Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F367972F/4C758F6A901011EDBC3E0F9BF1222468/SGm5dfSdmA_lFc7dSaDEDruBrKI.mft
File:                     SGm5dfSdmA_lFc7dSaDEDruBrKI.mft (raw, json)
Hash identifier:          ZnngYqH/XFfKfexNVLAmxcQ+tl4wFHAn7mchqX/HHj8=
Subject key identifier:   01:72:D9:03:59:47:6C:D1:FC:C0:89:BD:94:4B:28:3A:04:E8:7B:EF
Authority key identifier: 48:69:B9:75:F4:9D:98:0F:E5:15:CE:DD:49:A0:C4:0E:BB:81:AC:A2
Certificate issuer:       /CN=F367972FRI/serialNumber=4869B975F49D980FE515CEDD49A0C40EBB81ACA2
Certificate serial:       056C
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/SGm5dfSdmA_lFc7dSaDEDruBrKI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367972F/4C758F6A901011EDBC3E0F9BF1222468/SGm5dfSdmA_lFc7dSaDEDruBrKI.mft
Manifest number:          0569
Signing time:             Thu 10 Sep 2026 03:07:35 +0000
Manifest this update:     Thu 10 Sep 2026 03:07:34 +0000
Manifest next update:     Sat 12 Sep 2026 03:07:34 +0000
Files and hashes:         1: SGm5dfSdmA_lFc7dSaDEDruBrKI.crl (hash: aOkIBCvLmmFQv73oFL4Jq9UTyRyQE4UePCHHU0VlQLM=)
                          2: 76A8B37A8AA811F191D9CBF2CE1D38B0.roa (hash: 6JHF5LVrkMN963on9ATo1+Xaz16ezncd71FNghrXAOQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367972F/4C758F6A901011EDBC3E0F9BF1222468/SGm5dfSdmA_lFc7dSaDEDruBrKI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367972F/4C758F6A901011EDBC3E0F9BF1222468/SGm5dfSdmA_lFc7dSaDEDruBrKI.mft
                          rsync://rpki.afrinic.net/repository/ripe/SGm5dfSdmA_lFc7dSaDEDruBrKI.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 12 Sep 2026 00:45:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1388 (0x56c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367972FRI, serialNumber=4869B975F49D980FE515CEDD49A0C40EBB81ACA2
        Validity
            Not Before: Sep 10 03:07:34 2026 GMT
            Not After : Sep 12 03:07:34 2026 GMT
        Subject: CN=6aa21ef7-bef5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:94:3f:0a:d3:75:92:81:30:fa:75:13:33:59:
                    a5:74:68:9d:22:82:0e:64:32:fe:74:e3:5d:fc:b7:
                    97:8d:86:a6:a8:8b:44:d6:a8:61:2b:ee:c9:19:56:
                    37:87:4b:a8:b4:f8:ef:88:a6:4f:95:fc:2c:1a:73:
                    94:9f:6d:cc:a9:43:f6:ec:a7:26:8c:2b:38:1e:2c:
                    1b:74:08:4f:9c:8a:f0:ae:81:11:d3:e5:a4:fb:45:
                    27:95:dd:9e:b5:2c:85:65:e4:1d:2c:20:2e:6d:a1:
                    05:2b:11:9d:29:b6:bd:86:fd:f8:5e:c7:3b:e6:7c:
                    81:e4:b1:7f:1b:2c:f6:f9:ad:7a:95:37:3e:3f:90:
                    52:92:56:6f:f4:96:03:47:eb:c5:77:5f:ae:8e:ad:
                    49:35:53:fa:f4:2e:e6:11:57:39:b0:25:f3:b8:50:
                    0c:5b:3b:e3:5c:78:44:a1:0f:bb:52:95:2a:89:29:
                    e6:b5:25:38:47:cd:cb:0c:96:b8:37:62:ed:95:98:
                    6e:5b:c9:88:1b:60:a9:2c:79:f7:20:2c:cf:0b:09:
                    06:67:e0:d9:c8:8f:16:38:ed:6a:2a:7f:3f:bc:32:
                    f2:cc:a7:82:3e:d4:43:23:b6:90:24:42:94:a1:f3:
                    d2:d9:dc:27:44:5d:39:af:b3:1b:97:bd:d9:c7:20:
                    d7:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:72:D9:03:59:47:6C:D1:FC:C0:89:BD:94:4B:28:3A:04:E8:7B:EF
            X509v3 Authority Key Identifier:
                keyid:48:69:B9:75:F4:9D:98:0F:E5:15:CE:DD:49:A0:C4:0E:BB:81:AC:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367972F/4C758F6A901011EDBC3E0F9BF1222468/SGm5dfSdmA_lFc7dSaDEDruBrKI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/SGm5dfSdmA_lFc7dSaDEDruBrKI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367972F/4C758F6A901011EDBC3E0F9BF1222468/SGm5dfSdmA_lFc7dSaDEDruBrKI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:1b:06:10:24:08:39:04:59:11:1a:bf:93:48:1d:30:e7:8a:
         82:22:3a:89:76:22:d2:6b:74:f2:c5:d6:24:0c:79:6b:6e:f2:
         17:6c:d1:35:cc:d2:93:bd:f5:52:f0:8b:48:d4:f2:22:11:b9:
         2a:2d:07:d0:e4:6b:cf:0b:67:d5:08:d1:10:be:47:d1:45:22:
         6d:9c:28:0e:4a:b2:9b:96:8c:b1:87:42:d2:fd:00:28:96:c1:
         a8:5b:0d:ca:0b:3a:ba:14:cd:f8:d1:73:6b:7e:d9:d9:62:c0:
         fa:02:8d:6e:99:d7:ee:e4:7b:6e:c8:c8:02:ce:68:ba:d5:13:
         db:84:a4:91:a6:e9:0d:42:25:c4:28:ff:d0:53:e4:46:e4:fd:
         f7:dd:2e:80:7d:4f:26:b2:f6:07:b3:d1:c5:aa:63:a5:f7:6f:
         19:96:bb:b6:c9:1a:ba:a7:48:f3:cc:49:1c:6f:e0:5f:46:95:
         8d:c0:ab:03:b7:22:5c:60:80:e2:f8:8e:a5:af:28:54:9e:fb:
         8c:7b:6c:b3:7d:7b:d2:48:e9:0c:7f:76:53:59:41:49:6d:dd:
         4c:a6:6b:9b:13:c9:e2:6c:48:6d:27:a3:cb:34:72:3a:9c:b6:
         47:57:11:e7:e9:a9:ff:f9:1d:78:95:16:03:6f:96:b7:cf:49:
         e4:d5:87:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----