Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367F26D/3F4041FC70B911E9A7F25D3FF8AEA228/nYezEXqhvXgot91GTXMHa66NzJY.mft
File:                     nYezEXqhvXgot91GTXMHa66NzJY.mft (raw, json)
Hash identifier:          Ec6UpTnY2hYVuITYst+cmrwNgBOwKoZRBADUOBzwTxI=
Subject key identifier:   3A:9C:09:C2:85:39:ED:3D:17:1C:ED:E4:4B:17:E4:F2:24:6F:AC:06
Authority key identifier: 9D:87:B3:11:7A:A1:BD:78:28:B7:DD:46:4D:73:07:6B:AE:8D:CC:96
Certificate issuer:       /CN=F367F26DRI/serialNumber=9D87B3117AA1BD7828B7DD464D73076BAE8DCC96
Certificate serial:       0A41
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/nYezEXqhvXgot91GTXMHa66NzJY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367F26D/3F4041FC70B911E9A7F25D3FF8AEA228/nYezEXqhvXgot91GTXMHa66NzJY.mft
Manifest number:          0A3C
Signing time:             Mon 27 Apr 2026 01:19:57 +0000
Manifest this update:     Mon 27 Apr 2026 01:19:56 +0000
Manifest next update:     Wed 29 Apr 2026 01:19:56 +0000
Files and hashes:         1: nYezEXqhvXgot91GTXMHa66NzJY.crl (hash: GFb+50EbzQ711XI3VNpgwtPKv1+jW9JoQCKZD+8lKpU=)
                          2: 2080E9B0188C11F1AB23ECE6DAE4EC9C.roa (hash: 7+2h/hAR0ZH797eWYPIRfzQR4D387dc0Npd3o5pHyjg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367F26D/3F4041FC70B911E9A7F25D3FF8AEA228/nYezEXqhvXgot91GTXMHa66NzJY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367F26D/3F4041FC70B911E9A7F25D3FF8AEA228/nYezEXqhvXgot91GTXMHa66NzJY.mft
                          rsync://rpki.afrinic.net/repository/ripe/nYezEXqhvXgot91GTXMHa66NzJY.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 29 Apr 2026 00:45:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2625 (0xa41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367F26DRI, serialNumber=9D87B3117AA1BD7828B7DD464D73076BAE8DCC96
        Validity
            Not Before: Apr 27 01:19:56 2026 GMT
            Not After : Apr 29 01:19:56 2026 GMT
        Subject: CN=69eeb9bd-3302
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:20:80:8b:b8:9d:1c:d8:c4:5e:73:5f:47:d2:
                    cd:bd:41:a5:07:07:8a:9e:e0:2b:86:9a:8c:23:7b:
                    d4:66:b3:3f:ca:f1:e7:36:1f:3c:41:5c:36:29:40:
                    54:b9:3c:f4:7e:af:5c:72:35:4c:83:6f:95:96:f6:
                    4c:ec:66:e6:67:ea:f2:b7:a4:fa:71:02:96:6b:e5:
                    56:29:a8:87:d2:32:2d:29:84:b5:a7:90:87:15:d6:
                    0f:d3:7c:c3:7d:45:21:4b:29:ec:a2:0d:76:39:3b:
                    77:ee:5f:25:c5:64:9a:ac:29:44:51:65:6f:17:37:
                    4c:a0:f4:9e:ef:0b:e9:cb:8d:10:ad:41:72:80:66:
                    e7:3f:c1:1c:fa:12:6d:39:77:83:7c:61:56:d7:2b:
                    e0:b1:92:6f:d1:6e:84:6a:70:33:45:43:7d:86:08:
                    e6:53:95:06:4e:97:5e:10:b1:ac:6a:7d:79:29:e0:
                    f7:14:0e:78:59:30:e3:2b:5c:e9:3e:7f:aa:5e:c4:
                    3c:c6:8d:02:08:f3:44:d9:bc:db:12:77:f8:e1:99:
                    b4:db:63:c0:e4:64:be:5c:56:c0:70:27:45:3c:5f:
                    5c:48:26:1a:db:48:ce:f0:5e:4e:30:09:6c:94:e9:
                    25:af:f7:8f:7f:9f:44:31:6a:12:26:55:87:36:c3:
                    54:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:9C:09:C2:85:39:ED:3D:17:1C:ED:E4:4B:17:E4:F2:24:6F:AC:06
            X509v3 Authority Key Identifier:
                keyid:9D:87:B3:11:7A:A1:BD:78:28:B7:DD:46:4D:73:07:6B:AE:8D:CC:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367F26D/3F4041FC70B911E9A7F25D3FF8AEA228/nYezEXqhvXgot91GTXMHa66NzJY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/nYezEXqhvXgot91GTXMHa66NzJY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367F26D/3F4041FC70B911E9A7F25D3FF8AEA228/nYezEXqhvXgot91GTXMHa66NzJY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:25:4d:49:ed:42:2d:cd:c9:c7:37:54:3e:c3:4f:af:45:36:
         94:68:00:c0:9a:ff:1b:5c:1a:b8:f6:14:55:c7:62:fc:2c:71:
         5b:a9:8b:4e:56:f4:c6:68:71:aa:24:d6:5c:b6:83:eb:e4:86:
         03:3d:23:4f:10:7f:9d:93:05:4b:a4:2d:f2:78:af:bd:5c:e9:
         25:0b:95:63:5f:83:de:e0:c3:ab:6f:68:f9:2f:1c:e7:ef:43:
         84:fe:02:ef:15:39:3f:8f:d7:fb:8e:28:e8:3a:c0:d0:a1:9c:
         b7:e7:da:13:26:46:bd:4e:1c:d5:07:0e:6f:07:77:d7:ea:ab:
         dc:f2:54:73:d6:8f:51:42:ff:bf:0d:89:d1:85:29:56:02:02:
         af:1b:82:12:4d:04:ae:80:4e:ed:63:cd:5c:87:69:d0:a9:05:
         a3:fd:b6:68:ed:13:19:39:78:eb:0d:60:21:f4:dd:83:3b:c1:
         65:7e:3f:26:98:ed:32:22:68:8b:ee:ba:aa:7a:48:f5:7d:1f:
         22:c9:eb:a3:83:fb:69:77:4f:65:2c:e3:4f:78:d4:c9:c0:78:
         02:ff:4b:70:a5:a6:33:4f:ce:78:03:5b:c3:70:94:15:2b:c4:
         5f:cd:58:3b:5c:fb:ad:03:e3:40:ad:0b:0c:5c:0e:db:c9:49:
         b3:02:11:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 11:58:22 2026 by rpki-client