Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3658AF9/5C52F2F4783611F09A24A0E3DAE4EC9C/1X3hPvIcIQ_suBv_eMQUm-o6fDI.mft
File:                     1X3hPvIcIQ_suBv_eMQUm-o6fDI.mft (raw, json)
Hash identifier:          YWRbI/r1QatX9FCvrGxP3kzaryWMSQL3mzGbYUSJPyo=
Subject key identifier:   D2:BA:18:DB:DB:48:20:94:51:D8:23:25:67:3E:5D:F6:E1:57:45:89
Authority key identifier: D5:7D:E1:3E:F2:1C:21:0F:EC:B8:1B:FF:78:C4:14:9B:EA:3A:7C:32
Certificate issuer:       /CN=F3658AF9RI/serialNumber=D57DE13EF21C210FECB81BFF78C4149BEA3A7C32
Certificate serial:       01BD
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/1X3hPvIcIQ_suBv_eMQUm-o6fDI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3658AF9/5C52F2F4783611F09A24A0E3DAE4EC9C/1X3hPvIcIQ_suBv_eMQUm-o6fDI.mft
Manifest number:          01BD
Signing time:             Wed 28 Oct 2026 05:04:05 +0000
Manifest this update:     Wed 28 Oct 2026 05:04:05 +0000
Manifest next update:     Fri 30 Oct 2026 05:04:05 +0000
Files and hashes:         1: 1X3hPvIcIQ_suBv_eMQUm-o6fDI.crl (hash: YAd40XPXxuH3mEaYWswMB/SI/L+wz4NrRvW54r9mJn0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3658AF9/5C52F2F4783611F09A24A0E3DAE4EC9C/1X3hPvIcIQ_suBv_eMQUm-o6fDI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3658AF9/5C52F2F4783611F09A24A0E3DAE4EC9C/1X3hPvIcIQ_suBv_eMQUm-o6fDI.mft
                          rsync://rpki.afrinic.net/repository/ripe/1X3hPvIcIQ_suBv_eMQUm-o6fDI.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 30 Oct 2026 05:04:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 445 (0x1bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3658AF9RI, serialNumber=D57DE13EF21C210FECB81BFF78C4149BEA3A7C32
        Validity
            Not Before: Oct 28 05:04:05 2026 GMT
            Not After : Oct 30 05:04:05 2026 GMT
        Subject: CN=6ae18245-c4d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:01:a5:e1:c1:c2:68:98:6f:70:62:30:90:8d:
                    2e:26:39:86:0b:82:e5:a3:94:8c:05:de:20:20:76:
                    ed:9b:05:a7:cd:a4:45:3b:98:57:b5:0d:e6:52:4f:
                    21:67:40:cb:f5:6f:24:99:51:f2:20:8a:04:0c:85:
                    75:86:8b:9a:ed:9b:81:30:3f:f8:85:34:40:04:7e:
                    15:7c:d8:6e:66:82:a3:27:be:1c:4f:a5:37:30:07:
                    20:f2:7c:bf:28:a1:a9:a5:6d:98:49:2b:1d:8f:3d:
                    01:3c:cf:31:e5:4b:29:0a:51:d8:37:6d:33:ae:d7:
                    2f:ac:76:1e:3d:38:0c:6b:51:bc:45:6b:05:9d:d7:
                    04:64:a8:11:12:bd:0e:a8:ce:f3:d8:28:01:03:59:
                    45:ec:06:6c:02:8f:18:c5:14:89:ba:71:31:0e:68:
                    d8:63:f6:11:63:4c:9c:f8:55:34:1d:e5:a6:75:ff:
                    36:cf:3c:86:6e:2d:36:7a:f3:42:3b:f1:cd:09:9d:
                    57:4d:87:16:71:9d:e4:7f:92:d8:3e:3e:d0:08:5e:
                    2e:06:03:d0:ef:48:de:2d:d1:15:0f:b4:14:60:bb:
                    f7:55:90:23:b2:28:28:53:57:43:1f:a9:07:44:75:
                    d1:5f:a7:2e:79:f3:2a:88:65:73:ed:5a:23:25:f2:
                    1e:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:BA:18:DB:DB:48:20:94:51:D8:23:25:67:3E:5D:F6:E1:57:45:89
            X509v3 Authority Key Identifier:
                keyid:D5:7D:E1:3E:F2:1C:21:0F:EC:B8:1B:FF:78:C4:14:9B:EA:3A:7C:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3658AF9/5C52F2F4783611F09A24A0E3DAE4EC9C/1X3hPvIcIQ_suBv_eMQUm-o6fDI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/1X3hPvIcIQ_suBv_eMQUm-o6fDI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3658AF9/5C52F2F4783611F09A24A0E3DAE4EC9C/1X3hPvIcIQ_suBv_eMQUm-o6fDI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:3f:68:0d:89:73:1e:b9:59:7d:50:58:d3:02:69:7e:c1:87:
         7c:0f:a6:5f:30:dd:0f:42:2a:d6:31:53:30:b3:c2:4a:b5:4c:
         15:84:aa:4f:00:1a:30:71:2d:dc:03:aa:1c:d3:7f:0a:f3:b7:
         6b:eb:aa:29:39:1d:77:04:1d:3f:12:8c:14:d3:42:a5:c0:3d:
         05:9f:77:63:b9:a8:68:2f:fa:a3:50:e4:73:d4:b9:11:8a:33:
         3c:8b:2c:92:6c:19:bf:8a:6b:af:49:51:0c:f4:85:3f:88:85:
         33:16:40:18:2c:e6:34:1c:2e:1a:9c:39:50:31:59:d7:c3:cc:
         27:8f:a7:f3:b6:71:46:64:27:4d:24:5e:ef:87:4d:79:89:7f:
         c0:a3:10:7b:0f:86:3b:63:89:36:32:66:f1:20:c7:8f:dc:e8:
         d1:59:18:4c:c3:29:e2:fb:a3:4f:f1:3a:bb:b4:e2:d3:b7:22:
         f8:22:78:e6:66:66:43:d0:56:9c:db:5a:70:66:49:be:b6:66:
         86:0a:73:79:e3:90:57:15:ad:7d:5a:fd:1f:f0:f2:e6:f7:fd:
         2c:67:94:86:f0:e3:22:02:ff:05:38:21:08:15:5b:c7:9e:b1:
         15:d1:4f:cc:fe:b2:ec:7a:bd:c7:f3:ec:d3:b2:43:5a:ed:63:
         2e:b4:59:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----