Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/H025rGtjEIoZvc2-7P9EmELI1qA.mft
File:                     H025rGtjEIoZvc2-7P9EmELI1qA.mft (raw, json)
Hash identifier:          6Yx8g122VYRo15+kvrmPru177RddEzh38UMEHVy2Niw=
Subject key identifier:   1B:99:8D:DE:D5:6C:3E:8E:C6:6F:DE:CD:57:E3:DA:85:88:C7:15:85
Authority key identifier: 1F:4D:B9:AC:6B:63:10:8A:19:BD:CD:BE:EC:FF:44:98:42:C8:D6:A0
Certificate issuer:       /CN=F36960E7AF/serialNumber=1F4DB9AC6B63108A19BDCDBEECFF449842C8D6A0
Certificate serial:       061D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/H025rGtjEIoZvc2-7P9EmELI1qA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/H025rGtjEIoZvc2-7P9EmELI1qA.mft
Manifest number:          0605
Signing time:             Thu 31 Jul 2025 02:28:41 +0000
Manifest this update:     Thu 31 Jul 2025 02:28:41 +0000
Manifest next update:     Sat 02 Aug 2025 02:28:41 +0000
Files and hashes:         1: H025rGtjEIoZvc2-7P9EmELI1qA.crl (hash: MKUFOQQPHJRdNx3tZqFCJbB0hA++yUPao6KQfId7Kl0=)
                          2: 147022E0FF7811EF8AD31A7F762E951A.roa (hash: qYTfJITsVD5T5eimpEou1GQGKMzGQHZktsprbHqNuAg=)
                          3: 97E5095A63C011EF90B900AC762E951A.roa (hash: CHhNHwLMIMRB1HS45x0TZaQ8HwPIwiq6phsmJWqlNls=)
                          4: A4A1D2764B2511EF8EF8344D762E951A.roa (hash: 1LENRmO0LraUT6L3MliWDe3/LJksiV6Jf6oYUUqLkKg=)
                          5: 37B83E60FFEE11EFABEA6E81762E951A.roa (hash: gsvCvW76OaOtF8689d8WlWC5LaBRhvA+SlkfDprHioM=)
                          6: E631AAE263E211EFB8CD0280762E951A.roa (hash: XSoqhxLLsPMFAUnlaR/flj6HqH5kA2geBpaO4zUAc7M=)
                          7: 78DBB3A8509111EE8C794A224AD9E6FC.roa (hash: SDX6NV8iUbdSzDkDOEULuuCRJop7B8rmcDLu1uSO9fs=)
                          8: DB5852DAF85D11EC930D6BE8F1222468.roa (hash: 24EK8b+p2r7qpQuA2QKiuCsydz+C8t9Qpt7D1suQdos=)
                          9: 0EB33C3E515B11ED8AE4D0AAF1222468.roa (hash: eiq5eNdm8hOD/A+aOoYrfS2hurAaCz5anYykVp73ybM=)
                          10: 873E69A426D411EE808251234AD9E6FC.roa (hash: aoo+0TPZ+18QyH80oIAYV8B61S0zAuLxyHBVzKd8FOQ=)
                          11: 0323315A4EB811F084FC41D3DAE4EC9C.roa (hash: cPuBysMNDw4xZiHYj3lZqWAcLVHha62uoIAKd7pImOg=)
                          12: 455DB88A63C011EF901665A8762E951A.roa (hash: pGHG04rI1V24GpX027/GUmlPC9Q173BRWV0hc0ib0ko=)
                          13: DBFE937C426511EEBE348D774AD9E6FC.roa (hash: QIaZqhKkN8RZ2TMX3IFJAuphOSd06o9Ok298FA+iNs4=)
                          14: BBDB457C50B211ED936AB1EFF1222468.roa (hash: Ic3/YAN//xfDApEXJkLHl3ajCQB8DF7eTF+JzdLiPrw=)
                          15: CBA17CF8509111EEB65831234AD9E6FC.roa (hash: wP6aKsEiYvGLq91LUKac5Hf0WJB6D/C/9SQUe8eJUqs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/H025rGtjEIoZvc2-7P9EmELI1qA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/H025rGtjEIoZvc2-7P9EmELI1qA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/H025rGtjEIoZvc2-7P9EmELI1qA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 02 Aug 2025 00:08:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1565 (0x61d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36960E7AF, serialNumber=1F4DB9AC6B63108A19BDCDBEECFF449842C8D6A0
        Validity
            Not Before: Jul 31 02:28:41 2025 GMT
            Not After : Aug  2 02:28:41 2025 GMT
        Subject: CN=688ad4d9-93ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:26:8e:50:9c:23:db:79:b3:58:6f:81:df:b7:
                    70:81:73:0d:77:70:7c:1f:0e:9a:6e:35:85:09:23:
                    ab:ae:ec:85:a5:3d:21:4c:5c:8c:ae:1f:f2:0e:1a:
                    b9:a1:3e:ce:22:9f:21:8b:eb:2e:6e:06:dc:85:2f:
                    fb:2c:3c:8d:e6:9a:4c:27:b7:fd:96:b5:ce:be:c7:
                    96:1f:48:dd:ff:11:54:0d:92:8b:80:c3:4a:0e:bd:
                    e3:38:ec:5d:76:47:33:5e:2f:9a:12:74:ec:2b:68:
                    76:ae:c8:5a:44:68:11:9a:e2:8c:bb:e4:b6:ba:72:
                    f5:23:21:96:03:69:8c:67:84:81:ae:32:85:0e:f6:
                    65:bd:3c:79:e8:43:14:ba:90:37:f0:c8:8b:76:ed:
                    fd:03:7f:9c:95:94:2a:53:51:4c:33:0a:40:8c:ee:
                    05:7c:58:1f:00:cc:91:15:f2:6e:0f:00:f4:4e:c0:
                    db:22:a2:a0:6a:19:11:5a:01:ca:b1:f9:aa:c7:63:
                    39:ba:a6:2d:3d:fa:43:52:a1:1b:4c:30:09:a6:41:
                    37:ed:3c:7f:17:54:b7:17:43:c4:63:00:99:f8:d1:
                    7b:2f:83:7e:fe:d9:84:cd:de:4b:5e:e2:51:5a:f9:
                    b7:ef:d6:c8:60:83:17:50:94:a3:b7:8c:a5:64:1a:
                    1f:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:99:8D:DE:D5:6C:3E:8E:C6:6F:DE:CD:57:E3:DA:85:88:C7:15:85
            X509v3 Authority Key Identifier:
                keyid:1F:4D:B9:AC:6B:63:10:8A:19:BD:CD:BE:EC:FF:44:98:42:C8:D6:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/H025rGtjEIoZvc2-7P9EmELI1qA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/H025rGtjEIoZvc2-7P9EmELI1qA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/H025rGtjEIoZvc2-7P9EmELI1qA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:42:93:78:b7:ff:17:f6:fc:bb:cc:5b:47:e9:14:ea:78:c8:
         33:a7:c2:87:a9:04:61:e8:9e:d6:9d:d4:01:db:c7:9a:34:d9:
         f9:bf:76:04:a7:47:da:0b:93:d2:0c:f5:5a:54:57:26:40:31:
         82:de:10:e9:9f:4b:19:f1:df:43:6a:4f:99:99:81:2c:a6:13:
         f6:94:c4:be:39:35:b2:fd:64:bf:18:ad:62:c7:8c:96:e3:18:
         5b:1e:27:be:74:cc:e3:62:c4:29:7a:ae:3b:ef:c9:23:98:08:
         03:86:b6:75:fa:be:08:0e:00:43:4c:60:d8:82:d2:b6:95:c3:
         1b:3a:a7:fd:bf:5a:7b:4c:20:de:d5:8c:2c:8a:2e:09:b2:40:
         9b:c2:98:92:98:5f:c8:7f:1e:c8:58:4e:56:6b:cd:fe:8b:a8:
         4d:11:9c:04:e9:94:ab:be:34:20:ed:35:f5:90:c8:02:cd:f9:
         a1:5c:6d:23:f7:42:75:e3:93:40:1b:b3:7e:62:cc:d1:3f:a7:
         f1:4b:78:de:d3:66:8c:b5:eb:fb:fb:58:99:c1:5d:94:30:56:
         a7:cd:19:79:ee:33:21:5d:b2:de:f6:0c:e9:17:fa:94:ea:68:
         94:d8:d8:f5:db:e1:e9:16:20:e1:0a:f1:08:9b:3e:27:1d:33:
         0b:18:d9:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 11:18:16 2025 by rpki-client