Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3696E5F/3DA3D320189711ED8C936BD2F1222468/U3XPTKFkOwjDQb2nnYvhBb3DxIs.mft
File:                     U3XPTKFkOwjDQb2nnYvhBb3DxIs.mft (raw, json)
Hash identifier:          gYj0/zB7p9Ev8An8RsFbokq18If3dde/Nlid938wEa4=
Subject key identifier:   DC:CE:68:17:5B:D5:DC:09:2A:EC:C5:D9:25:48:68:9A:9F:E8:E7:50
Authority key identifier: 53:75:CF:4C:A1:64:3B:08:C3:41:BD:A7:9D:8B:E1:05:BD:C3:C4:8B
Certificate issuer:       /CN=F3696E5FAF/serialNumber=5375CF4CA1643B08C341BDA79D8BE105BDC3C48B
Certificate serial:       04B2
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/U3XPTKFkOwjDQb2nnYvhBb3DxIs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/3DA3D320189711ED8C936BD2F1222468/U3XPTKFkOwjDQb2nnYvhBb3DxIs.mft
Manifest number:          048B
Signing time:             Sun 27 Jul 2025 03:08:54 +0000
Manifest this update:     Sun 27 Jul 2025 03:08:53 +0000
Manifest next update:     Tue 29 Jul 2025 03:08:53 +0000
Files and hashes:         1: U3XPTKFkOwjDQb2nnYvhBb3DxIs.crl (hash: cL2Wr1vMoZHErePVYln6u8F4xznkK+09QByjHLO7MvI=)
                          2: 78866038732811EEA03F81784AD9E6FC.roa (hash: O0OZfBN76S8f3hTfdG+0rk9lnBRwZ9klNP8Bx/GC6so=)
                          3: 813EC5F0695311EE900FB3784AD9E6FC.roa (hash: rYBEnWZCTOIvjNGLGQGfrPSdlM64KIqO/WOBlKJR1ws=)
                          4: C21B651267DF11EE943796654AD9E6FC.roa (hash: JoM2f/YVd2Hwzfl86NLf3bbIUBYiG9ZjBtv9OLitU2w=)
                          5: 7B35EBBA695411EEB224927B4AD9E6FC.roa (hash: r8cnTi4WD1GjOQcOwVoRpZjnoq0bPsLPzmynrFSOpPo=)
                          6: C6BBB49ABFC411EE97321BB8775412E6.roa (hash: wyvaynJwkSLv01hae/RpXrp4rCpEhEK2mxTmM3AnUTs=)
                          7: 4EF8CD7C732911EE8290F77A4AD9E6FC.roa (hash: Ab5LW5eZEWzDRhloF/Vfs8/Pj/xw53grKIBtL6INQeg=)
                          8: 854B5332695511EEBE8EB37E4AD9E6FC.roa (hash: qMpIZlL1JG7Cxt6AalljPSNuG/WpcR3cp/px8PtSZDw=)
                          9: 972FAAC0695611EE9ED10D824AD9E6FC.roa (hash: 7QDMQnna185RUd3VbS6kFQRmBH7dnJ7b1efyAdSvaTk=)
                          10: BBD7FCD2732511EE8177F96F4AD9E6FC.roa (hash: ETbkRfWBiQKQIv/HBotMdHRy2JjPbPpo2ZGYcvIRbHg=)
                          11: 3450E8747BC511EF861CA6A9762E951A.roa (hash: S8B80PbkOpew+sJ621u11GoErvJntZrGDtgsuOUu6FA=)
                          12: C8047534695311EE9A1867794AD9E6FC.roa (hash: 3Lf+PtwSVLbtRykdAjgoQEOCQEsNIbgoj+2JSnVr1pk=)
                          13: 4D8233AC695611EEA9A654814AD9E6FC.roa (hash: 5shbJVP+OJddMqwr7ZqQz943Swt127SKDu+xzt2IixM=)
                          14: B91DC424695511EEB0AD5F7F4AD9E6FC.roa (hash: xF9Bk5Mz40aREsF1B2crStPFc7HilkjnEG2UlUsQDKU=)
                          15: 014A3A3E732911EE8FCD3A7A4AD9E6FC.roa (hash: DuUgtMruRVjqyq3tPl9TltQGJha6DDJdmFRtcJbyf+0=)
                          16: 170B3782695211EEA18D28734AD9E6FC.roa (hash: SAlr6R26INjndGn3mYtHQ4fynlkYM6sWpDli6VJl/0c=)
                          17: EA41EC7093D411EE8FEF2613D25BE465.roa (hash: mgAUVvuqZ9BEj+xQEUbj7eA9ZXfOP6eHELa4G3Wf8pg=)
                          18: 03F77036732811EEB870F2764AD9E6FC.roa (hash: dpDcr6I3CyS+CZ5oduKBVVacg+OZWXhwHi+rlcWvB+k=)
                          19: 18FDE308695411EEA213537A4AD9E6FC.roa (hash: V8odt/rDJ3OY5lY//c3mo3wITWeSjVt8toR6RRQBTto=)
                          20: 55C5598E732611EEB932E0714AD9E6FC.roa (hash: UYbbzhlk9KgbwGKtzI9mBTFfbCZIlddNCw7o5BaYOTw=)
                          21: 1B3E5BD6BFC411EEB815F6B6775412E6.roa (hash: /vMD2qyC5dIRjTseOPjuPT3UDFh3JnMal4OEIVBXwNA=)
                          22: FA863D0C695411EEB38C227D4AD9E6FC.roa (hash: KWNdkRrOLJM0mFFXSv0+LOkZ0cLjkGQ0cmkV6KDH3Fg=)
                          23: AEA509EA695411EEB0052B7C4AD9E6FC.roa (hash: XScV3QWAzuM2DYSCzJ4FRDjSF03CmS13+qopxF3W36M=)
                          24: F553722E695311EEA258F7794AD9E6FC.roa (hash: UIZx8a7F87YQDG8kMwP4V1uCvXx959AYMWy9I2LGPT4=)
                          25: 1D7A7458BFC311EE87E957B5775412E6.roa (hash: J6x3YduO7NoRYCnR3Wx+jPh/ZgFTIi54OWjHk1rIktE=)
                          26: CAADEE44732811EE8F7D4C794AD9E6FC.roa (hash: n+gRBiM7ZIC2gV0nUjF3LshJXh3uqCbjGwvZ0X8j1XA=)
                          27: 19101AA867DF11EE812DA3634AD9E6FC.roa (hash: 4JOsUwrnmGuB0KN0k80QhIMQJpbGvmUfXPMXU6YnDiE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/3DA3D320189711ED8C936BD2F1222468/U3XPTKFkOwjDQb2nnYvhBb3DxIs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/3DA3D320189711ED8C936BD2F1222468/U3XPTKFkOwjDQb2nnYvhBb3DxIs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/U3XPTKFkOwjDQb2nnYvhBb3DxIs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Jul 2025 00:06:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1202 (0x4b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3696E5FAF, serialNumber=5375CF4CA1643B08C341BDA79D8BE105BDC3C48B
        Validity
            Not Before: Jul 27 03:08:53 2025 GMT
            Not After : Jul 29 03:08:53 2025 GMT
        Subject: CN=68859846-a46d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c2:e0:10:aa:82:26:07:cd:e6:8a:9b:f5:a4:
                    11:7b:78:9c:0c:8b:99:2f:74:83:07:71:97:31:b6:
                    94:29:55:11:ad:9c:23:e4:ef:53:c8:ed:cd:c3:d0:
                    1f:c2:be:85:dc:34:8e:7e:80:5f:3a:f2:d5:5c:71:
                    61:4f:13:91:44:f8:84:7d:89:80:ab:29:8c:08:6f:
                    f3:58:7b:72:fe:06:13:a5:2a:49:49:9e:62:ab:af:
                    34:2d:47:11:ef:17:5b:45:f2:6c:08:cc:55:77:db:
                    b8:4b:c8:18:80:8c:f8:4a:f4:6e:52:d7:d1:10:22:
                    9c:0a:f9:bf:28:d1:4f:fd:60:66:f9:6b:2f:11:f9:
                    4d:3d:ce:41:a1:4e:6f:62:da:13:dd:07:88:00:21:
                    89:bb:11:8b:e0:53:e6:ee:85:88:25:b2:16:a5:29:
                    fe:36:17:31:8e:d5:50:95:1a:9f:c3:e7:80:8f:6f:
                    5b:9b:e4:da:39:51:b1:51:6c:b1:1b:cc:3d:f2:74:
                    92:54:03:f6:ad:70:dd:55:f1:f5:82:a3:96:0f:11:
                    d7:70:9a:16:91:3a:51:6e:39:3b:da:8e:e3:ae:8e:
                    80:b6:c9:95:2b:03:08:7b:aa:ce:23:db:e1:38:01:
                    73:ac:4a:75:bb:55:62:29:4a:dd:14:39:08:fb:a8:
                    a4:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:CE:68:17:5B:D5:DC:09:2A:EC:C5:D9:25:48:68:9A:9F:E8:E7:50
            X509v3 Authority Key Identifier:
                keyid:53:75:CF:4C:A1:64:3B:08:C3:41:BD:A7:9D:8B:E1:05:BD:C3:C4:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/3DA3D320189711ED8C936BD2F1222468/U3XPTKFkOwjDQb2nnYvhBb3DxIs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/U3XPTKFkOwjDQb2nnYvhBb3DxIs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/3DA3D320189711ED8C936BD2F1222468/U3XPTKFkOwjDQb2nnYvhBb3DxIs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:67:eb:d1:cb:f1:0c:ff:2e:6f:8c:3e:57:4c:ac:25:00:6c:
         53:3d:5d:6e:96:f1:9c:9b:af:f1:77:30:06:a7:ba:ae:ec:ba:
         47:78:14:0a:bd:8a:42:b3:ea:fd:a3:07:00:41:03:e5:ad:be:
         50:69:dd:70:9f:b0:17:2a:28:00:f7:0c:37:20:a3:f7:35:69:
         e3:dc:34:59:1b:55:a9:22:17:78:38:9f:27:59:19:d5:0b:43:
         28:d2:4b:56:cd:93:e9:d8:90:8f:20:2f:d4:0a:97:13:5e:35:
         60:3b:70:dc:a9:41:dd:e2:b9:87:e2:b8:d2:dc:3e:78:4a:44:
         99:81:93:36:77:c1:a5:be:aa:57:4e:af:0d:32:93:e1:84:0f:
         b1:f7:ac:f9:5f:f8:d2:3c:0b:2c:ad:ed:f3:1f:a5:bf:9f:da:
         61:51:5b:98:94:1c:fc:7b:c8:32:99:77:a9:38:9d:fa:db:ab:
         ba:8e:65:af:a1:d1:9e:8e:90:18:2c:f4:68:4f:50:dc:c0:ec:
         d1:03:b9:a7:93:9d:eb:1f:ef:7f:66:90:03:04:c3:a5:e3:a2:
         c1:4d:57:68:f2:79:ad:3b:ea:f6:ec:7c:db:7b:1a:d5:42:e6:
         d1:23:75:75:c0:c0:aa:4a:3e:cf:a7:2d:6c:00:3c:70:73:16:
         ff:5c:f8:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 17:43:04 2025 by rpki-client