Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3651B12/1CC77B125BF011F0936AE0D9DAE4EC9C/1F-q3w0PsrIYxNl-HvQbwMkznC8.mft
File:                     1F-q3w0PsrIYxNl-HvQbwMkznC8.mft (raw, json)
Hash identifier:          lQWb1s10COX5EpKE/UutH9jF/ZRUW55+qgml7jdQUz4=
Subject key identifier:   37:57:B1:67:C7:02:21:42:CA:B8:8D:AA:E0:55:51:54:99:67:15:59
Authority key identifier: D4:5F:AA:DF:0D:0F:B2:B2:18:C4:D9:7E:1E:F4:1B:C0:C9:33:9C:2F
Certificate issuer:       /CN=F3651B12RI/serialNumber=D45FAADF0D0FB2B218C4D97E1EF41BC0C9339C2F
Certificate serial:       01B2
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/1F-q3w0PsrIYxNl-HvQbwMkznC8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3651B12/1CC77B125BF011F0936AE0D9DAE4EC9C/1F-q3w0PsrIYxNl-HvQbwMkznC8.mft
Manifest number:          01B2
Signing time:             Thu 10 Sep 2026 04:58:22 +0000
Manifest this update:     Thu 10 Sep 2026 04:58:21 +0000
Manifest next update:     Sat 12 Sep 2026 04:58:21 +0000
Files and hashes:         1: 1F-q3w0PsrIYxNl-HvQbwMkznC8.crl (hash: BNm7RWTwHPsbWYuvWnsjV2qikk+c3xoYJeeeJINwc8E=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3651B12/1CC77B125BF011F0936AE0D9DAE4EC9C/1F-q3w0PsrIYxNl-HvQbwMkznC8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3651B12/1CC77B125BF011F0936AE0D9DAE4EC9C/1F-q3w0PsrIYxNl-HvQbwMkznC8.mft
                          rsync://rpki.afrinic.net/repository/ripe/1F-q3w0PsrIYxNl-HvQbwMkznC8.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 12 Sep 2026 00:45:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 434 (0x1b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3651B12RI, serialNumber=D45FAADF0D0FB2B218C4D97E1EF41BC0C9339C2F
        Validity
            Not Before: Sep 10 04:58:21 2026 GMT
            Not After : Sep 12 04:58:21 2026 GMT
        Subject: CN=6aa238ee-33ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:5e:05:31:63:96:12:af:24:a3:83:29:5c:25:
                    b8:af:ae:b1:e5:a9:f9:dd:21:46:ca:3f:48:f3:35:
                    15:9f:bc:82:6e:d2:bf:b5:f4:76:9a:fa:e5:c2:66:
                    25:97:cc:e3:48:30:6b:32:ff:d2:1f:11:d2:0c:d7:
                    6a:f3:b0:e3:f7:64:22:0c:99:a4:8f:08:2d:3a:13:
                    ad:6e:09:88:83:fb:0e:5b:60:f9:d7:23:37:13:d3:
                    8c:ea:7a:f8:5c:cf:5e:32:9e:0a:47:54:24:38:21:
                    7b:35:63:fd:99:ca:2f:1b:90:92:1a:8b:81:21:42:
                    83:3c:5b:71:cb:6f:d1:fd:28:c5:05:58:17:fd:9e:
                    ab:c8:d3:57:88:ae:66:fe:90:00:24:6c:68:c5:ea:
                    c6:71:14:cd:02:26:a1:80:7f:84:0b:93:f2:db:e6:
                    0b:b3:a9:3d:87:b8:af:ba:59:7e:ac:42:20:5d:86:
                    14:3d:9b:94:f5:a7:e2:d0:05:12:15:90:d3:4c:ab:
                    2f:24:18:92:cf:52:ad:b0:c4:d2:2c:81:1f:4b:f4:
                    59:c0:2b:39:53:47:31:8b:de:8c:b1:a3:db:34:a7:
                    65:a4:e4:e6:35:4c:4d:4f:7a:0a:37:ab:32:d5:18:
                    e8:5a:63:d8:c8:b1:06:1e:09:49:ff:42:73:2c:c3:
                    7b:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:57:B1:67:C7:02:21:42:CA:B8:8D:AA:E0:55:51:54:99:67:15:59
            X509v3 Authority Key Identifier:
                keyid:D4:5F:AA:DF:0D:0F:B2:B2:18:C4:D9:7E:1E:F4:1B:C0:C9:33:9C:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3651B12/1CC77B125BF011F0936AE0D9DAE4EC9C/1F-q3w0PsrIYxNl-HvQbwMkznC8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/1F-q3w0PsrIYxNl-HvQbwMkznC8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3651B12/1CC77B125BF011F0936AE0D9DAE4EC9C/1F-q3w0PsrIYxNl-HvQbwMkznC8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:a2:ac:6a:63:b9:f5:56:67:9d:e2:c5:b3:47:da:14:a6:d5:
         6f:df:4e:75:42:00:fe:60:06:29:99:23:40:b3:85:06:3e:eb:
         2e:21:45:38:15:0d:ef:f6:54:fa:ea:11:b7:0d:69:dd:1c:83:
         c6:26:62:be:31:bb:b1:b5:01:11:b3:9b:71:90:32:ca:b8:01:
         bf:90:22:92:26:69:3e:d8:42:07:7a:00:22:64:29:1d:38:66:
         ca:0e:c5:3e:52:01:a7:c2:c5:fa:6a:9d:7a:05:42:d5:c6:97:
         41:ef:b3:6b:12:cc:0c:de:a6:f0:e4:75:37:5d:32:38:60:61:
         3f:52:d3:e8:45:d3:fc:4c:86:30:8b:33:54:2d:fd:da:f9:57:
         f3:43:8c:d6:52:d1:a8:07:4e:cd:e5:d3:c7:4d:ef:79:fd:77:
         50:fa:f3:ce:dc:b2:d1:cc:ac:1b:99:42:95:00:31:3c:8f:66:
         90:6b:d0:a5:b9:7b:47:84:9f:db:68:e3:28:54:7f:63:a9:60:
         d5:67:e0:67:5a:26:f0:86:83:34:c1:f0:57:f9:fe:b3:d8:ff:
         39:2a:30:d0:58:02:99:02:b6:2f:2a:0a:98:31:84:66:73:45:
         48:2a:0f:de:56:7b:15:66:7d:61:b2:a4:a8:c8:e8:c3:b6:d3:
         f0:83:e4:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----