Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B8D1/2F69E8C221F011EE8646970F4AD9E6FC/ZbPoGBw9qNHWQehKRcjvgjndfqc.mft
File:                     ZbPoGBw9qNHWQehKRcjvgjndfqc.mft (raw, json)
Hash identifier:          hKL+XnSePuCul9/6xfIeUIhLV2kpknIPKumoUp5kAs0=
Subject key identifier:   E3:9A:1B:AB:9D:AA:AB:BC:75:C1:9C:2B:FF:22:6D:34:D4:8C:76:26
Authority key identifier: 65:B3:E8:18:1C:3D:A8:D1:D6:41:E8:4A:45:C8:EF:82:39:DD:7E:A7
Certificate issuer:       /CN=F367B8D1RI/serialNumber=65B3E8181C3DA8D1D641E84A45C8EF8239DD7EA7
Certificate serial:       0357
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/ZbPoGBw9qNHWQehKRcjvgjndfqc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/2F69E8C221F011EE8646970F4AD9E6FC/ZbPoGBw9qNHWQehKRcjvgjndfqc.mft
Manifest number:          0357
Signing time:             Sat 25 Oct 2025 04:09:04 +0000
Manifest this update:     Sat 25 Oct 2025 04:09:03 +0000
Manifest next update:     Mon 27 Oct 2025 04:09:03 +0000
Files and hashes:         1: ZbPoGBw9qNHWQehKRcjvgjndfqc.crl (hash: VJA0dMPuwJeBbuW23FuJzyni0kH3HExtDlSBUXg7P3Y=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/2F69E8C221F011EE8646970F4AD9E6FC/ZbPoGBw9qNHWQehKRcjvgjndfqc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/2F69E8C221F011EE8646970F4AD9E6FC/ZbPoGBw9qNHWQehKRcjvgjndfqc.mft
                          rsync://rpki.afrinic.net/repository/ripe/ZbPoGBw9qNHWQehKRcjvgjndfqc.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 27 Oct 2025 04:08:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 855 (0x357)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367B8D1RI, serialNumber=65B3E8181C3DA8D1D641E84A45C8EF8239DD7EA7
        Validity
            Not Before: Oct 25 04:09:03 2025 GMT
            Not After : Oct 27 04:09:03 2025 GMT
        Subject: CN=68fc4d60-1dcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:bd:b4:bc:b4:95:a7:a1:b0:73:94:f0:e2:9d:
                    e0:e2:bb:36:7c:19:b4:6d:8e:f0:19:6c:91:a1:38:
                    ed:e9:db:b8:48:11:6f:a0:f1:6a:92:4c:b7:8b:91:
                    e3:83:02:61:c6:b0:1c:17:6a:36:0d:69:31:bc:95:
                    89:5e:ba:ae:60:18:77:f3:6f:b9:b9:e6:ec:11:c1:
                    98:13:26:9d:05:91:94:72:61:eb:a4:5a:07:95:a0:
                    9c:6a:ee:52:56:8b:fe:c6:4c:40:29:97:d5:66:19:
                    95:3b:80:ae:f5:20:36:86:41:0b:cb:00:48:c4:d7:
                    5e:a9:f0:09:58:30:35:4c:36:55:67:63:fa:98:7c:
                    9b:84:20:04:48:fd:ac:22:7e:01:bd:c7:cf:9b:27:
                    20:b6:8b:c7:96:5c:3a:d1:3e:db:a9:d0:8e:a4:fe:
                    9a:c3:58:a5:9f:8e:59:f2:40:f2:af:3a:f7:6f:0c:
                    bd:3a:a3:96:65:4c:76:dd:44:68:a6:d3:59:be:7c:
                    82:90:a2:0e:79:ec:0a:0e:f6:cf:6b:96:c0:b3:c7:
                    a7:30:c2:d9:b7:9f:a5:6c:bd:4d:45:68:bf:7b:28:
                    f6:69:9f:6b:2d:83:d3:be:57:1c:f8:ca:3a:d4:32:
                    73:c0:25:ad:f9:15:86:48:84:88:70:c3:d7:7c:4e:
                    3b:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:9A:1B:AB:9D:AA:AB:BC:75:C1:9C:2B:FF:22:6D:34:D4:8C:76:26
            X509v3 Authority Key Identifier:
                keyid:65:B3:E8:18:1C:3D:A8:D1:D6:41:E8:4A:45:C8:EF:82:39:DD:7E:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/2F69E8C221F011EE8646970F4AD9E6FC/ZbPoGBw9qNHWQehKRcjvgjndfqc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/ZbPoGBw9qNHWQehKRcjvgjndfqc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/2F69E8C221F011EE8646970F4AD9E6FC/ZbPoGBw9qNHWQehKRcjvgjndfqc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:4d:15:fa:be:5a:40:75:1b:0d:f7:0f:cf:d0:f3:cf:db:27:
         dd:0e:67:53:e8:16:da:69:c5:8f:c2:35:cb:a2:6c:f8:6f:65:
         af:ca:25:37:9a:a0:bf:0d:8a:dc:fb:d8:61:42:d7:bd:1a:d5:
         b9:f3:60:f6:20:f3:64:23:04:b3:36:dc:71:fb:32:03:36:e6:
         11:7c:77:ff:7c:51:03:17:e4:02:80:e2:7e:e7:ce:ee:91:ac:
         cd:ca:fa:4e:1e:8c:91:ed:bd:92:9c:fd:f0:5e:e0:5a:81:81:
         4a:fc:77:16:e8:18:0b:a2:36:ad:d5:c8:3a:84:b2:fe:56:1a:
         0d:60:d6:72:3d:bf:e7:92:78:95:06:15:6a:cc:46:8e:da:60:
         56:4e:03:c4:7d:7f:16:c5:55:e1:26:6d:31:c8:72:f2:c5:cd:
         a1:9b:84:fc:31:c6:56:5a:a2:db:3f:b1:bd:4b:3b:ff:0d:33:
         76:6a:d9:1a:1b:c6:2f:d0:b8:ce:8e:95:a7:e8:5b:2e:53:67:
         59:66:b2:5f:be:c7:b1:af:d3:4a:28:0a:f0:ed:94:b5:b1:aa:
         5d:89:50:8e:36:d9:63:ce:e6:06:c4:fb:de:77:b4:cd:e8:5d:
         35:b2:cf:9b:af:e5:96:a6:40:15:e0:08:08:35:0a:81:e3:68:
         73:9a:38:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 04:33:24 2025 by rpki-client