Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367F26D/3F4041FC70B911E9A7F25D3FF8AEA228/nYezEXqhvXgot91GTXMHa66NzJY.mft
File:                     nYezEXqhvXgot91GTXMHa66NzJY.mft (raw, json)
Hash identifier:          Lrjrajw2/Ag/O3tkTiyq8RK0Et6eENKFQNufkAf8C4g=
Subject key identifier:   A9:C0:F2:7E:A9:40:BF:7F:F1:E6:B8:4B:5A:0E:88:7C:02:06:A0:42
Authority key identifier: 9D:87:B3:11:7A:A1:BD:78:28:B7:DD:46:4D:73:07:6B:AE:8D:CC:96
Certificate issuer:       /CN=F367F26DRI/serialNumber=9D87B3117AA1BD7828B7DD464D73076BAE8DCC96
Certificate serial:       08F6
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/nYezEXqhvXgot91GTXMHa66NzJY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367F26D/3F4041FC70B911E9A7F25D3FF8AEA228/nYezEXqhvXgot91GTXMHa66NzJY.mft
Manifest number:          08F2
Signing time:             Tue 10 Jun 2025 01:22:54 +0000
Manifest this update:     Tue 10 Jun 2025 01:22:53 +0000
Manifest next update:     Thu 12 Jun 2025 01:22:53 +0000
Files and hashes:         1: nYezEXqhvXgot91GTXMHa66NzJY.crl (hash: X9g2KAb3A7qZjRMGaddtrXFht9Yb251JBaph2oAUdzw=)
                          2: D327BE38980311EE8CAFD532D25BE465.roa (hash: S6gTdluMy3bxrOQWOaTfSvtXEYSyREhvKUaAZL3cXu4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367F26D/3F4041FC70B911E9A7F25D3FF8AEA228/nYezEXqhvXgot91GTXMHa66NzJY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367F26D/3F4041FC70B911E9A7F25D3FF8AEA228/nYezEXqhvXgot91GTXMHa66NzJY.mft
                          rsync://rpki.afrinic.net/repository/ripe/nYezEXqhvXgot91GTXMHa66NzJY.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 12 Jun 2025 00:45:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2294 (0x8f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367F26DRI, serialNumber=9D87B3117AA1BD7828B7DD464D73076BAE8DCC96
        Validity
            Not Before: Jun 10 01:22:53 2025 GMT
            Not After : Jun 12 01:22:53 2025 GMT
        Subject: CN=684788ee-77b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:90:8a:7c:a1:c0:43:fd:8a:be:c2:b6:6c:b3:
                    b9:ba:68:a0:05:f5:58:f3:78:35:44:3e:91:77:d4:
                    69:1a:51:fd:e8:5a:de:7f:62:ce:7b:89:bd:81:ae:
                    b3:b0:3d:66:9c:3f:03:f0:3e:76:4b:b3:22:ae:22:
                    33:78:49:3e:ef:98:2c:53:37:68:81:48:33:fb:bf:
                    52:2e:bb:c4:b5:57:80:86:6a:2a:cb:fc:50:1a:40:
                    e1:9a:e1:5b:40:a0:3f:3f:25:58:bd:89:f5:50:b2:
                    9c:9f:4b:bc:18:c4:6a:55:f0:d0:5c:e0:a7:5e:8a:
                    a8:82:48:a0:67:4d:b6:7e:b6:aa:09:53:1a:30:78:
                    41:b4:d2:57:15:f3:67:e7:5e:59:33:a8:e4:7a:9b:
                    93:84:04:fc:93:4b:44:7d:f8:d8:0d:49:09:12:3a:
                    e6:66:ba:d0:10:f8:69:6b:95:b7:7c:6c:f0:a9:1b:
                    b2:22:00:f4:a3:9f:70:f1:84:52:6d:a7:05:0a:7c:
                    81:40:b1:99:5d:68:22:12:d1:74:c9:b9:cb:79:02:
                    bb:0c:3f:e5:ab:cc:10:7b:1c:50:22:bd:c3:6b:2c:
                    b3:10:0f:72:86:e6:77:23:14:e6:aa:f2:88:33:b5:
                    53:a1:ae:e1:66:da:92:5e:9c:01:3f:f1:d3:00:3c:
                    a2:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:C0:F2:7E:A9:40:BF:7F:F1:E6:B8:4B:5A:0E:88:7C:02:06:A0:42
            X509v3 Authority Key Identifier:
                keyid:9D:87:B3:11:7A:A1:BD:78:28:B7:DD:46:4D:73:07:6B:AE:8D:CC:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367F26D/3F4041FC70B911E9A7F25D3FF8AEA228/nYezEXqhvXgot91GTXMHa66NzJY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/nYezEXqhvXgot91GTXMHa66NzJY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367F26D/3F4041FC70B911E9A7F25D3FF8AEA228/nYezEXqhvXgot91GTXMHa66NzJY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:f6:c3:28:ce:46:64:0b:a4:92:71:fa:c7:80:3f:43:1a:7a:
         50:3c:cd:b4:ca:ee:09:d3:86:5a:88:03:3e:34:68:47:1b:b1:
         54:67:2e:68:ac:5f:94:79:fb:4b:9e:40:a7:f7:7c:9c:b5:6a:
         42:d0:3b:4f:7f:21:b9:42:37:0b:92:fe:fd:0f:17:66:98:46:
         74:3e:cc:15:ae:9f:30:37:68:c2:31:db:9c:13:ac:ae:1a:b2:
         5a:a3:66:db:92:ed:4f:be:f0:40:65:e2:3f:d0:65:e5:d9:fd:
         84:4a:e1:11:81:ce:fb:bf:d8:78:d3:04:a1:97:93:45:4d:0d:
         9b:2e:07:81:04:86:15:6e:b4:b4:5b:a3:9f:66:95:30:33:47:
         58:5a:0b:1d:db:62:93:73:3d:2c:56:d2:13:66:6c:61:91:77:
         e2:88:ea:89:8a:99:a0:c9:55:e9:d0:c0:c4:7a:f3:95:69:2a:
         fc:65:6e:f1:f8:ef:2b:9f:da:94:80:8d:c2:4c:85:b7:7c:cb:
         2d:42:bf:31:f3:2b:d9:39:67:f3:c7:15:cc:e1:c3:1b:3b:07:
         1d:b2:79:ac:dd:c4:e8:1b:72:91:a4:df:13:cc:56:b1:50:58:
         94:90:20:a8:1d:87:6d:40:56:ee:40:7a:83:65:2b:e6:7f:28:
         e7:7b:34:f4
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICCPYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
N0YyNkRSSTExMC8GA1UEBRMoOUQ4N0IzMTE3QUExQkQ3ODI4QjdERDQ2NEQ3MzA3
NkJBRThEQ0M5NjAeFw0yNTA2MTAwMTIyNTNaFw0yNTA2MTIwMTIyNTNaMBgxFjAU
BgNVBAMTDTY4NDc4OGVlLTc3YjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDCkIp8ocBD/Yq+wrZss7m6aKAF9VjzeDVEPpF31GkaUf3oWt5/Ys57ib2B
rrOwPWacPwPwPnZLsyKuIjN4ST7vmCxTN2iBSDP7v1Iuu8S1V4CGairL/FAaQOGa
4VtAoD8/JVi9ifVQspyfS7wYxGpV8NBc4KdeiqiCSKBnTbZ+tqoJUxoweEG00lcV
82fnXlkzqOR6m5OEBPyTS0R9+NgNSQkSOuZmutAQ+Glrlbd8bPCpG7IiAPSjn3Dx
hFJtpwUKfIFAsZldaCIS0XTJuct5ArsMP+WrzBB7HFAivcNrLLMQD3KG5ncjFOaq
8ogztVOhruFm2pJenAE/8dMAPKIdAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUqcDy
fqlAv3/x5rhLWg6IfAIGoEIwHwYDVR0jBBgwFoAUnYezEXqhvXgot91GTXMHa66N
zJYwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjdGMjZELzNGNDA0MUZDNzBCOTExRTlBN0YyNUQzRkY4QUVBMjI4L25ZZXpF
WHFodlhnb3Q5MUdUWE1IYTY2TnpKWS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9yaXBl
L25ZZXpFWHFodlhnb3Q5MUdUWE1IYTY2TnpKWS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2N0YyNkQvM0Y0MDQxRkM3MEI5MTFFOUE3RjI1RDNGRjhBRUEy
MjgvblllekVYcWh2WGdvdDkxR1RYTUhhNjZOekpZLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAH9sMozkZkC6SScfrHgD9DGnpQPM20yu4J
04ZaiAM+NGhHG7FUZy5orF+UeftLnkCn93yctWpC0DtPfyG5QjcLkv79DxdmmEZ0
PswVrp8wN2jCMducE6yuGrJao2bbku1PvvBAZeI/0GXl2f2ESuERgc77v9h40wSh
l5NFTQ2bLgeBBIYVbrS0W6OfZpUwM0dYWgsd22KTcz0sVtITZmxhkXfiiOqJipmg
yVXp0MDEevOVaSr8ZW7x+O8rn9qUgI3CTIW3fMstQr8x8yvZOWfzxxXM4cMbOwcd
snms3cToG3KRpN8TzFaxUFiUkCCoHYdtQFbuQHqDZSvmfyjnezT0
-----END CERTIFICATE-----