Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B49FA/8E972ECC1C1C11E699EA450CF8AEA228/KcDd4kMF8g5OWtC7_cAP8XSMpmU.mft
File:                     KcDd4kMF8g5OWtC7_cAP8XSMpmU.mft (raw, json)
Hash identifier:          IaEWco+wbldO0Zt+f9u2lEnR/3sTKgf+Dn0Id2emrL0=
Subject key identifier:   DC:27:3F:03:96:C0:36:F5:3D:AB:CF:E1:AB:BE:2B:35:18:D6:3F:D6
Authority key identifier: 29:C0:DD:E2:43:05:F2:0E:4E:5A:D0:BB:FD:C0:0F:F1:74:8C:A6:65
Certificate issuer:       /CN=F36B49FARI/serialNumber=29C0DDE24305F20E4E5AD0BBFDC00FF1748CA665
Certificate serial:       0DBC
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/KcDd4kMF8g5OWtC7_cAP8XSMpmU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/8E972ECC1C1C11E699EA450CF8AEA228/KcDd4kMF8g5OWtC7_cAP8XSMpmU.mft
Manifest number:          0DBC
Signing time:             Sun 26 Oct 2025 01:01:07 +0000
Manifest this update:     Sun 26 Oct 2025 01:01:06 +0000
Manifest next update:     Tue 28 Oct 2025 01:01:06 +0000
Files and hashes:         1: KcDd4kMF8g5OWtC7_cAP8XSMpmU.crl (hash: 0sttfY9+fgidjOj1GQYsJW+xoTjxLcNuOdit3p1sruo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/8E972ECC1C1C11E699EA450CF8AEA228/KcDd4kMF8g5OWtC7_cAP8XSMpmU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/8E972ECC1C1C11E699EA450CF8AEA228/KcDd4kMF8g5OWtC7_cAP8XSMpmU.mft
                          rsync://rpki.afrinic.net/repository/ripe/KcDd4kMF8g5OWtC7_cAP8XSMpmU.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 28 Oct 2025 00:45:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3516 (0xdbc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B49FARI, serialNumber=29C0DDE24305F20E4E5AD0BBFDC00FF1748CA665
        Validity
            Not Before: Oct 26 01:01:06 2025 GMT
            Not After : Oct 28 01:01:06 2025 GMT
        Subject: CN=68fd72d3-b0c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:bf:6e:2f:fa:d4:4c:23:1b:a8:91:c9:5b:6f:
                    98:c4:5e:d0:ea:46:fb:62:2f:22:4a:c2:32:3c:45:
                    c8:00:ff:98:d3:65:bd:f2:a4:18:1b:3e:51:b6:25:
                    ce:e6:fa:8f:87:a1:e8:dc:bf:4a:3a:77:60:de:59:
                    93:0e:53:3c:c0:05:f0:3f:6a:06:93:b1:f6:52:92:
                    74:c2:76:f3:7f:25:a5:85:77:31:71:ca:f6:4d:70:
                    84:43:69:f6:c5:ee:21:7d:b9:2e:91:42:c0:7b:bc:
                    97:4b:6e:bc:fd:a4:90:9e:43:bb:c8:ce:15:e6:83:
                    ec:f3:2a:1b:06:91:14:0a:03:77:3b:97:5a:25:22:
                    77:9d:80:c8:3c:a2:9c:d8:2c:fc:ac:c6:8e:80:76:
                    13:da:dd:f7:7b:c8:c3:98:d2:ea:7b:a2:20:54:20:
                    f2:23:8c:b6:ed:2e:77:5d:de:39:fe:93:84:e5:df:
                    58:ef:d5:fd:02:cb:ed:6c:73:73:40:a2:8e:c9:01:
                    33:9f:79:65:c9:95:0e:d7:60:4a:a4:06:70:31:9f:
                    04:ab:2d:e6:6b:1f:ac:37:2d:97:60:97:aa:78:ad:
                    a0:a6:73:e6:15:4d:2c:44:45:39:da:1f:43:04:a2:
                    d7:ac:f8:d9:74:57:5e:0c:04:fb:69:14:a7:eb:4d:
                    55:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:27:3F:03:96:C0:36:F5:3D:AB:CF:E1:AB:BE:2B:35:18:D6:3F:D6
            X509v3 Authority Key Identifier:
                keyid:29:C0:DD:E2:43:05:F2:0E:4E:5A:D0:BB:FD:C0:0F:F1:74:8C:A6:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/8E972ECC1C1C11E699EA450CF8AEA228/KcDd4kMF8g5OWtC7_cAP8XSMpmU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/KcDd4kMF8g5OWtC7_cAP8XSMpmU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/8E972ECC1C1C11E699EA450CF8AEA228/KcDd4kMF8g5OWtC7_cAP8XSMpmU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:66:fd:64:33:31:6b:3e:bf:a0:94:80:42:c3:b4:ef:9c:b1:
         88:1d:34:37:e7:61:5a:6d:ad:2a:93:a2:40:13:8a:bc:0b:a7:
         c2:fe:bb:e7:6f:55:7d:c1:25:34:a1:ae:cf:0b:1a:f0:28:ea:
         bd:42:c9:ab:23:1c:58:34:70:74:5b:94:53:01:88:ce:03:14:
         60:6d:d4:2b:27:1a:3f:36:ac:1a:64:d9:0b:0e:5a:86:87:0a:
         cc:13:f6:bd:ea:c0:3f:06:3e:e7:ae:60:f1:a7:6a:8c:cc:30:
         6a:83:e8:3a:56:99:6d:4c:fa:a5:31:b8:72:b5:f1:95:f1:68:
         f7:4b:ca:da:82:02:29:39:a9:b7:82:8e:05:26:df:87:a9:51:
         ef:d3:59:e1:bb:35:91:2d:06:ec:98:7d:89:04:f8:08:e1:2a:
         d8:8c:c9:d0:14:4e:7d:50:9b:3f:58:59:18:4b:52:67:65:43:
         9c:32:d2:00:a7:8a:95:6c:f8:f6:07:49:02:53:d3:77:03:09:
         bc:a6:85:99:db:be:c6:89:a8:f3:50:25:85:45:eb:8e:4a:a9:
         cd:dd:14:68:d3:21:61:9c:14:60:09:d2:d6:01:ec:29:24:aa:
         52:d6:aa:4e:b0:b1:bc:79:9b:03:9c:46:8f:7b:85:ea:3a:48:
         9d:90:f9:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 04:35:55 2025 by rpki-client