Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3680C14/7707FAD65AE011E69FAE5E32F8AEA228/JlfA2qREzLm--MKoWGoOdJzqm1I.mft
File:                     JlfA2qREzLm--MKoWGoOdJzqm1I.mft (raw, json)
Hash identifier:          s0LljfK0nKjp1AQxnsIHS+xz6ZOoGV2KXaqiy9yQCxM=
Subject key identifier:   34:22:B5:1E:15:67:0A:4C:C9:CF:DC:D7:CC:1D:19:ED:48:4B:15:C3
Authority key identifier: 26:57:C0:DA:A4:44:CC:B9:BE:F8:C2:A8:58:6A:0E:74:9C:EA:9B:52
Certificate issuer:       /CN=F3680C14AR/serialNumber=2657C0DAA444CCB9BEF8C2A8586A0E749CEA9B52
Certificate serial:       0D1A
Authority info access:    rsync://rpki.afrinic.net/repository/arin/JlfA2qREzLm--MKoWGoOdJzqm1I.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3680C14/7707FAD65AE011E69FAE5E32F8AEA228/JlfA2qREzLm--MKoWGoOdJzqm1I.mft
Manifest number:          0D17
Signing time:             Sun 27 Jul 2025 01:04:15 +0000
Manifest this update:     Sun 27 Jul 2025 01:04:15 +0000
Manifest next update:     Tue 29 Jul 2025 01:04:15 +0000
Files and hashes:         1: JlfA2qREzLm--MKoWGoOdJzqm1I.crl (hash: Svfuch4i/xcen106YcGWxy64Ojj4smbI0lqMaMjyvFk=)
                          2: F4602E7A7D7A11EFAF08EC65762E951A.roa (hash: haY/GuoRZps/E0T0DW+Xq+UzSC93SwDzI9EXCFdllhw=)
                          3: B72B3B7459DA11EC8F6187BD5A40D577.roa (hash: lX5w/V9IxiCR5OIdQ46QZvuvbFy5St8N0ELixEctQHI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3680C14/7707FAD65AE011E69FAE5E32F8AEA228/JlfA2qREzLm--MKoWGoOdJzqm1I.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3680C14/7707FAD65AE011E69FAE5E32F8AEA228/JlfA2qREzLm--MKoWGoOdJzqm1I.mft
                          rsync://rpki.afrinic.net/repository/arin/JlfA2qREzLm--MKoWGoOdJzqm1I.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Jul 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3354 (0xd1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3680C14AR, serialNumber=2657C0DAA444CCB9BEF8C2A8586A0E749CEA9B52
        Validity
            Not Before: Jul 27 01:04:15 2025 GMT
            Not After : Jul 29 01:04:15 2025 GMT
        Subject: CN=68857b0f-d51d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:68:13:c0:73:8c:25:b7:b8:ad:5a:8d:f0:2b:
                    56:66:6e:4d:fb:9d:06:9c:13:f9:09:be:96:d6:a1:
                    a2:cc:b2:c5:01:09:0f:6b:e0:d8:80:ef:9e:70:29:
                    5b:20:6d:f3:62:d1:77:4a:f7:10:af:2f:8b:ea:8f:
                    0c:6b:02:4c:af:17:b6:f8:a6:26:50:d4:de:c7:78:
                    35:06:55:75:ca:60:e6:7c:07:00:51:b2:61:36:3f:
                    72:94:b9:97:b5:d8:b2:e3:b6:88:a7:08:0f:4b:1e:
                    41:64:4e:e2:46:58:10:8a:96:48:0e:55:0b:5f:95:
                    ef:c1:7f:af:09:7b:32:81:a6:aa:b1:17:eb:41:24:
                    69:88:9d:fd:d8:90:cb:ac:ac:60:70:2b:50:09:d2:
                    71:92:38:6a:79:45:f2:43:cd:e3:91:61:1e:d4:af:
                    8b:a3:e7:11:54:01:7f:e3:cf:9b:47:d0:09:6e:8e:
                    fa:f9:db:d1:58:b3:6d:37:e8:f0:92:50:7c:83:d8:
                    08:f9:3e:bc:cf:0c:f3:73:af:75:de:a0:f2:08:03:
                    7e:8e:f9:48:06:ba:47:fe:b2:e9:80:08:df:8c:ba:
                    25:d7:3d:dd:94:5e:55:f9:59:41:6c:ff:70:bf:d2:
                    74:d7:22:a0:92:65:a7:9d:74:3c:f6:7a:d6:e5:0f:
                    3d:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:22:B5:1E:15:67:0A:4C:C9:CF:DC:D7:CC:1D:19:ED:48:4B:15:C3
            X509v3 Authority Key Identifier:
                keyid:26:57:C0:DA:A4:44:CC:B9:BE:F8:C2:A8:58:6A:0E:74:9C:EA:9B:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3680C14/7707FAD65AE011E69FAE5E32F8AEA228/JlfA2qREzLm--MKoWGoOdJzqm1I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/JlfA2qREzLm--MKoWGoOdJzqm1I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3680C14/7707FAD65AE011E69FAE5E32F8AEA228/JlfA2qREzLm--MKoWGoOdJzqm1I.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:d6:5f:b0:9e:04:f2:de:0b:17:a4:c5:53:f6:8f:1e:cb:f7:
         54:b7:08:64:de:b4:df:91:95:11:b9:83:00:f1:e3:28:8e:14:
         73:02:36:a8:8e:fd:3d:e0:3f:1e:1e:13:ff:f6:b2:f8:d7:03:
         3c:d4:89:8e:e0:14:00:c7:d7:95:cc:db:e0:89:6c:27:05:cb:
         01:85:aa:53:90:13:29:ca:ba:60:c5:6a:4a:d5:d1:0f:02:de:
         d6:2e:fb:ff:d2:cf:a4:90:31:b1:ef:9b:bc:50:ff:fd:63:55:
         94:b9:33:8a:47:ee:d9:32:a4:24:a4:ec:3b:eb:22:d6:8d:09:
         c4:48:f8:62:b5:34:a4:72:4d:00:01:27:d5:b4:fe:8f:9a:01:
         6d:ad:1b:86:f4:f4:b4:d8:59:0d:5d:ff:6e:36:04:18:47:1c:
         34:1e:bd:c2:3c:c0:b0:cf:05:4c:13:00:a1:0f:23:98:ea:90:
         db:d9:dd:d6:d7:56:9c:83:dc:81:82:38:5f:94:4c:70:e0:af:
         95:cf:72:42:1c:5e:98:29:d3:98:c4:a6:88:cf:e9:86:6f:0f:
         18:ed:30:17:d4:f2:b8:96:7e:6c:36:86:ce:89:92:10:24:90:
         84:9b:5a:7f:55:8d:b0:fe:7e:6d:25:46:0a:58:3c:ab:2a:04:
         4a:7c:7e:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:20:35 2025 by rpki-client