Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.mft
File:                     9Iq-0-yjCOsi4bWiQoTP4eAyz9I.mft (raw, json)
Hash identifier:          1IGlYeCjEYH60lNydoS2/CuzcVpjJNEDbpn43/2DX18=
Subject key identifier:   03:61:C7:82:8B:20:99:C0:27:37:98:68:9E:86:01:1A:5A:65:49:91
Authority key identifier: F4:8A:BE:D3:EC:A3:08:EB:22:E1:B5:A2:42:84:CF:E1:E0:32:CF:D2
Certificate issuer:       /CN=F36A991DRI/serialNumber=F48ABED3ECA308EB22E1B5A24284CFE1E032CFD2
Certificate serial:       0899
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.mft
Manifest number:          0893
Signing time:             Fri 04 Sep 2026 02:00:48 +0000
Manifest this update:     Fri 04 Sep 2026 02:00:47 +0000
Manifest next update:     Sun 06 Sep 2026 02:00:47 +0000
Files and hashes:         1: 9Iq-0-yjCOsi4bWiQoTP4eAyz9I.crl (hash: mir5dG9Lsuv5lcoMm4nrGo1ztiJw7TdZ+Iqors5mhkg=)
                          2: B3F3B298BD5D11F08B10CDAADAE4EC9C.roa (hash: jybNV3DuqyII4QJXbnrYt3g+0EtzaVGNvEdcE78t6os=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.mft
                          rsync://rpki.afrinic.net/repository/ripe/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 06 Sep 2026 00:45:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2201 (0x899)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A991DRI, serialNumber=F48ABED3ECA308EB22E1B5A24284CFE1E032CFD2
        Validity
            Not Before: Sep  4 02:00:47 2026 GMT
            Not After : Sep  6 02:00:47 2026 GMT
        Subject: CN=6a9a264f-aa13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:54:57:18:6c:68:fc:10:37:ca:20:1b:7f:f5:
                    59:40:d6:5e:80:67:fc:53:13:f5:1c:48:5e:85:92:
                    9a:0a:5c:f3:d4:55:2c:f2:3c:4f:a8:fd:75:b5:98:
                    77:e1:0e:b4:7c:e4:29:7c:9d:d2:8e:15:55:1a:68:
                    d7:e0:16:a6:f5:b9:17:62:c5:5d:6a:2a:75:dc:80:
                    0d:49:74:72:85:dd:39:78:42:14:13:b3:89:8a:62:
                    90:11:0b:b4:9c:aa:fd:0e:8e:12:9a:ed:3f:0e:d5:
                    81:da:3b:ea:1c:04:65:ba:0a:ed:f3:e0:35:de:ce:
                    81:7d:7e:11:22:8a:e1:5f:fd:69:5b:a5:af:9f:24:
                    a9:5b:5b:f9:a7:39:d9:14:da:35:d4:02:7e:27:0e:
                    bd:e7:2c:dd:53:8c:dd:c6:c5:fa:d5:94:d5:e7:08:
                    11:af:2f:cf:50:6c:75:24:7d:12:2e:ae:6f:75:97:
                    d3:e0:3e:fd:ac:b7:6a:94:4e:6d:14:d6:ba:3f:fc:
                    12:32:a4:91:05:ea:32:1c:30:fb:3a:3c:a5:f9:5f:
                    bb:78:f6:b3:51:6e:23:cc:af:7c:7c:88:58:fa:65:
                    94:83:b4:72:14:f5:ca:88:6c:36:63:2d:08:a6:f1:
                    d4:97:54:c2:53:7a:d8:ec:55:48:88:b1:e6:e7:72:
                    db:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:61:C7:82:8B:20:99:C0:27:37:98:68:9E:86:01:1A:5A:65:49:91
            X509v3 Authority Key Identifier:
                keyid:F4:8A:BE:D3:EC:A3:08:EB:22:E1:B5:A2:42:84:CF:E1:E0:32:CF:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:2d:49:2a:2e:19:56:bd:da:ad:f3:ed:8f:63:e1:a0:46:94:
         2d:f1:0c:da:9b:2b:71:0d:5c:af:15:a0:9e:a5:0b:85:5e:ab:
         8e:f5:73:25:88:18:b6:76:3e:53:6f:13:76:2e:4a:f9:0a:df:
         67:d6:61:e0:79:df:34:94:19:50:75:de:29:10:7b:4c:f4:2e:
         5a:39:2c:c5:09:6a:46:2b:83:31:10:bd:9d:9b:e3:a6:1c:d8:
         39:10:6e:9c:89:eb:04:d9:c9:60:dc:21:c2:21:d9:5f:6c:f6:
         28:40:6a:a1:a6:b0:23:6c:69:58:df:fa:f8:b0:4d:ca:04:1f:
         7c:7b:a6:2b:8b:8a:65:d6:e5:49:6e:76:28:78:d8:06:cc:8f:
         6d:26:d3:fd:5a:64:c0:1d:61:e4:4c:75:ce:f3:ed:ac:75:e4:
         70:c0:e3:78:56:f6:09:8a:aa:39:1f:04:f2:4a:d3:7a:80:58:
         30:ce:82:21:20:cd:5a:dc:b9:a5:b8:71:69:9b:10:cc:28:0f:
         78:ed:4f:15:50:fc:4f:0f:d8:23:1a:51:3f:e4:c6:30:63:cf:
         c1:d2:d8:6d:3e:9d:37:1d:55:b2:49:61:9a:2a:38:3e:84:61:
         2d:67:d9:25:ef:0f:e1:66:b8:b5:5a:a6:b7:b2:a6:b3:91:6c:
         aa:79:7f:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----