Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F367F26D/3F4041FC70B911E9A7F25D3FF8AEA228/nYezEXqhvXgot91GTXMHa66NzJY.mft
File:                     nYezEXqhvXgot91GTXMHa66NzJY.mft (raw, json)
Hash identifier:          sErSlZFMU/UaMWClwUAKf3brBZc0mke6L+Scd2IZres=
Subject key identifier:   C6:EE:E6:80:4C:3F:76:E0:54:54:BC:44:8D:74:40:B1:AA:48:3A:60
Authority key identifier: 9D:87:B3:11:7A:A1:BD:78:28:B7:DD:46:4D:73:07:6B:AE:8D:CC:96
Certificate issuer:       /CN=F367F26DRI/serialNumber=9D87B3117AA1BD7828B7DD464D73076BAE8DCC96
Certificate serial:       0AF8
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/nYezEXqhvXgot91GTXMHa66NzJY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367F26D/3F4041FC70B911E9A7F25D3FF8AEA228/nYezEXqhvXgot91GTXMHa66NzJY.mft
Manifest number:          0AF3
Signing time:             Tue 27 Oct 2026 01:18:57 +0000
Manifest this update:     Tue 27 Oct 2026 01:18:57 +0000
Manifest next update:     Thu 29 Oct 2026 01:18:57 +0000
Files and hashes:         1: nYezEXqhvXgot91GTXMHa66NzJY.crl (hash: XpGfUDIP2QTGRtq/8bR+v8fgEW4rpenMs4kNmMo7kC8=)
                          2: 2080E9B0188C11F1AB23ECE6DAE4EC9C.roa (hash: 7+2h/hAR0ZH797eWYPIRfzQR4D387dc0Npd3o5pHyjg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367F26D/3F4041FC70B911E9A7F25D3FF8AEA228/nYezEXqhvXgot91GTXMHa66NzJY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367F26D/3F4041FC70B911E9A7F25D3FF8AEA228/nYezEXqhvXgot91GTXMHa66NzJY.mft
                          rsync://rpki.afrinic.net/repository/ripe/nYezEXqhvXgot91GTXMHa66NzJY.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 29 Oct 2026 00:45:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2808 (0xaf8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367F26DRI, serialNumber=9D87B3117AA1BD7828B7DD464D73076BAE8DCC96
        Validity
            Not Before: Oct 27 01:18:57 2026 GMT
            Not After : Oct 29 01:18:57 2026 GMT
        Subject: CN=6adffc01-5535
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:bc:0e:49:b6:b4:df:94:53:a3:5b:1b:ca:cd:
                    d7:84:a6:5e:8d:b1:34:27:4f:c3:82:fd:76:a3:02:
                    0e:09:ed:b2:2b:fa:c0:ed:55:e1:b1:2a:f9:38:8d:
                    2b:32:73:00:05:f8:eb:7a:2d:d6:d5:5f:37:cc:91:
                    75:e7:28:e1:72:78:1d:b0:eb:73:b4:ae:ea:8e:6f:
                    f3:a9:a3:3a:d6:ca:a0:a9:82:4f:75:21:a9:8b:79:
                    cf:3b:e7:ca:ad:5b:18:60:69:fa:e0:7c:93:3b:b6:
                    a6:06:13:98:5b:98:cd:56:a9:b1:f2:77:c7:94:c1:
                    68:59:d0:2a:75:19:43:2c:8f:a0:0b:87:10:5f:76:
                    f0:ae:f6:fb:cc:b5:cd:a3:5b:41:8e:d3:da:ac:13:
                    da:08:0e:8e:a1:31:af:8e:60:70:e9:58:83:a0:db:
                    42:38:3b:bf:f3:3b:a5:a1:6d:0d:fc:8d:e4:c7:6b:
                    3a:fe:ce:5e:98:a4:82:6d:78:a0:66:1c:41:04:98:
                    51:aa:22:9f:b4:7a:0e:1b:ad:57:ac:01:2a:ba:c5:
                    89:bc:66:6a:25:83:be:53:82:67:e9:3c:22:b8:c6:
                    04:43:dd:f7:ed:1a:6c:f0:b6:ba:ad:6f:a4:24:cb:
                    fa:3e:63:c4:0d:83:23:dc:ed:f0:ee:ac:45:3b:ed:
                    1f:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:EE:E6:80:4C:3F:76:E0:54:54:BC:44:8D:74:40:B1:AA:48:3A:60
            X509v3 Authority Key Identifier:
                keyid:9D:87:B3:11:7A:A1:BD:78:28:B7:DD:46:4D:73:07:6B:AE:8D:CC:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367F26D/3F4041FC70B911E9A7F25D3FF8AEA228/nYezEXqhvXgot91GTXMHa66NzJY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/nYezEXqhvXgot91GTXMHa66NzJY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367F26D/3F4041FC70B911E9A7F25D3FF8AEA228/nYezEXqhvXgot91GTXMHa66NzJY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:ac:09:ed:ed:c3:f0:9a:80:8c:d9:dc:ed:11:30:9d:f3:2d:
         e5:b8:26:33:86:fa:94:e5:c5:a1:69:58:c8:f9:1a:b5:72:5c:
         ce:b9:93:e3:5f:21:2b:a3:c4:a0:c8:49:cd:b8:a7:3b:b0:81:
         8f:96:c1:30:30:93:6c:88:12:c6:7f:90:9e:08:b0:4e:e0:14:
         f9:7a:20:ec:72:f9:c1:a3:3c:d6:90:3c:ed:32:ab:44:f8:07:
         3f:24:1d:fd:e5:63:7b:44:55:20:30:d2:4b:6c:3c:4a:38:32:
         13:d2:39:f0:1f:e4:f8:11:bc:66:15:d0:88:b3:1b:8d:e0:4d:
         35:f8:58:f0:fe:6f:f3:9f:fb:17:d5:30:69:f3:3d:0f:a9:66:
         f8:67:1e:c1:3a:d1:ae:1d:fd:69:66:1d:c2:3e:17:e5:74:f4:
         a1:6c:38:3a:9f:58:05:69:11:4d:3b:52:1f:09:0a:c0:27:dc:
         c0:5f:85:db:57:e0:fa:0d:b6:d7:90:d1:75:b7:94:c4:bb:ec:
         a2:1e:d7:d7:1d:6d:cc:7f:cd:82:11:e0:07:87:21:b5:93:61:
         54:cb:20:67:97:c2:9e:63:20:7d:31:ac:23:b8:bb:44:bd:75:
         6a:00:58:86:b9:1d:71:87:65:71:48:d4:b8:34:82:66:65:39:
         3b:fd:31:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----