Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B5EE7/ED7066526B9011F0819CC681DAE4EC9C/sOuFTcDYmjIzySVR0W0U1DjPVR8.mft
File:                     sOuFTcDYmjIzySVR0W0U1DjPVR8.mft (raw, json)
Hash identifier:          59rV5iUsPI5A0n2i+1OhENUqm1myaKs2oeyBNyiIyzs=
Subject key identifier:   DD:44:5A:21:4A:0F:65:38:9D:1A:BC:18:25:99:EA:96:34:93:09:22
Authority key identifier: B0:EB:85:4D:C0:D8:9A:32:33:C9:25:51:D1:6D:14:D4:38:CF:55:1F
Certificate issuer:       /CN=F36B5EE7RI/serialNumber=B0EB854DC0D89A3233C92551D16D14D438CF551F
Certificate serial:       39
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/sOuFTcDYmjIzySVR0W0U1DjPVR8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B5EE7/ED7066526B9011F0819CC681DAE4EC9C/sOuFTcDYmjIzySVR0W0U1DjPVR8.mft
Manifest number:          38
Signing time:             Fri 19 Sep 2025 05:12:11 +0000
Manifest this update:     Fri 19 Sep 2025 05:12:10 +0000
Manifest next update:     Sun 21 Sep 2025 05:12:10 +0000
Files and hashes:         1: sOuFTcDYmjIzySVR0W0U1DjPVR8.crl (hash: R5MIur0/8Kdah4gQMnsqMz4P/Hgyy5xOqhDfM8uLda4=)
                          2: 2CED30A26B9211F0B55B648ADAE4EC9C.roa (hash: 8FK7+AonagW3DFNpcFJhHjfYGIQ/QIt42K+ERVsqWds=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B5EE7/ED7066526B9011F0819CC681DAE4EC9C/sOuFTcDYmjIzySVR0W0U1DjPVR8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B5EE7/ED7066526B9011F0819CC681DAE4EC9C/sOuFTcDYmjIzySVR0W0U1DjPVR8.mft
                          rsync://rpki.afrinic.net/repository/ripe/sOuFTcDYmjIzySVR0W0U1DjPVR8.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Sep 2025 00:45:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 57 (0x39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B5EE7RI, serialNumber=B0EB854DC0D89A3233C92551D16D14D438CF551F
        Validity
            Not Before: Sep 19 05:12:10 2025 GMT
            Not After : Sep 21 05:12:10 2025 GMT
        Subject: CN=68cce62b-ae06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a3:47:35:0c:32:d1:0a:f1:db:6d:2a:ce:e1:
                    4d:9b:99:75:f1:f6:58:ea:c0:65:14:10:5d:ec:87:
                    a7:ec:27:19:bf:cf:f9:89:7d:fd:40:52:53:1f:a4:
                    2b:c3:08:e7:79:df:3c:e0:4c:e7:a2:57:1c:3c:44:
                    13:74:f5:0b:e1:df:26:7d:93:08:b0:68:0c:90:d0:
                    d4:fc:58:a6:a9:71:65:4d:02:22:18:71:f8:00:37:
                    95:9d:08:0a:ac:34:04:d9:8c:03:b8:c0:da:be:ec:
                    69:a3:64:b1:6b:37:33:16:6d:b1:62:84:5a:8f:ae:
                    81:6f:32:5d:2a:2d:6a:6d:de:c4:41:63:22:5e:69:
                    4c:58:77:67:cb:78:11:23:fc:9e:68:ed:45:fb:72:
                    39:8f:53:63:db:6b:cf:2a:80:d3:f8:2e:8c:d4:1f:
                    49:0c:41:59:6f:df:e6:e0:2b:76:0a:c1:45:02:9a:
                    d6:8c:7d:58:66:fb:8d:7e:d1:31:c1:89:37:74:60:
                    36:59:27:ac:58:e5:4c:3d:99:ae:64:d6:52:bb:51:
                    d9:c1:f1:7a:6a:9e:db:cf:b7:d4:7e:ab:a2:10:e8:
                    ce:42:94:71:12:fd:cf:54:63:2d:3d:a0:f7:66:f4:
                    04:56:ac:25:45:65:8a:cc:f8:85:5d:ba:93:9f:3d:
                    fb:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:44:5A:21:4A:0F:65:38:9D:1A:BC:18:25:99:EA:96:34:93:09:22
            X509v3 Authority Key Identifier:
                keyid:B0:EB:85:4D:C0:D8:9A:32:33:C9:25:51:D1:6D:14:D4:38:CF:55:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B5EE7/ED7066526B9011F0819CC681DAE4EC9C/sOuFTcDYmjIzySVR0W0U1DjPVR8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/sOuFTcDYmjIzySVR0W0U1DjPVR8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B5EE7/ED7066526B9011F0819CC681DAE4EC9C/sOuFTcDYmjIzySVR0W0U1DjPVR8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:85:96:90:40:5b:a2:fe:18:12:b8:49:d4:7a:02:05:06:a8:
         ae:e4:31:a7:9c:2f:3d:0d:ea:1a:64:dc:6d:8d:e9:87:c3:e6:
         65:82:7d:1d:40:3a:5a:93:2c:9d:99:36:bd:fa:57:a5:43:9c:
         93:13:94:c7:92:e6:34:67:fd:4e:ce:4b:b4:f4:6a:6a:df:b9:
         50:6b:d2:65:15:2f:25:1a:0b:b7:e2:bf:b2:37:18:af:4c:0c:
         1d:64:33:34:db:37:9b:68:1e:89:29:85:ec:1e:c3:bf:07:7c:
         8c:25:04:bb:d6:5b:2b:ba:46:26:31:f8:8c:87:a9:29:12:c0:
         61:ed:97:a6:e4:c6:5f:d4:21:04:1b:eb:71:5c:e0:27:76:2b:
         5d:c9:0b:11:24:d2:2d:1e:c4:e2:71:7e:e8:81:fa:62:be:aa:
         8a:7c:9b:6c:ec:af:fe:06:04:f4:90:46:12:ad:9e:02:a5:63:
         42:8e:ef:0f:57:a2:ee:86:e7:5e:ac:23:da:2d:5a:4c:7f:71:
         1a:d5:42:65:bf:f8:02:41:b7:e8:b5:1e:89:f9:b3:ce:01:00:
         3b:54:4b:58:54:a0:c4:74:4f:41:7c:43:16:c1:ec:82:1c:ed:
         88:86:02:9a:e2:24:ef:0f:10:f2:03:be:3d:57:71:c3:87:12:
         5b:a5:8d:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 15:27:31 2025 by rpki-client