Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F367972F/4C758F6A901011EDBC3E0F9BF1222468/SGm5dfSdmA_lFc7dSaDEDruBrKI.mft
File:                     SGm5dfSdmA_lFc7dSaDEDruBrKI.mft (raw, json)
Hash identifier:          260i4jT7As3dQOMsFXoSSIz+VS30qNXHjfaCK7MpBv4=
Subject key identifier:   E9:DE:25:D2:D5:50:00:2F:63:DC:B0:54:34:80:A7:70:FA:AF:BA:62
Authority key identifier: 48:69:B9:75:F4:9D:98:0F:E5:15:CE:DD:49:A0:C4:0E:BB:81:AC:A2
Certificate issuer:       /CN=F367972FRI/serialNumber=4869B975F49D980FE515CEDD49A0C40EBB81ACA2
Certificate serial:       059B
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/SGm5dfSdmA_lFc7dSaDEDruBrKI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367972F/4C758F6A901011EDBC3E0F9BF1222468/SGm5dfSdmA_lFc7dSaDEDruBrKI.mft
Manifest number:          0598
Signing time:             Tue 27 Oct 2026 03:06:35 +0000
Manifest this update:     Tue 27 Oct 2026 03:06:32 +0000
Manifest next update:     Thu 29 Oct 2026 03:06:32 +0000
Files and hashes:         1: SGm5dfSdmA_lFc7dSaDEDruBrKI.crl (hash: GeE2rYwRDJjozFKo49M/Xno880ADsjIhe6NmrvFmvUo=)
                          2: 76A8B37A8AA811F191D9CBF2CE1D38B0.roa (hash: 6JHF5LVrkMN963on9ATo1+Xaz16ezncd71FNghrXAOQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367972F/4C758F6A901011EDBC3E0F9BF1222468/SGm5dfSdmA_lFc7dSaDEDruBrKI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367972F/4C758F6A901011EDBC3E0F9BF1222468/SGm5dfSdmA_lFc7dSaDEDruBrKI.mft
                          rsync://rpki.afrinic.net/repository/ripe/SGm5dfSdmA_lFc7dSaDEDruBrKI.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 29 Oct 2026 00:45:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1435 (0x59b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367972FRI, serialNumber=4869B975F49D980FE515CEDD49A0C40EBB81ACA2
        Validity
            Not Before: Oct 27 03:06:32 2026 GMT
            Not After : Oct 29 03:06:32 2026 GMT
        Subject: CN=6ae0153b-ad68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:ba:a4:33:24:64:3a:8d:02:26:a4:84:0c:f8:
                    33:be:3f:b6:1e:7e:58:87:19:df:03:8d:5f:9b:a4:
                    9c:bf:88:86:d9:e1:ac:d8:d8:45:de:e3:11:db:fc:
                    d4:33:c9:61:96:f3:5a:72:d7:10:ff:76:a2:cc:f2:
                    c1:dc:32:cf:49:52:52:60:bc:d2:05:58:90:ad:92:
                    7b:f8:e8:21:1e:f3:01:20:cd:84:52:ab:bc:f4:26:
                    0a:cf:12:ae:9c:f7:4b:ab:62:95:8b:9d:c0:93:7d:
                    ec:81:b2:67:5e:c6:ba:69:d0:c3:a4:73:84:47:ea:
                    5c:3e:13:1d:7c:96:84:6e:66:88:4d:cd:f3:73:0f:
                    5f:9c:55:63:57:20:df:37:90:9b:96:89:2d:48:83:
                    c5:5a:04:57:3b:77:a0:cb:2f:36:03:32:93:c2:95:
                    34:d7:5c:63:3f:dd:44:ec:1d:e4:ea:c1:e5:5b:52:
                    c8:a6:88:d2:48:e4:50:f8:05:ce:12:0d:21:6b:d9:
                    73:c1:6e:62:4d:a0:16:cf:a4:ba:73:f6:38:17:84:
                    60:27:75:47:79:ca:10:84:9a:3c:44:2f:36:c2:33:
                    ea:d6:02:58:2c:3e:0d:11:4d:34:05:aa:19:19:74:
                    77:04:6f:0f:04:ee:9c:62:7b:83:f4:c9:5e:b2:83:
                    5f:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:DE:25:D2:D5:50:00:2F:63:DC:B0:54:34:80:A7:70:FA:AF:BA:62
            X509v3 Authority Key Identifier:
                keyid:48:69:B9:75:F4:9D:98:0F:E5:15:CE:DD:49:A0:C4:0E:BB:81:AC:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367972F/4C758F6A901011EDBC3E0F9BF1222468/SGm5dfSdmA_lFc7dSaDEDruBrKI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/SGm5dfSdmA_lFc7dSaDEDruBrKI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367972F/4C758F6A901011EDBC3E0F9BF1222468/SGm5dfSdmA_lFc7dSaDEDruBrKI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:25:bd:e6:e9:dd:8c:c3:f7:7a:20:6d:84:9a:29:09:f4:12:
         67:79:e5:44:01:9a:29:9f:3c:56:1f:f9:1e:22:37:37:20:58:
         1b:12:b6:70:fa:f9:d7:50:fd:42:9c:9b:43:b2:4c:d2:5a:ce:
         1f:ef:4e:00:e8:d6:eb:03:1e:72:ee:fb:91:e6:c5:ab:7f:d8:
         d4:52:2e:b1:61:6f:2f:10:6b:4e:6f:48:21:68:5f:0f:16:d8:
         d0:a8:1b:09:37:71:e8:4a:33:8c:21:24:c5:7e:bb:af:39:fc:
         fb:05:30:e0:0a:aa:fa:99:9d:5c:69:c6:c5:20:e7:74:9a:fc:
         08:48:f2:0c:9e:41:aa:d5:ea:b1:56:2c:b5:fc:6b:03:e2:c9:
         b2:a9:f8:14:9c:8c:db:58:b6:f7:c5:ab:8b:17:31:4f:9b:c4:
         88:72:d5:8e:f7:bd:47:43:01:5b:a8:94:a3:9b:46:db:1b:9f:
         71:c5:45:c8:6e:8c:f5:04:a3:8f:f5:25:78:a1:2c:bc:d5:1f:
         b3:11:89:71:e8:7a:e7:c7:57:28:f9:85:87:fd:5b:3c:cc:55:
         da:af:99:97:45:3b:a9:51:54:91:76:88:c8:db:13:35:42:89:
         9e:4a:e3:24:ee:d7:7d:66:b7:de:3d:46:68:65:be:cf:a0:ad:
         82:bd:40:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----