Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3651B12/1CC77B125BF011F0936AE0D9DAE4EC9C/1F-q3w0PsrIYxNl-HvQbwMkznC8.mft
File:                     1F-q3w0PsrIYxNl-HvQbwMkznC8.mft (raw, json)
Hash identifier:          V6W2O63SRrAgx1UlJrApp7iFEq1ZMS2pOpETw3b/puM=
Subject key identifier:   29:FF:30:06:A4:EB:4F:41:20:CA:59:75:77:83:74:E4:3B:6C:6B:67
Authority key identifier: D4:5F:AA:DF:0D:0F:B2:B2:18:C4:D9:7E:1E:F4:1B:C0:C9:33:9C:2F
Certificate issuer:       /CN=F3651B12RI/serialNumber=D45FAADF0D0FB2B218C4D97E1EF41BC0C9339C2F
Certificate serial:       0184
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/1F-q3w0PsrIYxNl-HvQbwMkznC8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3651B12/1CC77B125BF011F0936AE0D9DAE4EC9C/1F-q3w0PsrIYxNl-HvQbwMkznC8.mft
Manifest number:          0184
Signing time:             Sun 26 Jul 2026 04:58:51 +0000
Manifest this update:     Sun 26 Jul 2026 04:58:50 +0000
Manifest next update:     Tue 28 Jul 2026 04:58:50 +0000
Files and hashes:         1: 1F-q3w0PsrIYxNl-HvQbwMkznC8.crl (hash: NXBUq+CW/fR20uuTjdX/gFZUzEXBFk9Hb7rXFZz1G10=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3651B12/1CC77B125BF011F0936AE0D9DAE4EC9C/1F-q3w0PsrIYxNl-HvQbwMkznC8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3651B12/1CC77B125BF011F0936AE0D9DAE4EC9C/1F-q3w0PsrIYxNl-HvQbwMkznC8.mft
                          rsync://rpki.afrinic.net/repository/ripe/1F-q3w0PsrIYxNl-HvQbwMkznC8.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 28 Jul 2026 04:58:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 388 (0x184)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3651B12RI, serialNumber=D45FAADF0D0FB2B218C4D97E1EF41BC0C9339C2F
        Validity
            Not Before: Jul 26 04:58:50 2026 GMT
            Not After : Jul 28 04:58:50 2026 GMT
        Subject: CN=6a65940b-0d95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:8c:4e:2a:e4:87:f4:02:ca:f9:1a:62:d2:a4:
                    d3:19:2b:9b:d4:2e:a1:1f:61:e7:23:fd:fa:2b:7d:
                    ab:c9:c7:16:d0:e5:f9:db:e8:fb:16:80:83:e5:e6:
                    70:d2:b8:34:c0:73:ab:d8:33:1f:13:b7:ef:ce:88:
                    8f:6b:ca:be:85:fd:b2:03:c1:cb:c7:4d:3b:22:82:
                    6b:73:17:93:2c:5a:3f:f4:50:d9:0b:1c:57:c3:d3:
                    bc:e8:e8:2f:4d:a1:8a:64:5c:a2:46:65:7f:f8:c9:
                    a0:a4:40:f3:58:fd:07:22:16:56:33:58:9e:a7:03:
                    f2:f4:2c:32:86:54:54:86:bc:ff:80:bf:4f:e4:89:
                    fa:72:53:77:bc:fa:52:3c:e3:2d:01:b9:5d:f7:fb:
                    0b:1a:40:1e:39:55:9d:52:74:a2:5f:1f:a7:18:a8:
                    5a:8c:ba:f6:b5:36:c4:f7:26:df:59:18:2f:02:6f:
                    19:3c:28:0a:12:ad:9f:a8:ce:a5:bd:c2:79:55:df:
                    f8:8c:ca:de:0f:80:a2:8c:7a:a8:c3:d9:f8:09:08:
                    af:3a:cc:b2:06:02:4d:3e:9f:95:25:47:cf:fc:a9:
                    43:5c:76:eb:32:f1:9b:83:06:7f:58:d8:83:ed:6f:
                    26:10:0e:0d:8e:58:f6:90:58:5c:e6:91:a8:3f:db:
                    c8:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:FF:30:06:A4:EB:4F:41:20:CA:59:75:77:83:74:E4:3B:6C:6B:67
            X509v3 Authority Key Identifier:
                keyid:D4:5F:AA:DF:0D:0F:B2:B2:18:C4:D9:7E:1E:F4:1B:C0:C9:33:9C:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3651B12/1CC77B125BF011F0936AE0D9DAE4EC9C/1F-q3w0PsrIYxNl-HvQbwMkznC8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/1F-q3w0PsrIYxNl-HvQbwMkznC8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3651B12/1CC77B125BF011F0936AE0D9DAE4EC9C/1F-q3w0PsrIYxNl-HvQbwMkznC8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:37:87:c4:9c:7a:90:4a:d4:6b:71:51:de:06:11:99:db:b5:
         0d:cd:4e:8a:44:1b:bb:d2:97:6b:cb:90:65:38:7e:70:5b:9d:
         1b:42:cc:e2:1d:69:88:87:9f:70:a7:1a:96:71:3f:89:45:f2:
         ef:71:0d:69:47:20:a7:00:fc:4c:c6:66:0c:20:52:55:39:8b:
         8c:51:66:a6:57:19:89:bd:70:74:1f:c1:1f:e2:2a:43:72:bb:
         d5:d5:22:50:c7:e6:b2:d0:a2:28:30:31:7c:0f:a2:f9:4c:cc:
         0f:e5:95:ca:c5:a5:92:9e:19:13:8f:f8:58:c8:05:2e:9e:f3:
         3f:26:e7:62:f1:e8:c5:dc:f0:10:fa:37:c5:1b:d4:28:09:6a:
         a6:3f:12:32:a0:04:47:a6:c8:96:20:7d:c2:40:02:9b:62:0a:
         db:74:cd:c3:0a:8e:be:be:26:35:64:97:68:66:aa:68:f3:aa:
         b0:63:b7:69:ce:52:79:34:b2:f8:c5:e9:f9:e4:d4:60:ed:f2:
         e8:68:1a:6d:1b:40:34:dc:bd:b0:6c:34:ba:58:eb:5e:1d:5e:
         9a:3c:e2:19:ce:a9:36:8b:63:05:b2:7a:71:dd:a8:ff:22:af:
         38:f4:e4:8f:5d:a5:d7:3c:1f:46:80:9b:2f:be:b3:4f:6a:88:
         9a:c1:47:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 05:43:32 2026 by rpki-client