Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B0C44/DEB69BA6BF7811EE86CB6CB7775412E6/Sbrmff7enZUJuwOnxzLcVmFmt1o.mft
File:                     Sbrmff7enZUJuwOnxzLcVmFmt1o.mft (raw, json)
Hash identifier:          oZk7C0/QeHLCV3oYIkc0WiKWVheqhSkoDCZ1kH/Sn+E=
Subject key identifier:   68:FF:BB:7E:F2:55:6E:3C:FF:93:73:FA:E7:D9:B7:39:EE:31:D6:C0
Authority key identifier: 49:BA:E6:7D:FE:DE:9D:95:09:BB:03:A7:C7:32:DC:56:61:66:B7:5A
Certificate issuer:       /CN=F36B0C44AF/serialNumber=49BAE67DFEDE9D9509BB03A7C732DC566166B75A
Certificate serial:       02A1
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Sbrmff7enZUJuwOnxzLcVmFmt1o.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B0C44/DEB69BA6BF7811EE86CB6CB7775412E6/Sbrmff7enZUJuwOnxzLcVmFmt1o.mft
Manifest number:          029B
Signing time:             Sun 02 Nov 2025 06:41:18 +0000
Manifest this update:     Sun 02 Nov 2025 06:41:17 +0000
Manifest next update:     Tue 04 Nov 2025 06:41:17 +0000
Files and hashes:         1: Sbrmff7enZUJuwOnxzLcVmFmt1o.crl (hash: Rl2IClhPFGk7JN/L9kM43iN1cRqSyBa2iINFf0W9RdE=)
                          2: 96446AE6C04111EE9477E2A2775412E6.roa (hash: qXGiyWvqf9jjyOwcPQcuVS3D910J4Jz6Wlu+WbOF/zM=)
                          3: CE4C1BD8BF7D11EE97BCA7BF775412E6.roa (hash: yJpP30xuvTe5uFFB4LtOLOWEiDS7piREXKk0KFAJ23A=)
                          4: F1CA4556BF7F11EEBB4826C3775412E6.roa (hash: l40ZqirIPBTx/x+bNutVHtKD07PTBU26d+cCsLpIIBk=)
                          5: 070A0F76BF7D11EEB89736BE775412E6.roa (hash: grOTvQ1t6UyvliV5knhBI1h+ljufMPN9n26TEDv5AK8=)
                          6: FA0A71ACBF7D11EEAF08CABF775412E6.roa (hash: PfO9Y+c33Exyp9yfR1CWVhKzDN+Qro1W+mHbGnhyeOg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B0C44/DEB69BA6BF7811EE86CB6CB7775412E6/Sbrmff7enZUJuwOnxzLcVmFmt1o.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B0C44/DEB69BA6BF7811EE86CB6CB7775412E6/Sbrmff7enZUJuwOnxzLcVmFmt1o.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Sbrmff7enZUJuwOnxzLcVmFmt1o.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 04 Nov 2025 00:06:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 673 (0x2a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B0C44AF, serialNumber=49BAE67DFEDE9D9509BB03A7C732DC566166B75A
        Validity
            Not Before: Nov  2 06:41:17 2025 GMT
            Not After : Nov  4 06:41:17 2025 GMT
        Subject: CN=6906fd0e-ecfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:0a:c8:bd:8c:97:02:a0:ed:52:80:b2:76:cc:
                    7c:8d:66:50:8a:48:8e:91:ed:11:26:f4:8f:d3:d6:
                    bc:6e:8b:72:6c:3f:64:96:11:59:08:96:a0:4a:dd:
                    eb:92:65:51:56:7b:52:73:e9:54:30:c8:25:e7:a5:
                    12:9e:c2:a2:d2:45:46:ab:ae:7f:ba:35:7a:ea:10:
                    a4:31:8a:c7:a8:bd:4c:91:1d:78:c7:b7:45:50:01:
                    ab:ba:22:46:36:bd:ce:20:3f:7f:a2:10:b1:73:1c:
                    df:c2:1a:69:1a:dd:19:68:f9:02:71:bc:57:eb:aa:
                    86:84:c1:68:27:99:f0:59:77:a2:b6:e6:59:71:d0:
                    5b:d6:42:d2:96:a2:a5:d3:c2:62:c9:39:89:9f:84:
                    22:36:89:84:ea:1d:58:7b:3f:ef:47:eb:8d:aa:a0:
                    e9:0b:ad:a3:b4:d5:5e:54:56:2d:7d:d2:69:f5:18:
                    ca:8b:ec:a9:49:88:b2:0d:27:c9:e0:12:46:2a:bf:
                    64:85:b5:54:5a:a2:75:76:7a:0e:29:29:7d:b7:40:
                    56:dc:c4:04:d6:9d:41:a0:f0:f1:48:2b:f4:17:3c:
                    c1:ec:c3:0a:ef:05:74:82:66:30:40:38:b0:dc:27:
                    a2:22:4b:7e:ca:9e:19:33:e7:7e:2c:09:51:6f:d0:
                    ea:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:FF:BB:7E:F2:55:6E:3C:FF:93:73:FA:E7:D9:B7:39:EE:31:D6:C0
            X509v3 Authority Key Identifier:
                keyid:49:BA:E6:7D:FE:DE:9D:95:09:BB:03:A7:C7:32:DC:56:61:66:B7:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B0C44/DEB69BA6BF7811EE86CB6CB7775412E6/Sbrmff7enZUJuwOnxzLcVmFmt1o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Sbrmff7enZUJuwOnxzLcVmFmt1o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B0C44/DEB69BA6BF7811EE86CB6CB7775412E6/Sbrmff7enZUJuwOnxzLcVmFmt1o.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:d0:9c:31:a3:06:72:ad:38:8a:a5:4a:bd:d3:3e:86:ff:3f:
         2c:92:5f:e0:ad:a3:21:8f:f2:f8:52:1b:55:b9:7e:62:65:ff:
         21:0f:77:8a:5d:4d:18:08:b7:11:6d:75:4d:30:b3:18:6f:94:
         8a:e5:10:e5:71:ab:51:90:51:16:69:33:b3:9a:45:6c:2a:b7:
         2c:d9:ce:e0:0e:25:74:3c:0f:08:6d:30:e6:b2:f5:54:4f:44:
         09:fb:15:78:55:18:c5:b9:12:43:f9:4f:ea:ba:a4:be:57:d1:
         a3:c5:e5:a4:cb:6c:f4:35:3f:de:6e:50:b3:c9:0c:42:f3:e4:
         7d:ad:4d:65:a5:7f:ac:72:ae:95:89:cb:74:e8:a2:0d:2d:92:
         c6:17:ae:26:da:ea:5b:3b:80:ec:a9:42:47:ef:bd:42:eb:d6:
         b7:f2:db:26:93:3a:fe:d2:87:a9:78:9b:20:97:13:1a:67:99:
         f8:9a:dd:92:0c:45:b1:21:43:ce:47:ec:a0:36:d2:b9:f2:57:
         d4:98:a4:8a:2e:fb:e8:94:a0:53:c4:71:63:0b:a6:01:61:5f:
         8d:9d:51:5e:60:2f:ea:04:bd:c7:f6:63:23:65:03:b8:cd:72:
         e4:f8:34:73:f1:a6:57:35:ad:77:70:93:b7:87:e3:21:ea:1f:
         f6:b1:41:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 2 18:24:58 2025 by rpki-client