Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3674DA7/C661EE6E14B311EDA12368F2F1222468/DD2lBSocT7aPxjEmUGBjsCoEIWY.mft
File:                     DD2lBSocT7aPxjEmUGBjsCoEIWY.mft (raw, json)
Hash identifier:          MAlz8oCHhf9fo9xUotCtCRWnseNORRzW/G0LbUaoBRc=
Subject key identifier:   64:94:35:43:6E:4C:21:D6:D9:EF:1C:59:33:F8:85:D7:BE:41:AE:8A
Authority key identifier: 0C:3D:A5:05:2A:1C:4F:B6:8F:C6:31:26:50:60:63:B0:2A:04:21:66
Certificate issuer:       /CN=F3674DA7AF/serialNumber=0C3DA5052A1C4FB68FC63126506063B02A042166
Certificate serial:       062F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/DD2lBSocT7aPxjEmUGBjsCoEIWY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3674DA7/C661EE6E14B311EDA12368F2F1222468/DD2lBSocT7aPxjEmUGBjsCoEIWY.mft
Manifest number:          062B
Signing time:             Wed 14 Oct 2026 02:53:04 +0000
Manifest this update:     Wed 14 Oct 2026 02:53:04 +0000
Manifest next update:     Fri 16 Oct 2026 02:53:04 +0000
Files and hashes:         1: DD2lBSocT7aPxjEmUGBjsCoEIWY.crl (hash: d7ddeyMUuZIgtk0dSa8xIgtcoikOZL9aHHyn4jopt9k=)
                          2: 48D2B406C5EA11F0ABD46B9CDAE4EC9C.roa (hash: ppH4zDshMNxOVwN53Ovc+LwhvtmhSdJWlJ7PKmq8gBE=)
                          3: 92A716CA84EA11F1B89441EECE1D38B0.roa (hash: DhKLW5QHJIHhIFQqa5Eo94jK6mXcZzdjIDbbxOGDEJQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3674DA7/C661EE6E14B311EDA12368F2F1222468/DD2lBSocT7aPxjEmUGBjsCoEIWY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3674DA7/C661EE6E14B311EDA12368F2F1222468/DD2lBSocT7aPxjEmUGBjsCoEIWY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/DD2lBSocT7aPxjEmUGBjsCoEIWY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 16 Oct 2026 02:53:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1583 (0x62f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3674DA7AF, serialNumber=0C3DA5052A1C4FB68FC63126506063B02A042166
        Validity
            Not Before: Oct 14 02:53:04 2026 GMT
            Not After : Oct 16 02:53:04 2026 GMT
        Subject: CN=6aceee90-0c49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:17:9d:e6:ca:80:f5:57:73:95:7d:f1:49:38:
                    d0:00:61:a8:01:f5:b3:fa:56:e8:e6:8b:e6:75:eb:
                    9a:3f:c8:fd:3b:c4:31:92:97:cc:50:dc:8e:41:82:
                    ed:43:18:ec:54:6b:7c:44:21:c8:55:10:68:58:c8:
                    a5:71:fe:50:c6:70:ff:fa:95:8f:26:91:5d:7e:87:
                    ec:45:41:95:0d:7a:fb:54:7b:af:0b:a1:34:07:bf:
                    e2:42:f2:42:06:8d:d4:bb:72:0a:fe:8a:e4:64:d0:
                    8a:50:58:34:fc:5b:14:31:05:6b:73:4b:50:c8:82:
                    55:e3:df:13:1c:7d:58:4c:c1:91:7d:2d:97:e9:d0:
                    b6:78:5e:79:05:19:23:24:6b:e3:c7:09:fd:2b:09:
                    0b:fe:cc:95:c4:dc:38:93:64:e4:19:a9:6c:34:e6:
                    95:a4:d8:0c:2a:ed:69:1e:96:9f:fa:4a:88:fe:be:
                    07:07:6b:31:35:2d:e0:18:9c:47:01:ec:5e:30:6e:
                    e7:11:c1:4a:8d:3d:a3:5e:f3:6a:50:69:71:25:08:
                    8f:cc:28:27:53:e7:b0:1e:82:5c:d8:c7:61:67:ba:
                    89:24:89:c5:cb:99:41:4d:3d:0b:da:ac:ff:eb:12:
                    ec:c0:80:9e:da:d0:4f:04:de:76:0c:37:a5:7f:7c:
                    88:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:94:35:43:6E:4C:21:D6:D9:EF:1C:59:33:F8:85:D7:BE:41:AE:8A
            X509v3 Authority Key Identifier:
                keyid:0C:3D:A5:05:2A:1C:4F:B6:8F:C6:31:26:50:60:63:B0:2A:04:21:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3674DA7/C661EE6E14B311EDA12368F2F1222468/DD2lBSocT7aPxjEmUGBjsCoEIWY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DD2lBSocT7aPxjEmUGBjsCoEIWY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3674DA7/C661EE6E14B311EDA12368F2F1222468/DD2lBSocT7aPxjEmUGBjsCoEIWY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         dd:ee:e1:7f:cd:c7:19:18:fd:98:c4:38:4a:63:71:5e:51:1a:
         dc:d2:45:23:10:77:f3:e5:16:7f:b7:fe:8f:39:23:a9:b8:6b:
         14:e4:ef:ca:79:97:00:1c:32:4e:0f:cc:9b:dc:b9:73:92:16:
         c3:10:8b:78:f3:c8:9b:bd:16:32:3a:4b:f6:f0:3c:19:39:fb:
         aa:b0:95:3b:36:bb:1f:97:26:d5:22:98:af:b8:eb:1a:93:24:
         ac:5b:30:ba:34:33:d4:c0:9c:e0:16:59:4c:a1:0e:ef:7a:0f:
         bb:54:ef:80:99:95:39:ff:c4:42:5e:00:03:e1:86:9b:6a:c4:
         e0:e6:4b:2c:96:9d:72:38:dd:dd:01:b0:b3:cd:f2:20:e2:9c:
         48:62:55:f0:5f:8c:8d:4b:c1:a2:6f:46:3b:de:15:57:6f:09:
         1c:60:5d:d6:66:e7:cd:3a:d6:4d:91:44:0e:c0:df:f6:e3:d2:
         94:c2:af:2d:e4:fc:d2:d3:b1:8b:06:33:f4:4f:78:a2:f4:8f:
         93:e7:d0:ef:3a:84:36:4c:55:7e:ed:fa:72:a3:f5:bc:17:71:
         d7:21:f5:38:c1:df:93:90:4a:7f:2e:93:c8:6c:4e:f9:fb:9d:
         a2:95:17:ae:25:7e:44:6a:de:97:35:f1:d1:99:2b:ca:91:8f:
         01:a5:6b:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----