Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F369C738/896BE78AEEA911EA8FDCFB1BF8AEA228/dP2KmbmPfFmCclePXqFPEhiXqVs.mft
File:                     dP2KmbmPfFmCclePXqFPEhiXqVs.mft (raw, json)
Hash identifier:          QnQf07RkPoqMoSK6h11pHPM+4VxiQFEXG2WbL4aEigo=
Subject key identifier:   E5:74:05:12:EB:AA:04:50:4F:8A:95:B9:FB:BC:CB:80:B8:17:E8:E5
Authority key identifier: 74:FD:8A:99:B9:8F:7C:59:82:72:57:8F:5E:A1:4F:12:18:97:A9:5B
Certificate issuer:       /CN=F369C738RI/serialNumber=74FD8A99B98F7C598272578F5EA14F121897A95B
Certificate serial:       08CA
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/dP2KmbmPfFmCclePXqFPEhiXqVs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369C738/896BE78AEEA911EA8FDCFB1BF8AEA228/dP2KmbmPfFmCclePXqFPEhiXqVs.mft
Manifest number:          08C8
Signing time:             Thu 10 Sep 2026 01:53:53 +0000
Manifest this update:     Thu 10 Sep 2026 01:53:53 +0000
Manifest next update:     Sat 12 Sep 2026 01:53:53 +0000
Files and hashes:         1: dP2KmbmPfFmCclePXqFPEhiXqVs.crl (hash: W2jPu7EtLlBEce6xZOAoEnzId17Dw5fDutMEZfwkCDg=)
                          2: 85C020368F1311F19E39A4EFCE1D38B0.roa (hash: gyC2sm4kc95dRk/7xGd5hTUBMpQrFeDNPVysCG/CwVs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369C738/896BE78AEEA911EA8FDCFB1BF8AEA228/dP2KmbmPfFmCclePXqFPEhiXqVs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369C738/896BE78AEEA911EA8FDCFB1BF8AEA228/dP2KmbmPfFmCclePXqFPEhiXqVs.mft
                          rsync://rpki.afrinic.net/repository/ripe/dP2KmbmPfFmCclePXqFPEhiXqVs.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 12 Sep 2026 00:45:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2250 (0x8ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369C738RI, serialNumber=74FD8A99B98F7C598272578F5EA14F121897A95B
        Validity
            Not Before: Sep 10 01:53:53 2026 GMT
            Not After : Sep 12 01:53:53 2026 GMT
        Subject: CN=6aa20db1-91d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:69:d3:e4:9a:02:f9:50:e3:d9:04:ed:2c:12:
                    07:e9:7a:8b:b3:ed:ec:cf:86:8b:35:21:3e:af:70:
                    ea:82:eb:2f:db:cd:fd:1c:51:22:0e:41:56:fd:ce:
                    50:23:d3:55:8e:c0:ad:46:ed:92:6a:10:77:ba:dd:
                    9c:90:a6:9c:1f:2d:ef:ba:42:b7:59:c9:d0:6f:9b:
                    37:d7:8d:63:19:e8:02:a1:91:29:6a:e6:80:e7:73:
                    0c:c1:f7:4d:f6:b9:76:95:54:95:8c:2f:06:0e:66:
                    6e:8d:50:c9:7d:46:37:85:64:19:84:04:3f:30:9d:
                    b4:a8:fe:a7:a6:d2:ba:20:16:15:8e:39:23:e3:30:
                    86:2b:a5:b7:45:96:8b:e5:1b:ca:18:ba:ce:c0:7c:
                    02:5a:ba:88:85:27:60:6d:da:17:a9:30:27:e3:e5:
                    af:4a:6c:63:e5:2a:fe:99:1e:bd:3b:ba:06:3d:f9:
                    ee:93:b9:37:3a:bc:7a:df:b8:02:a3:1f:ee:05:25:
                    67:c9:c6:6e:c8:6a:3f:93:65:67:2c:d4:bf:d2:44:
                    b9:e3:71:1a:85:7a:24:a4:31:88:87:73:bb:9d:bb:
                    47:97:74:2d:a4:0b:79:e8:26:f3:ca:ce:f2:0b:92:
                    10:2c:b2:a3:fa:54:51:ba:2b:98:2b:2d:38:a1:92:
                    d9:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:74:05:12:EB:AA:04:50:4F:8A:95:B9:FB:BC:CB:80:B8:17:E8:E5
            X509v3 Authority Key Identifier:
                keyid:74:FD:8A:99:B9:8F:7C:59:82:72:57:8F:5E:A1:4F:12:18:97:A9:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369C738/896BE78AEEA911EA8FDCFB1BF8AEA228/dP2KmbmPfFmCclePXqFPEhiXqVs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/dP2KmbmPfFmCclePXqFPEhiXqVs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369C738/896BE78AEEA911EA8FDCFB1BF8AEA228/dP2KmbmPfFmCclePXqFPEhiXqVs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:1a:76:58:e9:91:71:d8:ce:25:3f:ed:ae:12:d7:6b:f0:ea:
         ad:71:bf:6b:66:6e:b1:f0:d7:50:17:a6:7c:b8:f0:a5:fc:12:
         9c:3b:b9:d2:36:20:d1:06:90:cf:0f:99:9d:9d:a4:cf:76:aa:
         49:d4:7f:87:29:e4:9e:1c:30:3b:e4:ba:90:b8:99:c1:e0:c0:
         82:1c:39:87:95:92:46:38:a5:64:cf:0c:ab:7b:13:a6:14:6b:
         7b:72:9c:5c:06:fd:49:61:8f:76:7a:3f:11:6e:07:eb:9d:3a:
         99:25:d9:87:28:b7:3c:12:f3:c9:3f:11:47:ef:80:78:2c:4a:
         19:10:2e:6c:77:d0:a0:fd:9e:2f:1b:6d:0a:7f:a4:7a:2e:86:
         22:20:1a:ce:23:ee:63:65:60:47:ba:10:7d:86:f6:a6:7e:03:
         e2:11:2d:97:43:92:c7:2f:91:2a:3f:93:8d:b6:61:04:c5:2e:
         04:e3:cc:ad:b7:26:b8:b6:7f:ed:cc:99:15:8d:19:cb:34:a7:
         ee:73:cd:6f:10:ca:fb:d5:d5:1e:ea:0f:98:fd:9c:1d:bd:61:
         74:0e:3e:bb:c8:5b:15:4a:72:7a:ff:9e:1c:80:d6:d2:20:22:
         85:a9:fc:45:c0:c2:c2:29:3b:2a:91:5f:3b:74:30:bf:e1:bb:
         f8:98:74:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----