Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3658AF9/5C52F2F4783611F09A24A0E3DAE4EC9C/1X3hPvIcIQ_suBv_eMQUm-o6fDI.mft
File:                     1X3hPvIcIQ_suBv_eMQUm-o6fDI.mft (raw, json)
Hash identifier:          OXo3mS9DMABoj4zb6OZnN4zEf+htXGx3OHSxKByQne4=
Subject key identifier:   55:4B:63:27:93:31:CA:C8:E1:27:8E:7F:68:DC:A4:3F:39:E6:4A:52
Authority key identifier: D5:7D:E1:3E:F2:1C:21:0F:EC:B8:1B:FF:78:C4:14:9B:EA:3A:7C:32
Certificate issuer:       /CN=F3658AF9RI/serialNumber=D57DE13EF21C210FECB81BFF78C4149BEA3A7C32
Certificate serial:       0132
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/1X3hPvIcIQ_suBv_eMQUm-o6fDI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3658AF9/5C52F2F4783611F09A24A0E3DAE4EC9C/1X3hPvIcIQ_suBv_eMQUm-o6fDI.mft
Manifest number:          0132
Signing time:             Thu 11 Jun 2026 05:05:37 +0000
Manifest this update:     Thu 11 Jun 2026 05:05:36 +0000
Manifest next update:     Sat 13 Jun 2026 05:05:36 +0000
Files and hashes:         1: 1X3hPvIcIQ_suBv_eMQUm-o6fDI.crl (hash: gQVBAdvLF+VR4kt11vMs/x6bEfTRr8YAxrMcZu0gDIs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3658AF9/5C52F2F4783611F09A24A0E3DAE4EC9C/1X3hPvIcIQ_suBv_eMQUm-o6fDI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3658AF9/5C52F2F4783611F09A24A0E3DAE4EC9C/1X3hPvIcIQ_suBv_eMQUm-o6fDI.mft
                          rsync://rpki.afrinic.net/repository/ripe/1X3hPvIcIQ_suBv_eMQUm-o6fDI.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 13 Jun 2026 00:45:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 306 (0x132)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3658AF9RI, serialNumber=D57DE13EF21C210FECB81BFF78C4149BEA3A7C32
        Validity
            Not Before: Jun 11 05:05:36 2026 GMT
            Not After : Jun 13 05:05:36 2026 GMT
        Subject: CN=6a2a4221-c483
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ba:86:24:40:e1:60:28:1e:72:14:43:dc:0c:
                    34:23:26:3d:9d:2b:15:89:1b:2b:ae:a1:31:68:f4:
                    79:dc:b4:0a:e8:b2:7f:6c:19:78:bc:31:c3:83:49:
                    e6:cb:d8:10:14:7d:fd:fb:4c:32:6d:0d:7c:ea:e4:
                    f0:b3:25:8e:af:c0:bb:26:c8:db:ee:4c:6e:6f:e1:
                    be:fa:bd:7a:af:c4:98:1d:ad:35:3d:07:d6:09:60:
                    4e:38:0a:34:85:51:8c:6d:cc:ab:cb:e2:7a:41:dc:
                    e9:ef:b3:50:34:6f:eb:96:aa:eb:1f:fa:ec:bf:ac:
                    fa:00:81:a7:f4:c7:99:91:76:f4:87:b8:b2:4f:7c:
                    f1:95:52:f1:98:1b:37:8a:f4:b4:c0:3e:07:e6:be:
                    11:91:66:1a:1a:76:16:da:b0:b5:1d:cf:4c:ec:d1:
                    bf:43:ad:64:90:de:24:4f:8e:99:64:ee:51:bb:f5:
                    d9:6b:0c:d1:1f:d8:b9:96:e4:09:8c:6c:14:d4:36:
                    1f:f9:b8:c2:ad:49:39:ac:37:9e:ea:cf:c3:7e:ad:
                    7c:cc:a5:69:97:52:91:73:5d:de:a8:c8:1f:63:4b:
                    ec:ea:ee:0d:0d:4a:72:a0:31:fb:0e:40:93:c1:fe:
                    e4:9a:00:31:da:36:fd:5b:b6:d8:d8:63:70:0a:ae:
                    26:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:4B:63:27:93:31:CA:C8:E1:27:8E:7F:68:DC:A4:3F:39:E6:4A:52
            X509v3 Authority Key Identifier:
                keyid:D5:7D:E1:3E:F2:1C:21:0F:EC:B8:1B:FF:78:C4:14:9B:EA:3A:7C:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3658AF9/5C52F2F4783611F09A24A0E3DAE4EC9C/1X3hPvIcIQ_suBv_eMQUm-o6fDI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/1X3hPvIcIQ_suBv_eMQUm-o6fDI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3658AF9/5C52F2F4783611F09A24A0E3DAE4EC9C/1X3hPvIcIQ_suBv_eMQUm-o6fDI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:72:4b:17:2b:aa:6a:ae:40:13:83:1d:42:4b:f2:2b:c1:a9:
         b6:46:80:64:43:b2:93:d9:34:c8:7e:d8:5e:e0:70:7a:80:e8:
         37:70:7b:0f:2e:fd:bc:26:d7:08:a7:9e:be:3b:71:bf:f7:8f:
         b6:5e:d4:81:36:b6:28:35:2e:04:50:90:50:35:17:a0:1a:59:
         82:c4:bb:6a:9e:73:0e:7d:d9:34:de:1d:e0:72:ee:6a:2b:ae:
         47:c7:a6:9c:59:37:34:b3:f5:45:60:ab:63:59:c0:1b:c9:d4:
         bf:77:3b:83:7d:6b:7e:84:42:13:28:f5:92:4f:53:39:a4:65:
         5e:7a:24:55:bb:38:cc:94:97:76:df:3c:52:01:9c:ff:76:24:
         e6:b0:ff:b2:07:0b:d2:de:37:8a:0a:24:86:f3:eb:9e:e7:2e:
         e6:20:4a:66:bc:02:79:39:68:82:e4:d8:f7:4b:79:75:61:8c:
         ee:3e:60:97:d1:d7:43:22:6a:b8:cd:f3:30:ba:94:0f:cb:9f:
         aa:df:f0:4a:d8:ab:a5:b2:46:88:09:c6:ae:e4:0e:eb:f6:0c:
         c5:5a:d1:8c:c7:4b:b2:77:24:25:2c:ac:48:31:4e:11:42:1b:
         28:18:ca:17:ad:a8:3c:cf:d7:4f:73:64:1b:64:d0:3a:ec:09:
         06:b6:e9:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 01:33:55 2026 by rpki-client