Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36825D0/E93D27AAC7C411EC906F94DBF1222468/IhRVkFuxmsTjjt3avWyqg1KbNE8.mft
File:                     IhRVkFuxmsTjjt3avWyqg1KbNE8.mft (raw, json)
Hash identifier:          Vu1jxUPAxrJuNZ1CMgqhcOB0h9gQZP5xLEG6p1ss7zw=
Subject key identifier:   3E:31:F8:51:67:CA:14:3F:BC:D5:BC:87:E6:CB:9B:13:AA:74:AB:0F
Authority key identifier: 22:14:55:90:5B:B1:9A:C4:E3:8E:DD:DA:BD:6C:AA:83:52:9B:34:4F
Certificate issuer:       /CN=F36825D0AF/serialNumber=221455905BB19AC4E38EDDDABD6CAA83529B344F
Certificate serial:       069A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/IhRVkFuxmsTjjt3avWyqg1KbNE8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36825D0/E93D27AAC7C411EC906F94DBF1222468/IhRVkFuxmsTjjt3avWyqg1KbNE8.mft
Manifest number:          0698
Signing time:             Mon 26 Oct 2026 02:41:41 +0000
Manifest this update:     Mon 26 Oct 2026 02:41:41 +0000
Manifest next update:     Wed 28 Oct 2026 02:41:41 +0000
Files and hashes:         1: IhRVkFuxmsTjjt3avWyqg1KbNE8.crl (hash: 0d/TevmtpHRNaM9jkQumyJz+jQu1NKnDAkGcrko2CIk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36825D0/E93D27AAC7C411EC906F94DBF1222468/IhRVkFuxmsTjjt3avWyqg1KbNE8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36825D0/E93D27AAC7C411EC906F94DBF1222468/IhRVkFuxmsTjjt3avWyqg1KbNE8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/IhRVkFuxmsTjjt3avWyqg1KbNE8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 28 Oct 2026 02:41:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1690 (0x69a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36825D0AF, serialNumber=221455905BB19AC4E38EDDDABD6CAA83529B344F
        Validity
            Not Before: Oct 26 02:41:41 2026 GMT
            Not After : Oct 28 02:41:41 2026 GMT
        Subject: CN=6adebde5-81ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:b3:56:4f:c7:67:4b:d8:f4:a5:c1:bf:92:7a:
                    69:26:5e:d2:af:cb:9c:40:7a:38:fc:06:c7:04:fb:
                    62:b4:2f:ea:ea:b1:6a:85:9e:5f:56:df:29:0a:9b:
                    5c:c7:de:99:23:fc:cc:5b:ed:41:7b:55:49:a6:ac:
                    4b:64:11:87:cc:1a:c5:a5:2f:a4:1c:09:a0:fc:1a:
                    37:7a:5a:4a:4c:23:fb:dd:d1:91:bc:08:4d:6d:6a:
                    46:cf:98:ca:04:48:09:e6:f1:1c:24:0d:18:92:40:
                    7c:d3:17:f0:79:76:a2:b1:3b:8d:85:d1:f7:b7:62:
                    b5:01:09:f7:2a:1f:44:88:d8:91:fb:d6:71:e3:47:
                    e1:b2:97:99:0e:ea:66:d2:c1:b0:05:fd:d4:b3:cb:
                    8d:3f:ef:96:8d:66:0d:81:80:84:0b:97:ba:3b:12:
                    07:96:f5:55:27:42:b9:5f:45:1b:9d:62:35:f1:e2:
                    df:5d:92:ce:ac:16:9d:b1:2d:ca:b1:55:df:90:fc:
                    7c:3a:d5:67:7b:59:13:07:bd:2c:5a:7a:de:45:62:
                    b6:ed:e7:9d:2d:6a:2d:ca:2e:39:dd:b2:4d:d7:e7:
                    ce:16:bb:9c:ad:cc:59:45:49:04:35:00:b8:2f:a4:
                    b2:56:63:28:b0:b0:d6:ff:29:b2:1c:25:75:89:3b:
                    33:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:31:F8:51:67:CA:14:3F:BC:D5:BC:87:E6:CB:9B:13:AA:74:AB:0F
            X509v3 Authority Key Identifier:
                keyid:22:14:55:90:5B:B1:9A:C4:E3:8E:DD:DA:BD:6C:AA:83:52:9B:34:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36825D0/E93D27AAC7C411EC906F94DBF1222468/IhRVkFuxmsTjjt3avWyqg1KbNE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/IhRVkFuxmsTjjt3avWyqg1KbNE8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36825D0/E93D27AAC7C411EC906F94DBF1222468/IhRVkFuxmsTjjt3avWyqg1KbNE8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:03:fb:d8:a2:97:bd:dc:13:9f:1e:ca:d9:7b:54:41:9e:84:
         b7:12:9c:93:20:40:20:66:41:68:76:48:43:46:1d:dc:e1:f2:
         52:4f:47:89:63:c0:f7:c2:80:18:0a:40:91:4d:56:a3:d3:6a:
         dc:59:f1:be:fb:5b:df:81:bc:d6:d9:fd:39:01:00:7d:7c:4f:
         3c:34:dd:ec:1d:4a:b1:4c:11:c0:56:f0:d1:97:66:90:ad:ac:
         90:42:6d:19:21:ea:a7:52:7a:e5:7b:3c:91:2e:4f:7b:3f:f0:
         26:27:fc:7a:a2:cc:23:e0:fc:0d:7a:6e:d8:27:93:2e:e5:02:
         08:83:25:50:0a:d2:04:8b:1f:87:7f:59:34:dc:31:5e:e2:16:
         a9:00:44:52:5c:97:4e:ab:8d:a3:1b:73:28:2a:a0:f8:2f:03:
         ed:22:7a:b9:84:56:82:45:5e:fc:e9:f6:b6:d8:0a:b0:39:00:
         d7:42:37:cc:97:b0:d3:5a:dc:c2:75:01:7a:a6:9d:8c:5b:7d:
         83:57:b5:b7:00:b3:4c:30:d6:44:1d:d3:c4:e2:a1:47:45:0c:
         9f:e3:46:77:69:16:0a:c0:71:be:47:ca:c2:0b:1a:9f:62:58:
         65:8f:7b:77:0e:d9:2d:fd:56:d6:3f:85:56:90:e7:a4:28:6e:
         55:de:55:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----