Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B49FA/8E972ECC1C1C11E699EA450CF8AEA228/KcDd4kMF8g5OWtC7_cAP8XSMpmU.mft
File:                     KcDd4kMF8g5OWtC7_cAP8XSMpmU.mft (raw, json)
Hash identifier:          xCUpcyzJe+Q1218nSmmWf8vb7qa5af/NUNfOrX8aoes=
Subject key identifier:   4B:28:B3:DD:3F:77:62:DE:17:4A:33:59:D5:8F:66:EA:2B:07:E6:2B
Authority key identifier: 29:C0:DD:E2:43:05:F2:0E:4E:5A:D0:BB:FD:C0:0F:F1:74:8C:A6:65
Certificate issuer:       /CN=F36B49FARI/serialNumber=29C0DDE24305F20E4E5AD0BBFDC00FF1748CA665
Certificate serial:       0ED9
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/KcDd4kMF8g5OWtC7_cAP8XSMpmU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/8E972ECC1C1C11E699EA450CF8AEA228/KcDd4kMF8g5OWtC7_cAP8XSMpmU.mft
Manifest number:          0ED6
Signing time:             Mon 27 Jul 2026 01:01:12 +0000
Manifest this update:     Mon 27 Jul 2026 01:01:12 +0000
Manifest next update:     Wed 29 Jul 2026 01:01:12 +0000
Files and hashes:         1: KcDd4kMF8g5OWtC7_cAP8XSMpmU.crl (hash: xeZHfEs8g+dUbwmBRdVK06VY7085HFZX0iwexCe8Uo4=)
                          2: EA4F7EFAD9A811F08C56B58CDAE4EC9C.roa (hash: KJfS72R5iuz5xs0eftrag9nUHdu8fHWjhJvFlKIOLa0=)
                          3: 2A59319ED9A911F084AC988EDAE4EC9C.roa (hash: ZE/AMuFDnqEMdF+m9bTrDEG8cxJJ5piRwX5injKhwic=)
                          4: 099F7328D9A911F096B18E8EDAE4EC9C.roa (hash: vKz4MwaF+U/JBZIu/j/X4SY3DZu7/0WQLVi3O6PdX+c=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/8E972ECC1C1C11E699EA450CF8AEA228/KcDd4kMF8g5OWtC7_cAP8XSMpmU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/8E972ECC1C1C11E699EA450CF8AEA228/KcDd4kMF8g5OWtC7_cAP8XSMpmU.mft
                          rsync://rpki.afrinic.net/repository/ripe/KcDd4kMF8g5OWtC7_cAP8XSMpmU.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 29 Jul 2026 00:45:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3801 (0xed9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B49FARI, serialNumber=29C0DDE24305F20E4E5AD0BBFDC00FF1748CA665
        Validity
            Not Before: Jul 27 01:01:12 2026 GMT
            Not After : Jul 29 01:01:12 2026 GMT
        Subject: CN=6a66add8-2060
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:39:25:59:a5:a1:94:4d:f3:1b:ee:8a:6b:db:
                    c5:53:0e:9f:c9:34:d1:eb:8f:e2:f9:61:a3:ef:5d:
                    9d:b4:f5:ab:c8:2c:37:62:40:93:c6:b9:63:8b:79:
                    60:aa:89:86:c1:bf:34:5f:a7:3b:78:8a:9f:ff:68:
                    cd:ae:ce:08:8c:1c:18:1c:c5:1b:f0:ac:f2:19:b1:
                    f0:25:4a:d1:98:61:2e:3f:37:a1:1c:2a:d7:2b:a0:
                    5f:67:18:7c:4b:de:28:f8:82:77:41:08:03:a5:e2:
                    e4:06:8a:d3:37:46:be:db:3b:d0:40:72:83:da:c1:
                    fa:be:58:3b:df:04:39:6a:5d:d9:8e:09:b9:89:0f:
                    79:81:d2:99:db:06:f3:4b:eb:83:68:7f:2f:98:19:
                    b1:c6:e6:e2:c8:2d:dc:c5:19:3f:00:3e:fa:ee:7e:
                    e9:b3:e0:53:e9:86:d0:d4:3f:b9:8e:a9:a3:b3:1b:
                    60:de:a1:2c:cd:5b:c9:04:ce:73:03:ab:14:af:42:
                    7b:2a:74:c8:38:70:ae:4f:3d:8e:1f:c2:1b:f9:0b:
                    15:67:6c:26:2a:04:d7:10:0b:5f:3f:7b:bb:c3:7d:
                    03:71:27:cd:cd:6b:43:f9:a8:3b:ba:09:16:a2:43:
                    19:c2:32:09:4e:e3:8c:90:d0:67:84:ca:8b:0e:2d:
                    6a:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:28:B3:DD:3F:77:62:DE:17:4A:33:59:D5:8F:66:EA:2B:07:E6:2B
            X509v3 Authority Key Identifier:
                keyid:29:C0:DD:E2:43:05:F2:0E:4E:5A:D0:BB:FD:C0:0F:F1:74:8C:A6:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/8E972ECC1C1C11E699EA450CF8AEA228/KcDd4kMF8g5OWtC7_cAP8XSMpmU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/KcDd4kMF8g5OWtC7_cAP8XSMpmU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/8E972ECC1C1C11E699EA450CF8AEA228/KcDd4kMF8g5OWtC7_cAP8XSMpmU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:69:4e:08:c3:59:7d:5a:e2:d0:fe:bd:72:5f:00:f0:69:24:
         49:bd:c6:3d:75:c1:ef:00:e1:4a:cd:4a:0d:3a:99:29:50:90:
         2e:55:0d:46:2a:b4:24:3d:96:b5:dc:73:8c:75:b9:ac:df:e6:
         11:df:18:87:f6:c9:13:2c:87:cb:60:db:79:1d:f0:8f:0b:02:
         7a:84:2f:ca:71:e5:6d:31:a5:e9:09:16:d7:9f:77:c0:a2:09:
         5b:46:4e:b3:f5:88:17:5d:9e:13:71:9f:4b:0c:52:57:0e:38:
         0b:b0:4f:cd:05:37:77:01:64:3f:07:95:4d:50:4a:18:84:9f:
         81:2c:37:aa:60:42:55:ed:f1:12:c4:93:21:1f:8b:19:3e:5a:
         b9:1c:94:44:1c:9e:ea:54:b3:4a:f9:c4:2e:7e:b4:ef:42:00:
         24:f3:c3:87:3a:c6:b7:15:d2:ed:66:b8:6a:cd:eb:e4:8a:8e:
         00:22:ce:3d:c7:68:22:a0:12:7e:cc:62:ba:40:80:18:13:89:
         d1:4b:1a:29:39:5d:8e:06:dd:21:75:e9:44:7d:a9:a1:dd:32:
         c2:70:e9:7f:61:9f:3a:1c:c3:e4:6a:2d:10:f1:46:50:90:0d:
         71:77:89:b3:f0:a2:af:8b:d2:2f:59:7c:76:91:8c:f9:f7:9d:
         ab:11:1b:b1
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICDtkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QjQ5RkFSSTExMC8GA1UEBRMoMjlDMERERTI0MzA1RjIwRTRFNUFEMEJCRkRDMDBG
RjE3NDhDQTY2NTAeFw0yNjA3MjcwMTAxMTJaFw0yNjA3MjkwMTAxMTJaMBgxFjAU
BgNVBAMTDTZhNjZhZGQ4LTIwNjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC6OSVZpaGUTfMb7opr28VTDp/JNNHrj+L5YaPvXZ209avILDdiQJPGuWOL
eWCqiYbBvzRfpzt4ip//aM2uzgiMHBgcxRvwrPIZsfAlStGYYS4/N6EcKtcroF9n
GHxL3ij4gndBCAOl4uQGitM3Rr7bO9BAcoPawfq+WDvfBDlqXdmOCbmJD3mB0pnb
BvNL64Nofy+YGbHG5uLILdzFGT8APvrufumz4FPphtDUP7mOqaOzG2DeoSzNW8kE
znMDqxSvQnsqdMg4cK5PPY4fwhv5CxVnbCYqBNcQC18/e7vDfQNxJ83Na0P5qDu6
CRaiQxnCMglO44yQ0GeEyosOLWqVAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUSyiz
3T93Yt4XSjNZ1Y9m6isH5iswHwYDVR0jBBgwFoAUKcDd4kMF8g5OWtC7/cAP8XSM
pmUwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkI0OUZBLzhFOTcyRUNDMUMxQzExRTY5OUVBNDUwQ0Y4QUVBMjI4L0tjRGQ0
a01GOGc1T1d0QzdfY0FQOFhTTXBtVS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9yaXBl
L0tjRGQ0a01GOGc1T1d0QzdfY0FQOFhTTXBtVS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2QjQ5RkEvOEU5NzJFQ0MxQzFDMTFFNjk5RUE0NTBDRjhBRUEy
MjgvS2NEZDRrTUY4ZzVPV3RDN19jQVA4WFNNcG1VLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCtaU4Iw1l9WuLQ/r1yXwDwaSRJvcY9dcHv
AOFKzUoNOpkpUJAuVQ1GKrQkPZa13HOMdbms3+YR3xiH9skTLIfLYNt5HfCPCwJ6
hC/KceVtMaXpCRbXn3fAoglbRk6z9YgXXZ4TcZ9LDFJXDjgLsE/NBTd3AWQ/B5VN
UEoYhJ+BLDeqYEJV7fESxJMhH4sZPlq5HJREHJ7qVLNK+cQufrTvQgAk88OHOsa3
FdLtZrhqzevkio4AIs49x2gioBJ+zGK6QIAYE4nRSxopOV2OBt0hdelEfamh3TLC
cOl/YZ86HMPkai0Q8UZQkA1xd4mz8KKvi9IvWXx2kYz5952rERux
-----END CERTIFICATE-----
Generated at Mon Jul 27 05:30:37 2026 by rpki-client