c6:af:08:e1:bf:f4:7d:2b:cc:a0:fa:4e:
         be:6d:d0:d4:54:77:9e:bc:cf:38:f7:a4:53:d7:fa:e8:c2:5f:
         84:be:d2:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 09:46:27 2026 by rpki-client