Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3652893/9742A64C5EED11EF8C934379762E951A/UJroMu1ribFqno9wWdMQAuvfVRY.mft
File:                     UJroMu1ribFqno9wWdMQAuvfVRY.mft (raw, json)
Hash identifier:          w4mYP/fSOfOfXflxeZ2R545noLhZKXrkhLnI+FOnUnM=
Subject key identifier:   7D:28:B4:D2:CB:AC:95:BB:E4:3E:E6:E9:74:3B:90:76:24:4F:05:39
Authority key identifier: 50:9A:E8:32:ED:6B:89:B1:6A:9E:8F:70:59:D3:10:02:EB:DF:55:16
Certificate issuer:       /CN=F3652893AF/serialNumber=509AE832ED6B89B16A9E8F7059D31002EBDF5516
Certificate serial:       0171
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/UJroMu1ribFqno9wWdMQAuvfVRY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3652893/9742A64C5EED11EF8C934379762E951A/UJroMu1ribFqno9wWdMQAuvfVRY.mft
Manifest number:          016C
Signing time:             Thu 31 Jul 2025 04:56:02 +0000
Manifest this update:     Thu 31 Jul 2025 04:56:01 +0000
Manifest next update:     Sat 02 Aug 2025 04:56:01 +0000
Files and hashes:         1: UJroMu1ribFqno9wWdMQAuvfVRY.crl (hash: ZMKgzD1W3A+R1+Al2xX3P4i8fnZMoXCrhDo63Xt709c=)
                          2: 25947A965EEF11EFA8CE8E84762E951A.roa (hash: w3FPrtTUNywICvBHUNi6Z9IDVeEht1kgjHG+aqy64j8=)
                          3: 0B46727E5EF011EF8D699F89762E951A.roa (hash: nreAgp5N7RBReJoLfOebgUnXd2HE0IWmlaF+azLEc+E=)
                          4: D1B2AC1C5EEF11EF93C62C89762E951A.roa (hash: vRmvo/WQ/7K1j/7ZFTOcVY6BLEhOIM6uf+eDFKl2Nlc=)
                          5: D2BD519A6F5F11EFB5A556BC762E951A.roa (hash: eDObOCF32CjsmNceS5K7zEOzteA210reg1RT/KbBTaY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3652893/9742A64C5EED11EF8C934379762E951A/UJroMu1ribFqno9wWdMQAuvfVRY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3652893/9742A64C5EED11EF8C934379762E951A/UJroMu1ribFqno9wWdMQAuvfVRY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/UJroMu1ribFqno9wWdMQAuvfVRY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 02 Aug 2025 00:08:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 369 (0x171)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3652893AF, serialNumber=509AE832ED6B89B16A9E8F7059D31002EBDF5516
        Validity
            Not Before: Jul 31 04:56:01 2025 GMT
            Not After : Aug  2 04:56:01 2025 GMT
        Subject: CN=688af761-5482
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a5:e0:7e:23:53:ce:a9:14:7f:2b:d1:19:1c:
                    e9:73:16:4b:f0:d8:b2:46:a0:cf:90:35:84:6e:b7:
                    09:9e:6e:b0:5a:0e:79:de:8c:0a:94:93:5d:32:cf:
                    02:19:0a:0b:0e:70:d0:1e:38:5b:39:71:ae:ef:91:
                    ba:54:3d:98:44:5f:52:ac:03:d2:29:3c:3a:1c:4f:
                    3a:57:07:8a:03:f2:f7:5f:b1:02:ab:3b:62:35:42:
                    b8:8c:f0:24:b0:7a:e7:a9:c1:6d:aa:9b:31:ed:58:
                    8b:d9:24:15:b1:c1:5c:bb:60:ee:a9:a5:04:d1:68:
                    29:f8:4e:aa:a4:65:57:1b:26:48:a8:72:2c:a5:e3:
                    f9:59:f9:33:20:a7:6e:e4:8b:92:79:2a:f3:1f:8e:
                    eb:14:6d:9e:98:de:a0:e8:df:d1:8f:43:0a:be:6b:
                    72:10:a2:59:d2:0c:54:9b:14:56:aa:d6:74:1e:06:
                    ae:46:fc:fb:d1:40:0b:46:53:05:57:bf:af:02:26:
                    a3:23:08:46:3d:e4:a2:6d:5d:76:b0:b8:9b:f9:fd:
                    b6:d2:1c:eb:5d:c4:83:13:a5:c6:58:f6:6a:3f:95:
                    60:80:dd:00:5b:11:c1:17:59:24:19:50:6a:40:ca:
                    31:01:0a:c2:19:c5:fa:34:0f:56:b9:70:91:9b:bc:
                    a0:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:28:B4:D2:CB:AC:95:BB:E4:3E:E6:E9:74:3B:90:76:24:4F:05:39
            X509v3 Authority Key Identifier:
                keyid:50:9A:E8:32:ED:6B:89:B1:6A:9E:8F:70:59:D3:10:02:EB:DF:55:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3652893/9742A64C5EED11EF8C934379762E951A/UJroMu1ribFqno9wWdMQAuvfVRY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/UJroMu1ribFqno9wWdMQAuvfVRY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3652893/9742A64C5EED11EF8C934379762E951A/UJroMu1ribFqno9wWdMQAuvfVRY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:b2:13:f8:11:ae:03:17:44:32:72:94:22:94:a6:4a:c0:92:
         8b:7d:58:44:2a:ea:ac:bf:f1:b8:02:ca:d0:50:60:64:89:f1:
         bc:d7:f9:51:17:ba:e4:ba:8b:f3:04:3b:3c:1e:ff:f7:79:32:
         74:15:55:8e:a5:d6:b0:1a:0d:f4:21:b3:7d:90:d1:18:ce:bb:
         4d:7a:a3:ab:8f:d6:ee:c5:84:40:63:3d:ee:f0:6d:40:d1:c5:
         9b:2d:13:3e:07:29:89:63:bf:ad:5c:8d:90:dc:31:d0:3c:9b:
         01:d5:f1:46:98:2a:e7:70:10:13:05:80:2b:a8:bb:2e:04:ec:
         4d:5b:d3:ff:d1:b1:75:25:cb:0c:79:d3:b2:6b:c2:96:b8:a4:
         22:ac:f2:ba:d4:34:f8:b4:ad:32:69:36:57:52:ec:92:67:c6:
         bb:98:a2:5b:2d:77:ed:d9:75:fb:e4:e8:e7:c9:1e:6a:d3:da:
         1b:02:cf:36:17:78:a5:b8:71:fa:de:a4:10:58:f9:5c:ef:3f:
         c8:8d:66:77:ab:4e:01:de:3f:7b:ee:2f:7a:a6:0e:3e:e8:c7:
         84:e2:3b:e7:1a:57:c6:79:27:50:05:a4:7b:df:20:bb:4d:af:
         f4:06:c6:26:c6:13:d4:6b:e6:aa:fd:f4:c2:07:d5:b7:9d:48:
         e5:78:7b:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 11:14:46 2025 by rpki-client