Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3695CC5/F5A81D42211B11ECBC50E22BD8A014CE/48LJS_VpO0HwWh1WV9GnhLXVcmE.mft
File:                     48LJS_VpO0HwWh1WV9GnhLXVcmE.mft (raw, json)
Hash identifier:          aaioNVonLhrActSMhsKkt/d8eIA3jrfKpK8Uf19oot8=
Subject key identifier:   F5:22:75:E7:56:90:77:26:4E:9D:20:F6:7B:55:9A:0B:27:76:88:B0
Authority key identifier: E3:C2:C9:4B:F5:69:3B:41:F0:5A:1D:56:57:D1:A7:84:B5:D5:72:61
Certificate issuer:       /CN=F3695CC5RI/serialNumber=E3C2C94BF5693B41F05A1D5657D1A784B5D57261
Certificate serial:       0684
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/48LJS_VpO0HwWh1WV9GnhLXVcmE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3695CC5/F5A81D42211B11ECBC50E22BD8A014CE/48LJS_VpO0HwWh1WV9GnhLXVcmE.mft
Manifest number:          0683
Signing time:             Fri 13 Mar 2026 02:09:41 +0000
Manifest this update:     Fri 13 Mar 2026 02:09:40 +0000
Manifest next update:     Sun 15 Mar 2026 02:09:40 +0000
Files and hashes:         1: 48LJS_VpO0HwWh1WV9GnhLXVcmE.crl (hash: FKQObFQhw9vXM9AT9u1TE8IzS8pPhYKop+6ys0jwgXg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3695CC5/F5A81D42211B11ECBC50E22BD8A014CE/48LJS_VpO0HwWh1WV9GnhLXVcmE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3695CC5/F5A81D42211B11ECBC50E22BD8A014CE/48LJS_VpO0HwWh1WV9GnhLXVcmE.mft
                          rsync://rpki.afrinic.net/repository/ripe/48LJS_VpO0HwWh1WV9GnhLXVcmE.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 15 Mar 2026 00:45:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1668 (0x684)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3695CC5RI, serialNumber=E3C2C94BF5693B41F05A1D5657D1A784B5D57261
        Validity
            Not Before: Mar 13 02:09:40 2026 GMT
            Not After : Mar 15 02:09:40 2026 GMT
        Subject: CN=69b371e5-54ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:16:76:25:fc:a4:62:27:c3:35:23:16:81:5e:
                    9f:65:d4:9d:ea:80:f3:db:16:a7:a3:cf:6f:b8:13:
                    85:61:6a:b0:9b:0f:73:d2:5d:2d:7e:e2:02:2a:e1:
                    71:8e:f1:17:b5:a9:ba:3c:a8:17:ae:d8:33:7a:9a:
                    73:ba:10:35:6c:d3:ff:23:8d:78:e6:c1:29:49:d8:
                    00:59:57:83:9d:e0:d9:e9:3a:cb:9c:76:e9:39:28:
                    52:95:c2:22:d5:9b:ed:58:a7:24:d3:b5:c4:ec:ae:
                    51:12:fa:6e:21:56:6c:a2:7b:12:be:44:55:8d:90:
                    c0:c0:dc:36:9a:f7:1c:00:b5:34:84:53:c9:99:28:
                    04:e8:07:e0:94:ec:52:29:2a:21:df:d0:77:91:f4:
                    25:ea:ee:30:9f:8e:07:f2:cb:03:57:8b:9d:9a:53:
                    70:97:5c:44:68:f1:b9:a7:95:3a:b9:08:9d:ee:fd:
                    df:18:e7:b6:1a:ef:bd:5a:25:19:0c:2f:44:8d:ff:
                    b8:e4:2e:69:aa:70:46:a3:95:86:02:2b:f6:07:75:
                    64:fd:3c:0f:2d:28:58:55:7d:2c:cf:d0:25:b3:d3:
                    f7:3d:51:fd:43:3b:dc:a3:61:3e:a4:ed:47:3a:c1:
                    4c:d4:57:41:7e:5b:6f:95:bd:44:fe:23:3b:93:a0:
                    89:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:22:75:E7:56:90:77:26:4E:9D:20:F6:7B:55:9A:0B:27:76:88:B0
            X509v3 Authority Key Identifier:
                keyid:E3:C2:C9:4B:F5:69:3B:41:F0:5A:1D:56:57:D1:A7:84:B5:D5:72:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3695CC5/F5A81D42211B11ECBC50E22BD8A014CE/48LJS_VpO0HwWh1WV9GnhLXVcmE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/48LJS_VpO0HwWh1WV9GnhLXVcmE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3695CC5/F5A81D42211B11ECBC50E22BD8A014CE/48LJS_VpO0HwWh1WV9GnhLXVcmE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:c6:6f:77:94:3e:1a:52:0b:d7:d9:bd:c4:aa:6e:ea:21:c0:
         73:a2:51:c8:83:7e:83:23:d0:74:6c:65:41:ac:b7:e3:e5:2f:
         3e:f6:39:3c:5d:b4:8e:70:64:6f:c0:3a:13:09:81:0c:f9:89:
         4b:96:b0:79:65:2a:06:f5:e3:aa:f4:e2:eb:c2:79:33:30:d1:
         61:67:1e:b1:cc:2d:01:30:71:8c:f2:c5:01:83:34:5b:ea:d8:
         fc:cc:ad:3a:52:cb:8c:42:22:51:ea:ed:d3:6f:3c:29:9a:3b:
         5c:91:28:06:1c:01:97:57:2e:63:c2:7f:c4:4b:16:24:b8:b9:
         f7:88:6b:fd:35:f2:df:a5:77:2f:83:77:58:f4:82:02:5f:fe:
         03:03:67:3f:52:91:69:53:82:b5:9f:23:0c:a1:9f:cf:32:9a:
         08:5c:bd:ca:59:de:b1:5f:7f:fe:3e:e0:ab:4f:aa:ef:85:6f:
         c7:8e:36:06:3b:d3:be:bd:bf:92:62:58:ab:98:bf:17:a8:69:
         62:8d:f4:bd:d9:cc:24:44:32:13:b5:7c:b2:96:12:b2:2e:eb:
         7c:80:d6:3d:07:b5:e3:ac:d9:9f:aa:47:d7:63:a6:09:4a:2a:
         d2:60:51:4f:a6:b5:b8:d3:14:3d:90:23:55:f9:ec:60:cd:08:
         61:36:70:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 07:06:52 2026 by rpki-client