Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/H025rGtjEIoZvc2-7P9EmELI1qA.mft
File:                     H025rGtjEIoZvc2-7P9EmELI1qA.mft (raw, json)
Hash identifier:          jMkiXVzfxMDU++yPol9Yx670Ilqtj2FdzSTdp11FzRw=
Subject key identifier:   24:3D:00:A4:83:7D:56:70:57:22:30:1D:40:DC:B6:D0:9D:09:94:EF
Authority key identifier: 1F:4D:B9:AC:6B:63:10:8A:19:BD:CD:BE:EC:FF:44:98:42:C8:D6:A0
Certificate issuer:       /CN=F36960E7AF/serialNumber=1F4DB9AC6B63108A19BDCDBEECFF449842C8D6A0
Certificate serial:       064D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/H025rGtjEIoZvc2-7P9EmELI1qA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/H025rGtjEIoZvc2-7P9EmELI1qA.mft
Manifest number:          0635
Signing time:             Wed 17 Sep 2025 02:17:31 +0000
Manifest this update:     Wed 17 Sep 2025 02:17:30 +0000
Manifest next update:     Fri 19 Sep 2025 02:17:30 +0000
Files and hashes:         1: H025rGtjEIoZvc2-7P9EmELI1qA.crl (hash: GhSSI9uBZ429c5RJUq8KztuRoNa36Qb+QAirrHIq1dI=)
                          2: 147022E0FF7811EF8AD31A7F762E951A.roa (hash: qYTfJITsVD5T5eimpEou1GQGKMzGQHZktsprbHqNuAg=)
                          3: 97E5095A63C011EF90B900AC762E951A.roa (hash: CHhNHwLMIMRB1HS45x0TZaQ8HwPIwiq6phsmJWqlNls=)
                          4: A4A1D2764B2511EF8EF8344D762E951A.roa (hash: 1LENRmO0LraUT6L3MliWDe3/LJksiV6Jf6oYUUqLkKg=)
                          5: 37B83E60FFEE11EFABEA6E81762E951A.roa (hash: gsvCvW76OaOtF8689d8WlWC5LaBRhvA+SlkfDprHioM=)
                          6: E631AAE263E211EFB8CD0280762E951A.roa (hash: XSoqhxLLsPMFAUnlaR/flj6HqH5kA2geBpaO4zUAc7M=)
                          7: 78DBB3A8509111EE8C794A224AD9E6FC.roa (hash: SDX6NV8iUbdSzDkDOEULuuCRJop7B8rmcDLu1uSO9fs=)
                          8: DB5852DAF85D11EC930D6BE8F1222468.roa (hash: 24EK8b+p2r7qpQuA2QKiuCsydz+C8t9Qpt7D1suQdos=)
                          9: 0EB33C3E515B11ED8AE4D0AAF1222468.roa (hash: eiq5eNdm8hOD/A+aOoYrfS2hurAaCz5anYykVp73ybM=)
                          10: 873E69A426D411EE808251234AD9E6FC.roa (hash: aoo+0TPZ+18QyH80oIAYV8B61S0zAuLxyHBVzKd8FOQ=)
                          11: 0323315A4EB811F084FC41D3DAE4EC9C.roa (hash: cPuBysMNDw4xZiHYj3lZqWAcLVHha62uoIAKd7pImOg=)
                          12: 455DB88A63C011EF901665A8762E951A.roa (hash: pGHG04rI1V24GpX027/GUmlPC9Q173BRWV0hc0ib0ko=)
                          13: DBFE937C426511EEBE348D774AD9E6FC.roa (hash: QIaZqhKkN8RZ2TMX3IFJAuphOSd06o9Ok298FA+iNs4=)
                          14: BBDB457C50B211ED936AB1EFF1222468.roa (hash: Ic3/YAN//xfDApEXJkLHl3ajCQB8DF7eTF+JzdLiPrw=)
                          15: CBA17CF8509111EEB65831234AD9E6FC.roa (hash: wP6aKsEiYvGLq91LUKac5Hf0WJB6D/C/9SQUe8eJUqs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/H025rGtjEIoZvc2-7P9EmELI1qA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/H025rGtjEIoZvc2-7P9EmELI1qA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/H025rGtjEIoZvc2-7P9EmELI1qA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 19 Sep 2025 02:17:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1613 (0x64d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36960E7AF, serialNumber=1F4DB9AC6B63108A19BDCDBEECFF449842C8D6A0
        Validity
            Not Before: Sep 17 02:17:30 2025 GMT
            Not After : Sep 19 02:17:30 2025 GMT
        Subject: CN=68ca1a3b-412a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:62:99:2b:51:c6:8a:81:42:20:da:73:21:07:
                    e0:bc:60:bd:e2:7f:0e:44:dc:57:e2:bb:bd:52:1e:
                    5d:96:ff:46:99:f0:a4:40:ca:53:6f:97:08:ad:d8:
                    1b:46:f2:e8:36:01:e1:e8:b0:3d:40:00:4e:80:df:
                    74:64:04:ce:18:18:dd:18:b5:b3:ae:b1:a1:d7:8a:
                    95:81:5b:ac:1e:76:17:5e:cc:66:ce:1f:e3:0b:1d:
                    6e:ac:16:3a:55:40:55:3d:df:22:b5:40:fc:25:dc:
                    5d:58:a3:ee:0d:f1:e6:ca:01:c6:31:4d:ff:fb:3d:
                    f3:03:8f:88:7c:b1:0e:5a:c9:82:ad:dc:34:f7:5e:
                    95:17:54:39:03:d2:ee:10:b4:cd:d5:ea:ae:15:cc:
                    f0:f1:91:4b:46:ad:2e:ad:9b:8e:d5:6c:52:28:95:
                    8c:81:77:a8:27:1f:c7:4c:47:51:73:56:1a:6c:62:
                    7b:3b:cf:b0:fa:9f:b7:02:6c:d3:66:92:92:d3:bb:
                    86:6f:e7:49:36:26:32:9b:ca:ca:e7:c8:45:7f:42:
                    95:b1:4f:c8:72:01:57:90:c7:4e:58:07:9a:c6:01:
                    4e:02:4a:9a:de:5f:92:bc:d9:5d:bf:3a:1b:90:a7:
                    50:ed:25:c5:95:4f:b5:fb:1b:d3:bf:9d:a2:18:a8:
                    b0:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:3D:00:A4:83:7D:56:70:57:22:30:1D:40:DC:B6:D0:9D:09:94:EF
            X509v3 Authority Key Identifier:
                keyid:1F:4D:B9:AC:6B:63:10:8A:19:BD:CD:BE:EC:FF:44:98:42:C8:D6:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/H025rGtjEIoZvc2-7P9EmELI1qA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/H025rGtjEIoZvc2-7P9EmELI1qA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/H025rGtjEIoZvc2-7P9EmELI1qA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:a3:ed:d7:11:13:78:42:f1:3a:8c:eb:bf:f5:4a:79:e5:61:
         a9:de:e2:3c:f1:c0:61:6f:b9:a8:c8:d9:01:1c:db:1b:58:28:
         d1:ac:20:71:dd:a9:de:66:84:0c:23:6b:43:8b:18:ad:ad:ef:
         85:0b:4b:35:72:4e:2e:9e:39:18:d8:7a:d0:91:6a:6b:74:11:
         1b:d1:3e:cd:47:ff:41:5d:f7:73:b0:f5:1e:be:4a:86:e2:f7:
         d9:de:54:12:a6:63:90:31:ce:c4:2d:6e:11:14:89:07:6a:83:
         c4:9b:a3:98:4c:0a:42:03:79:e0:f9:57:0d:68:34:b6:17:5e:
         f8:13:42:db:c9:23:f0:cb:ea:1c:9c:b5:36:fb:05:80:9b:74:
         d7:61:05:33:b4:0f:3b:7b:6b:45:97:70:30:94:be:6d:2b:f2:
         55:57:d5:32:55:1b:3b:f1:b0:68:a9:e0:09:81:af:2c:50:79:
         6e:90:31:13:54:bb:f1:de:d3:ae:6f:49:a6:a4:75:04:34:b0:
         f3:11:44:b0:34:92:02:8a:ed:8a:89:7b:c0:eb:9b:4c:d5:cd:
         56:a3:7d:26:2a:49:75:d9:7f:74:02:e6:2f:fd:31:78:fd:47:
         f3:95:1d:04:87:6d:9f:b9:dd:b5:ab:32:14:b5:bb:57:7f:48:
         62:40:72:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 23:25:11 2025 by rpki-client