Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B5768/D4281494258911F0A52BC8A1DAE4EC9C/nNVhTPkNpR4nc7Xrl72Jk3xQWGE.mft
File:                     nNVhTPkNpR4nc7Xrl72Jk3xQWGE.mft (raw, json)
Hash identifier:          jt5zYG5VERYb+DYdJW6X3OiCC1GM5zlk6HpFyIZAQNs=
Subject key identifier:   E4:D1:57:E5:63:17:86:41:49:58:42:5E:00:F4:A2:23:17:06:96:B7
Authority key identifier: 9C:D5:61:4C:F9:0D:A5:1E:27:73:B5:EB:97:BD:89:93:7C:50:58:61
Certificate issuer:       /CN=F36B5768AF/serialNumber=9CD5614CF90DA51E2773B5EB97BD89937C505861
Certificate serial:       60
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/nNVhTPkNpR4nc7Xrl72Jk3xQWGE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B5768/D4281494258911F0A52BC8A1DAE4EC9C/nNVhTPkNpR4nc7Xrl72Jk3xQWGE.mft
Manifest number:          5F
Signing time:             Thu 31 Jul 2025 05:26:59 +0000
Manifest this update:     Thu 31 Jul 2025 05:26:57 +0000
Manifest next update:     Sat 02 Aug 2025 05:26:57 +0000
Files and hashes:         1: nNVhTPkNpR4nc7Xrl72Jk3xQWGE.crl (hash: RwuVu++BARjbKXwG6DLk+svvyf9koCq4OHu8OGW6hho=)
                          2: 0BF4391E25BE11F0BA0F6C78DAE4EC9C.roa (hash: yV3qp3Snn6vcZINsGIupcA7CLhBh7nsh5NGhTfu+GnU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B5768/D4281494258911F0A52BC8A1DAE4EC9C/nNVhTPkNpR4nc7Xrl72Jk3xQWGE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B5768/D4281494258911F0A52BC8A1DAE4EC9C/nNVhTPkNpR4nc7Xrl72Jk3xQWGE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/nNVhTPkNpR4nc7Xrl72Jk3xQWGE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 02 Aug 2025 00:08:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 96 (0x60)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B5768AF, serialNumber=9CD5614CF90DA51E2773B5EB97BD89937C505861
        Validity
            Not Before: Jul 31 05:26:57 2025 GMT
            Not After : Aug  2 05:26:57 2025 GMT
        Subject: CN=688afea3-6ec7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:7c:5e:45:48:46:6e:da:b6:db:5f:ba:5a:7a:
                    af:36:50:e8:11:f1:a9:87:46:3e:b5:56:7e:af:0f:
                    9b:4d:0e:54:ca:ea:6f:eb:46:8f:a2:3c:12:b7:44:
                    32:5f:2e:8b:4a:1c:90:36:61:85:ad:8a:13:b2:c8:
                    1b:35:ea:a4:c6:eb:4d:c9:b1:3d:67:2b:f6:f9:47:
                    19:f0:4c:13:7f:4e:15:5a:55:bf:c8:e3:de:d4:51:
                    6f:0e:d8:d2:2d:1c:d1:e2:7a:66:e7:18:2a:e4:ae:
                    46:08:74:43:7c:48:db:76:f4:1c:2e:ad:83:aa:32:
                    96:ee:58:cb:1a:eb:89:20:5f:77:2b:a3:5b:69:ab:
                    3d:0a:5c:7c:ac:2e:bd:56:dd:af:46:1a:75:7d:7a:
                    b2:5b:60:45:9f:d3:df:e6:17:fa:46:d4:53:0d:18:
                    3c:f9:18:ae:cd:ff:bf:32:65:c1:25:1a:28:55:3d:
                    11:84:37:8a:3d:6a:c9:cb:b8:60:8b:dc:41:3d:99:
                    31:16:e1:33:98:7c:1d:d6:d7:ac:22:27:45:e8:9e:
                    c1:60:05:7f:93:d2:08:cf:1b:d3:25:18:03:6c:9b:
                    46:4d:ab:c8:ff:32:cc:c0:92:3d:65:4e:99:4d:f3:
                    5a:76:ff:ca:02:3b:7b:e8:3c:c2:1d:60:3f:46:9c:
                    b1:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:D1:57:E5:63:17:86:41:49:58:42:5E:00:F4:A2:23:17:06:96:B7
            X509v3 Authority Key Identifier:
                keyid:9C:D5:61:4C:F9:0D:A5:1E:27:73:B5:EB:97:BD:89:93:7C:50:58:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B5768/D4281494258911F0A52BC8A1DAE4EC9C/nNVhTPkNpR4nc7Xrl72Jk3xQWGE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/nNVhTPkNpR4nc7Xrl72Jk3xQWGE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B5768/D4281494258911F0A52BC8A1DAE4EC9C/nNVhTPkNpR4nc7Xrl72Jk3xQWGE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:5d:fd:00:16:0e:5f:90:bd:12:0f:6e:19:fc:46:ed:a3:66:
         05:e5:53:63:c7:e7:56:4d:69:a1:d9:09:aa:2b:f1:06:97:f8:
         cf:a4:4e:6e:ad:bf:d7:43:ad:d4:64:77:32:9b:df:cf:a9:58:
         83:d3:03:87:e5:ca:4b:0e:f1:dc:45:94:59:f4:8a:c6:90:49:
         49:99:49:a4:fa:c7:63:bb:c5:f5:78:ea:20:38:09:c2:73:1d:
         5e:98:4a:4b:30:31:3a:db:93:a7:68:13:50:25:7e:6b:02:9a:
         db:f7:2a:43:73:1a:cb:a7:ca:71:7d:6e:b1:9d:f6:96:93:26:
         cc:4b:c0:b1:7b:28:ba:7b:72:ed:48:81:d7:d3:b4:1a:4f:2c:
         d1:c0:3b:c5:e7:7b:86:ce:38:50:60:db:e0:46:d5:21:d3:68:
         32:ad:25:f2:70:aa:0b:eb:04:b8:07:56:03:df:42:13:be:6d:
         93:2d:6a:db:31:6c:93:55:79:50:22:47:59:d0:1a:f1:d8:a2:
         31:72:3b:b1:80:44:c0:50:45:54:bb:6b:17:b0:ed:df:ea:06:
         22:1a:7d:26:f3:10:6b:f3:f1:35:64:91:b6:eb:5d:3d:ea:fc:
         09:9d:00:a0:bc:6d:00:f4:88:91:23:3b:c1:ce:81:f4:85:6c:
         4b:43:03:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 11:18:16 2025 by rpki-client