Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36B49FA/8E972ECC1C1C11E699EA450CF8AEA228/KcDd4kMF8g5OWtC7_cAP8XSMpmU.mft
File:                     KcDd4kMF8g5OWtC7_cAP8XSMpmU.mft (raw, json)
Hash identifier:          gh9c3y0vmMHT2HpLIyZw7W8QnuytdodNMMPoaZFeN3U=
Subject key identifier:   88:85:E6:CC:32:30:0E:8E:A8:2A:D2:1C:C9:18:B5:FB:80:96:AE:4A
Authority key identifier: 29:C0:DD:E2:43:05:F2:0E:4E:5A:D0:BB:FD:C0:0F:F1:74:8C:A6:65
Certificate issuer:       /CN=F36B49FARI/serialNumber=29C0DDE24305F20E4E5AD0BBFDC00FF1748CA665
Certificate serial:       0F35
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/KcDd4kMF8g5OWtC7_cAP8XSMpmU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/8E972ECC1C1C11E699EA450CF8AEA228/KcDd4kMF8g5OWtC7_cAP8XSMpmU.mft
Manifest number:          0F32
Signing time:             Tue 27 Oct 2026 01:00:59 +0000
Manifest this update:     Tue 27 Oct 2026 01:00:58 +0000
Manifest next update:     Thu 29 Oct 2026 01:00:58 +0000
Files and hashes:         1: KcDd4kMF8g5OWtC7_cAP8XSMpmU.crl (hash: Ze1/LAqycdqS9lv3kmD5w5/zln/Oh+NzWqWHuwrEZ2Y=)
                          2: EA4F7EFAD9A811F08C56B58CDAE4EC9C.roa (hash: KJfS72R5iuz5xs0eftrag9nUHdu8fHWjhJvFlKIOLa0=)
                          3: 2A59319ED9A911F084AC988EDAE4EC9C.roa (hash: ZE/AMuFDnqEMdF+m9bTrDEG8cxJJ5piRwX5injKhwic=)
                          4: 099F7328D9A911F096B18E8EDAE4EC9C.roa (hash: vKz4MwaF+U/JBZIu/j/X4SY3DZu7/0WQLVi3O6PdX+c=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/8E972ECC1C1C11E699EA450CF8AEA228/KcDd4kMF8g5OWtC7_cAP8XSMpmU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/8E972ECC1C1C11E699EA450CF8AEA228/KcDd4kMF8g5OWtC7_cAP8XSMpmU.mft
                          rsync://rpki.afrinic.net/repository/ripe/KcDd4kMF8g5OWtC7_cAP8XSMpmU.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 29 Oct 2026 00:45:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3893 (0xf35)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B49FARI, serialNumber=29C0DDE24305F20E4E5AD0BBFDC00FF1748CA665
        Validity
            Not Before: Oct 27 01:00:58 2026 GMT
            Not After : Oct 29 01:00:58 2026 GMT
        Subject: CN=6adff7cb-2c79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:6d:e5:9f:b6:34:7e:11:4b:d8:78:71:47:e0:
                    bc:09:14:04:db:93:0e:56:c6:1f:75:d5:d9:82:45:
                    2d:80:55:af:ee:d8:72:2e:9e:57:f6:8c:d2:b4:74:
                    31:bc:9c:b9:44:26:89:15:c2:b3:80:59:12:a0:ea:
                    09:34:5b:42:2a:66:40:9e:11:0b:fd:a0:b0:ed:68:
                    34:59:6e:8e:5f:a7:12:31:ab:08:7d:b1:3a:46:29:
                    e0:3c:81:b2:e9:06:b1:bf:63:74:97:61:a7:85:94:
                    96:61:94:6e:e7:5a:50:f7:40:9f:48:57:ef:a4:38:
                    dd:58:d3:e6:8a:bd:d7:e6:9b:bf:d0:c0:5a:41:b2:
                    bc:f3:1a:29:31:17:a1:f9:5b:cd:dc:ce:b0:37:73:
                    8f:e6:f3:a1:78:e1:8c:ef:2f:0c:7b:9d:3f:ae:fb:
                    60:04:62:a9:85:30:e8:fc:8f:7e:d2:72:34:8b:9d:
                    17:11:d9:e6:b5:91:b0:b4:63:55:e9:f9:51:56:84:
                    8d:5c:74:ab:61:42:bc:82:aa:d8:50:07:13:0f:fd:
                    a0:6a:60:41:ea:ce:19:e2:e0:69:4e:64:00:72:bf:
                    5d:15:5c:75:f3:ef:8f:f7:d4:75:b4:f8:4d:c5:b4:
                    b0:40:2e:f2:47:48:cf:96:5a:71:32:2d:0e:ab:4f:
                    be:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:85:E6:CC:32:30:0E:8E:A8:2A:D2:1C:C9:18:B5:FB:80:96:AE:4A
            X509v3 Authority Key Identifier:
                keyid:29:C0:DD:E2:43:05:F2:0E:4E:5A:D0:BB:FD:C0:0F:F1:74:8C:A6:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/8E972ECC1C1C11E699EA450CF8AEA228/KcDd4kMF8g5OWtC7_cAP8XSMpmU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/KcDd4kMF8g5OWtC7_cAP8XSMpmU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/8E972ECC1C1C11E699EA450CF8AEA228/KcDd4kMF8g5OWtC7_cAP8XSMpmU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:6f:16:4d:59:47:f7:c9:4a:c4:f7:3a:df:32:00:cd:86:8a:
         79:3f:b2:1d:ee:b0:a4:04:89:14:b1:2c:5e:cf:5d:09:c1:bb:
         21:15:e9:ff:51:3b:7f:76:3d:eb:d2:f5:7c:2f:2d:3d:60:eb:
         d2:46:b1:34:d7:f7:d2:c2:1b:5a:61:a8:94:0a:2d:5e:89:9c:
         18:87:08:04:61:b8:54:a2:0a:d3:37:8e:96:df:c8:c2:65:8a:
         63:b8:bf:9f:a1:32:c0:9c:8d:5a:94:95:e0:7e:33:80:83:56:
         da:bf:f9:94:d7:b3:54:b8:73:9c:9b:3e:4c:0c:34:9c:8c:be:
         e6:2c:63:1b:a9:82:fc:33:5c:ce:e1:73:f2:c2:ee:32:6d:32:
         02:73:a1:b8:d7:8e:24:11:96:56:b0:27:05:41:29:be:2b:5e:
         f4:0e:f3:22:33:fd:d2:82:38:2b:70:76:98:6f:ca:48:68:11:
         94:79:e7:bc:ae:93:8b:58:58:f5:ee:9d:20:9c:38:01:40:d5:
         72:0e:82:e2:6a:9b:14:62:f0:43:86:59:1b:0e:bc:af:f3:18:
         58:7e:aa:4f:98:c7:5d:a4:33:0b:61:ef:49:5b:b1:5a:69:76:
         a0:ae:cc:05:62:20:16:43:c8:62:f7:6b:cb:4c:54:95:fe:a7:
         31:98:b1:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----