Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft
File:                     l8kOJSEtiHz54d5v3fVRuoEvoTk.mft (raw, json)
Hash identifier:          9K2h+zGqiMvt6mSlE69L/uUMO5kPsBsZj8Fl9EKLL2w=
Subject key identifier:   8F:DD:65:9F:8F:DB:6E:8B:BA:5A:C5:70:F0:41:B9:57:A0:61:E5:94
Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
Certificate issuer:       /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Certificate serial:       09EC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft
Manifest number:          08DE
Signing time:             Mon 27 Jul 2026 02:04:21 +0000
Manifest this update:     Mon 27 Jul 2026 02:04:20 +0000
Manifest next update:     Wed 29 Jul 2026 02:04:20 +0000
Files and hashes:         1: l8kOJSEtiHz54d5v3fVRuoEvoTk.crl (hash: LE7mVL5DqsUV5uDEEhJAiAsv/ARUdpZO5u1aCrbTJ1M=)
                          2: 04FB45606B5611F1A83D0B03CF1D38B0.roa (hash: d1PRoXtN1fAKEcHcs168YQU2HSkHLOxSasfRHV/jKKk=)
                          3: D555ACF47ED111F08EE5E58BDAE4EC9C.roa (hash: 47vFvhPfYF8MRZPiu19cy9fhXJPFVZu9WXQ1eMHjtak=)
                          4: 2136776C877C11F1A490AB14CF1D38B0.roa (hash: pubON2oZ76H5okZr/8fRUpGwb41qtEWSfqIrEZ/TV0A=)
                          5: 31AC1B067F2B11F0A2FC2DE1DAE4EC9C.roa (hash: pJmfeAp3o89ojiARZABIHNF+5KqQANGXnVyfWK3JWAo=)
                          6: BE32DE466DBB11F1AA247ADCCE1D38B0.roa (hash: 5b3c7vYqR7atS3vzaJ2Y4FQf08blNX5S5A3+UjWWiR0=)
                          7: EE4BCA50C51611F0882C7A79DAE4EC9C.roa (hash: QORpqLPUnemyJVfwyKiR9rBTSjXXBwPxprwBhq4ORos=)
                          8: DE2FE726163011F1829CE9EADAE4EC9C.roa (hash: TMIMgwsogkJNyAx0X77xxGocwvE2m5HEfSTcrhrwoyI=)
                          9: E5FC56AE7A4B11F1BC8C2CB9CE1D38B0.roa (hash: jmNdoCzHH4N8uxZsV5Tvcp3NjH/UbPjaffDXeuKhMzI=)
                          10: 37683106C51711F0831FC779DAE4EC9C.roa (hash: X7+3tEI76PBXlAAcgP4WQPX2ONBme8iwLb9ftSScgDo=)
                          11: 4B0FAD8C2AB711F1A5261CD8DAE4EC9C.roa (hash: iDwntjXc0TkUcKq7YPpoYX8y6uqRkFD/EWhYMmqZVT4=)
                          12: FC053F5CAF7A11F09C68E3B1DAE4EC9C.roa (hash: ovkEHwqKLlju8yGU3yNPqm9jMYWfqRxIBEHgStiUby0=)
                          13: CEA072D8776A11EEA49F007D4AD9E6FC.roa (hash: oG1ErKkSbYpP5X6eq2VOONQIy8u5lFGEO9d6IZTGw04=)
                          14: 1BF4F8CC187E11F1BA032D93DAE4EC9C.roa (hash: zXtWle/yOTpKwLGIe5XmsNFjkXiS/vvqgdWG5YsQ/bE=)
                          15: 14DBDD40397F11F18F7D251BCF1D38B0.roa (hash: 7JorfiIlTDbNmduHmYrQZFBXPxFlQKaOmXJt1ogKFiw=)
                          16: B02C377E6B5511F19A208202CF1D38B0.roa (hash: F2uhB6NmUItfbApVcL3nMXYX+kYCGBRMdAMG9hk05zs=)
                          17: E8B4523C187D11F1A5DD0B93DAE4EC9C.roa (hash: N/GBo7sJ9sVz40T3E38ntjv4vl5jXnFQj2Tw1+btscU=)
                          18: 087B5DDA187F11F1B908269BDAE4EC9C.roa (hash: +iSgYQye2OWt8JVvNd+soAvL1h8eN44KQQOxfGUmU6o=)
                          19: DDA7C64A877B11F197D7BD12CF1D38B0.roa (hash: 6gL+K+9dGkRUeonOdhKzs4OV0r70uyaL68e9/JdyV0A=)
                          20: 991B77F8CE8811F08B0D7DCBDAE4EC9C.roa (hash: 4NDnlsPwnLQ0bvJwiU4jMN98KtaytJXKCjFbhCuymzw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 29 Jul 2026 02:04:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2540 (0x9ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367DFA4AF, serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
        Validity
            Not Before: Jul 27 02:04:20 2026 GMT
            Not After : Jul 29 02:04:20 2026 GMT
        Subject: CN=6a66bca5-cb6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f2:44:eb:5c:4c:ba:bf:5c:00:e7:78:12:ac:
                    10:8f:59:1f:38:0f:62:4d:66:29:45:28:0e:78:60:
                    2c:34:94:ec:01:02:ab:1c:e3:7d:9c:eb:3c:a2:a4:
                    8a:78:7b:9c:f6:f9:fb:21:94:f7:f0:37:aa:9f:86:
                    6b:83:01:b1:b9:fe:1a:b7:bd:fd:56:f5:cb:4e:d6:
                    1d:3d:44:4f:36:be:51:d7:da:cc:fd:02:31:fd:65:
                    bb:a8:1d:5e:08:0f:0f:7f:79:3d:e4:3e:f0:75:4b:
                    5c:a7:ff:65:26:b5:90:51:a4:08:41:78:51:af:0f:
                    38:5d:89:2b:df:53:63:d9:d5:6f:bb:2f:27:34:13:
                    1e:71:a8:6b:c2:c2:f8:0c:fa:db:52:f1:6e:d2:f6:
                    1b:aa:c9:b4:25:b2:c1:dd:f9:7c:57:c6:32:fc:f6:
                    96:34:75:3e:12:5d:4e:a6:91:26:6b:0f:9f:29:e9:
                    7f:b2:72:8c:c2:76:e3:a6:54:5a:23:49:c6:c0:ff:
                    31:2a:ec:35:05:96:b1:4e:e9:84:4b:4d:72:55:b0:
                    36:99:9b:05:7b:fa:cc:dc:e3:a8:46:a4:83:66:06:
                    3b:6d:88:6c:0c:9a:ed:ec:42:9a:91:6a:e8:43:5b:
                    be:c3:35:19:1a:b6:19:04:dd:0e:a5:82:2c:3b:97:
                    12:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:DD:65:9F:8F:DB:6E:8B:BA:5A:C5:70:F0:41:B9:57:A0:61:E5:94
            X509v3 Authority Key Identifier:
                keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ce:dd:43:21:47:7c:77:fb:b3:fa:f3:d2:f5:f9:4f:41:18:bc:
         74:4d:31:59:12:d7:6c:a5:c7:7c:cd:2a:70:38:95:88:04:37:
         7d:1a:36:45:af:78:14:aa:08:68:cf:89:92:09:15:6f:6d:52:
         e5:e4:89:c4:12:3f:4b:1a:e0:b7:9a:ae:38:cc:cf:3a:89:d2:
         bd:18:14:80:fc:05:15:47:64:21:d2:6a:07:4c:49:02:f4:1b:
         d4:69:ca:50:50:b1:8d:85:81:76:47:81:39:17:45:8f:22:db:
         ae:34:36:d2:c6:34:72:e6:5c:3d:a5:e9:d3:fc:f1:3b:97:b5:
         77:53:2a:a4:14:ec:b7:20:0b:d5:85:26:bd:b4:1d:65:6d:61:
         7a:24:29:78:09:bc:b8:0b:ea:be:d6:ad:19:2d:89:56:7a:ce:
         f7:59:2f:fa:66:8f:93:cc:a2:83:94:cd:d6:0a:1e:6e:5f:17:
         39:9f:29:65:f6:50:f3:c1:b2:c5:36:98:55:54:ea:0f:f8:c5:
         91:89:39:ae:49:20:e9:c1:1a:23:f3:2b:d5:09:64:eb:ad:26:
         ad:d4:15:c0:84:5a:57:8d:6a:d6:8b:38:fe:29:ea:dd:86:ff:
         10:47:0c:eb:e9:8d:2b:e5:ad:d8:5f:f9:50:89:63:f4:0e:3c:
         e5:ac:66:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 03:24:01 2026 by rpki-client