Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365F2BD/552C6D641A6B11EEA55ACF204AD9E6FC/EyGrNeMXocYBskT-yXbli9oLszM.mft
File:                     EyGrNeMXocYBskT-yXbli9oLszM.mft (raw, json)
Hash identifier:          7kj5iQWdxAv6gkHyYFs5g6eKBxv11jQUNwtYgMr1XuE=
Subject key identifier:   C1:50:E3:5E:98:37:A3:5F:FB:4E:68:2B:A1:40:87:B9:2A:36:FB:B3
Authority key identifier: 13:21:AB:35:E3:17:A1:C6:01:B2:44:FE:C9:76:E5:8B:DA:0B:B3:33
Certificate issuer:       /CN=F365F2BDAF/serialNumber=1321AB35E317A1C601B244FEC976E58BDA0BB333
Certificate serial:       0311
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/EyGrNeMXocYBskT-yXbli9oLszM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365F2BD/552C6D641A6B11EEA55ACF204AD9E6FC/EyGrNeMXocYBskT-yXbli9oLszM.mft
Manifest number:          030F
Signing time:             Thu 31 Jul 2025 03:57:13 +0000
Manifest this update:     Thu 31 Jul 2025 03:57:12 +0000
Manifest next update:     Sat 02 Aug 2025 03:57:12 +0000
Files and hashes:         1: EyGrNeMXocYBskT-yXbli9oLszM.crl (hash: hl3iJVQyg62f+KSvXrIRqs8TYvc6PedG465kB2Lwx2Q=)
                          2: 3D1407C47CB611EFAC71A891762E951A.roa (hash: 9cjcvkV8WiknZRld6/vpk/RCy4/zP+e++V0fqwQhvWo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365F2BD/552C6D641A6B11EEA55ACF204AD9E6FC/EyGrNeMXocYBskT-yXbli9oLszM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365F2BD/552C6D641A6B11EEA55ACF204AD9E6FC/EyGrNeMXocYBskT-yXbli9oLszM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/EyGrNeMXocYBskT-yXbli9oLszM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 02 Aug 2025 00:08:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 785 (0x311)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365F2BDAF, serialNumber=1321AB35E317A1C601B244FEC976E58BDA0BB333
        Validity
            Not Before: Jul 31 03:57:12 2025 GMT
            Not After : Aug  2 03:57:12 2025 GMT
        Subject: CN=688ae999-f629
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:4c:bc:2e:b5:52:f9:de:5c:5f:eb:74:00:42:
                    a1:d5:38:fb:99:ef:c9:e6:78:05:ff:e7:2b:87:2e:
                    f2:71:4c:1f:ab:66:2e:f0:37:07:bf:46:62:a0:d7:
                    37:ce:c8:64:3d:4a:2b:e6:5e:df:fd:b3:a4:cb:71:
                    64:46:32:b7:cf:c0:c2:2c:c8:a2:9f:3e:86:7a:69:
                    07:a0:7f:d4:74:4a:d3:62:c8:1f:b5:1c:41:d7:55:
                    38:f1:b0:0a:d1:71:e0:93:b0:72:7e:01:7d:9f:ef:
                    e4:f3:e8:aa:31:cd:54:5f:4d:7f:6d:67:d5:51:5f:
                    df:dd:c9:59:2f:da:06:f7:f3:db:cd:ed:c2:ce:d5:
                    c1:ea:53:1b:bc:0f:92:93:64:8a:dd:8b:4b:43:1d:
                    d5:15:35:d4:47:d0:c3:16:d7:4c:a8:33:97:11:f0:
                    36:f5:da:85:b5:f0:95:59:06:b7:31:60:ab:59:55:
                    fa:33:6b:ac:e9:92:a2:a9:cc:65:88:5e:9b:b3:5e:
                    89:b6:bc:70:1b:17:75:10:fd:c2:80:06:a6:4c:94:
                    a9:0b:6c:bb:57:72:8a:07:fb:72:a3:3d:e9:28:a4:
                    c2:f5:a2:4f:b4:38:c2:f2:0a:15:9c:ba:77:78:c8:
                    f1:23:9a:db:8a:23:20:d6:27:93:91:26:6b:90:b2:
                    e1:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:50:E3:5E:98:37:A3:5F:FB:4E:68:2B:A1:40:87:B9:2A:36:FB:B3
            X509v3 Authority Key Identifier:
                keyid:13:21:AB:35:E3:17:A1:C6:01:B2:44:FE:C9:76:E5:8B:DA:0B:B3:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365F2BD/552C6D641A6B11EEA55ACF204AD9E6FC/EyGrNeMXocYBskT-yXbli9oLszM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/EyGrNeMXocYBskT-yXbli9oLszM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365F2BD/552C6D641A6B11EEA55ACF204AD9E6FC/EyGrNeMXocYBskT-yXbli9oLszM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:2b:02:be:fb:e3:a1:25:08:19:97:a8:6c:d4:a3:e1:f8:70:
         44:2e:8b:f9:9e:de:ee:ba:d8:d5:1b:0d:b9:bd:fc:35:1c:50:
         3a:03:ad:11:1e:0a:3e:2e:6f:d6:67:66:09:fd:1d:e3:02:60:
         ab:9d:ff:ae:c1:43:22:09:7c:38:e9:7d:e8:56:d8:f0:a5:1f:
         4d:d2:6d:13:75:bb:7d:34:82:ff:d9:ba:8c:12:38:07:b5:0c:
         8d:3a:c5:2e:02:c1:15:20:2f:73:4d:7c:2c:17:81:ed:ac:5c:
         73:2c:80:36:ad:d0:c2:40:72:d7:5b:dd:83:9e:74:ac:7c:f7:
         17:a0:cc:a8:73:d3:c8:19:08:cd:35:75:90:cc:5e:fb:31:a9:
         cf:ce:6d:a5:2b:c9:74:30:63:fc:2b:e5:0b:23:b0:78:51:6b:
         f5:df:47:8e:d9:cb:17:22:74:8f:dc:8f:b2:fc:7b:a7:d9:04:
         5c:03:e8:87:d3:39:3c:ef:ed:5c:19:81:e1:e1:ba:f0:d1:3b:
         bb:6e:02:da:9a:14:4a:cb:59:49:b3:50:db:9f:12:c7:8c:0f:
         65:a5:5f:0d:43:06:6f:11:4b:33:a2:31:49:18:f2:04:50:28:
         92:9c:76:63:49:98:fa:fb:28:ff:a3:39:54:e0:17:23:7b:b7:
         61:e6:eb:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 11:17:50 2025 by rpki-client