Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F366C09A/57896126FC2111F0B4B937CBDAE4EC9C/CBu-ff9M0Q1agvt6aWqU1dTGrvU.mft
File:                     CBu-ff9M0Q1agvt6aWqU1dTGrvU.mft (raw, json)
Hash identifier:          CxAiBi1z7tlpq2JUR+c1kB3ZX4kDzC1H/X1U12wyp1M=
Subject key identifier:   87:89:AA:D9:FB:EF:51:69:E2:73:5E:15:F6:80:7C:7F:1D:6E:AA:C7
Authority key identifier: 08:1B:BE:7D:FF:4C:D1:0D:5A:82:FB:7A:69:6A:94:D5:D4:C6:AE:F5
Certificate issuer:       /CN=F366C09ARI/serialNumber=081BBE7DFF4CD10D5A82FB7A696A94D5D4C6AEF5
Certificate serial:       E5
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/CBu-ff9M0Q1agvt6aWqU1dTGrvU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366C09A/57896126FC2111F0B4B937CBDAE4EC9C/CBu-ff9M0Q1agvt6aWqU1dTGrvU.mft
Manifest number:          E4
Signing time:             Thu 10 Sep 2026 05:23:29 +0000
Manifest this update:     Thu 10 Sep 2026 05:23:28 +0000
Manifest next update:     Sat 12 Sep 2026 05:23:28 +0000
Files and hashes:         1: CBu-ff9M0Q1agvt6aWqU1dTGrvU.crl (hash: 3hMcTQgWV7yjdd+0gPvzmqP0FPpS0xyyjB0oDuNlcuQ=)
                          2: 60B3D06A00F411F1AD3841F3DAE4EC9C.roa (hash: /YeTGPkgq6IrMHXTQlAMTAiQfLyi9ZfWhHpJyJlkfy0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366C09A/57896126FC2111F0B4B937CBDAE4EC9C/CBu-ff9M0Q1agvt6aWqU1dTGrvU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366C09A/57896126FC2111F0B4B937CBDAE4EC9C/CBu-ff9M0Q1agvt6aWqU1dTGrvU.mft
                          rsync://rpki.afrinic.net/repository/ripe/CBu-ff9M0Q1agvt6aWqU1dTGrvU.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 12 Sep 2026 00:45:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 229 (0xe5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366C09ARI, serialNumber=081BBE7DFF4CD10D5A82FB7A696A94D5D4C6AEF5
        Validity
            Not Before: Sep 10 05:23:28 2026 GMT
            Not After : Sep 12 05:23:28 2026 GMT
        Subject: CN=6aa23ed1-03dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:08:f5:c5:9c:23:b3:24:ea:1a:d1:e6:21:28:
                    ad:2e:b0:ef:5b:fc:62:b1:66:e0:3f:ed:6b:68:91:
                    fd:30:b1:99:12:2a:b2:34:27:9e:16:49:fe:fb:67:
                    61:3b:ac:9f:be:52:51:b0:db:f9:11:7b:14:eb:7b:
                    28:6d:69:5a:48:28:d4:90:ad:21:33:1a:8a:44:dc:
                    89:88:fd:39:f1:fc:8d:62:7f:4f:5e:64:c1:af:b9:
                    e0:ef:b9:89:c2:bd:f6:4c:4f:e8:f8:57:84:fb:28:
                    f4:09:94:19:45:ed:d2:37:13:65:19:f6:dc:ae:a6:
                    70:9b:21:74:64:67:4b:d1:ce:a2:47:69:56:fa:f8:
                    c6:65:88:ed:57:76:60:e6:ff:62:5a:f9:66:65:43:
                    f6:b7:24:60:e4:b2:d2:12:95:7c:7e:cf:cc:e1:2b:
                    28:2f:b7:e2:fa:21:33:d2:66:97:e6:17:d1:e5:95:
                    17:97:b8:94:78:87:02:2e:0d:83:41:46:0c:70:63:
                    22:e4:ed:85:2f:e1:a8:d9:ef:41:5a:5f:24:9d:51:
                    67:33:4a:fe:d9:f1:91:5e:e8:4d:7d:29:b0:35:56:
                    46:1a:2b:ec:08:57:30:d8:86:5a:a5:d8:03:e9:09:
                    a1:b9:4d:e7:3b:14:51:65:5c:09:7b:6b:e4:d0:1f:
                    06:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:89:AA:D9:FB:EF:51:69:E2:73:5E:15:F6:80:7C:7F:1D:6E:AA:C7
            X509v3 Authority Key Identifier:
                keyid:08:1B:BE:7D:FF:4C:D1:0D:5A:82:FB:7A:69:6A:94:D5:D4:C6:AE:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366C09A/57896126FC2111F0B4B937CBDAE4EC9C/CBu-ff9M0Q1agvt6aWqU1dTGrvU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/CBu-ff9M0Q1agvt6aWqU1dTGrvU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366C09A/57896126FC2111F0B4B937CBDAE4EC9C/CBu-ff9M0Q1agvt6aWqU1dTGrvU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:0d:a2:db:90:69:c8:6b:a0:34:e9:6b:11:f1:b5:9d:9d:db:
         ec:9b:33:ac:73:a1:88:b4:b6:ca:39:bf:76:bc:05:5f:dc:37:
         8f:e1:85:d1:6a:ae:77:55:46:cf:49:62:66:52:25:ef:59:53:
         1e:74:29:06:08:c6:3c:2e:4d:6e:48:5a:c2:41:f4:48:22:a3:
         1e:bd:bd:ea:80:5d:3c:d7:10:62:85:37:e9:41:c3:ef:34:56:
         ab:74:b9:97:48:6a:c3:96:0c:66:ac:28:34:01:fb:12:07:bb:
         80:e5:63:e6:88:25:eb:6f:fc:df:c3:d4:b2:6d:e7:c0:09:57:
         1a:60:99:be:34:82:c6:d7:43:29:41:cb:11:1e:f2:46:92:64:
         ab:7b:fc:8e:9a:24:c6:15:3b:8c:0b:71:30:b1:29:cc:63:80:
         2b:38:f5:f8:38:74:dc:4a:de:91:be:60:de:ea:00:b9:61:c6:
         87:c8:a8:04:7e:9d:06:c9:54:c5:66:3a:01:60:fe:ab:b4:99:
         74:82:fa:80:0d:1b:53:6d:51:6a:38:1c:ce:6e:1d:af:89:af:
         23:1f:b9:88:76:2b:3a:6c:c4:80:7e:d7:51:ca:35:99:35:cd:
         7f:8f:c5:95:e2:bf:71:bb:08:32:32:f4:d8:5e:fb:6e:7d:9d:
         f1:eb:f0:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----