Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36B5EE7/ED7066526B9011F0819CC681DAE4EC9C/sOuFTcDYmjIzySVR0W0U1DjPVR8.mft
File:                     sOuFTcDYmjIzySVR0W0U1DjPVR8.mft (raw, json)
Hash identifier:          eUww5dwj0CZ/8siMrxqmGt0mfBXwQWvM5j+3eTkqygU=
Subject key identifier:   AA:98:DD:8E:97:F1:EF:9E:FC:A9:35:14:87:47:D8:E7:20:49:92:92
Authority key identifier: B0:EB:85:4D:C0:D8:9A:32:33:C9:25:51:D1:6D:14:D4:38:CF:55:1F
Certificate issuer:       /CN=F36B5EE7RI/serialNumber=B0EB854DC0D89A3233C92551D16D14D438CF551F
Certificate serial:       01A2
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/sOuFTcDYmjIzySVR0W0U1DjPVR8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B5EE7/ED7066526B9011F0819CC681DAE4EC9C/sOuFTcDYmjIzySVR0W0U1DjPVR8.mft
Manifest number:          01A1
Signing time:             Thu 10 Sep 2026 05:01:09 +0000
Manifest this update:     Thu 10 Sep 2026 05:01:08 +0000
Manifest next update:     Sat 12 Sep 2026 05:01:08 +0000
Files and hashes:         1: sOuFTcDYmjIzySVR0W0U1DjPVR8.crl (hash: TAewmJfSbLB6JxLv0360+uQbuH+MTlGRDSGWXg55R3Y=)
                          2: 2CED30A26B9211F0B55B648ADAE4EC9C.roa (hash: 8FK7+AonagW3DFNpcFJhHjfYGIQ/QIt42K+ERVsqWds=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B5EE7/ED7066526B9011F0819CC681DAE4EC9C/sOuFTcDYmjIzySVR0W0U1DjPVR8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B5EE7/ED7066526B9011F0819CC681DAE4EC9C/sOuFTcDYmjIzySVR0W0U1DjPVR8.mft
                          rsync://rpki.afrinic.net/repository/ripe/sOuFTcDYmjIzySVR0W0U1DjPVR8.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 12 Sep 2026 00:45:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 418 (0x1a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B5EE7RI, serialNumber=B0EB854DC0D89A3233C92551D16D14D438CF551F
        Validity
            Not Before: Sep 10 05:01:08 2026 GMT
            Not After : Sep 12 05:01:08 2026 GMT
        Subject: CN=6aa23995-9ffd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e3:46:9e:4d:b1:03:9d:91:3a:17:78:e5:8b:
                    ef:7f:19:2c:33:51:1f:cc:dc:d9:12:40:61:56:a4:
                    4a:d6:d9:b7:40:8b:74:71:93:95:9b:bb:22:8b:56:
                    3c:a0:e9:a5:8a:a2:29:a2:4e:cc:74:07:37:02:07:
                    40:c2:80:0d:21:80:a4:71:89:a7:43:b4:86:69:6b:
                    8a:b4:64:2d:60:07:4f:7b:1d:f9:b6:ed:57:74:b6:
                    a9:d7:f3:7a:dd:43:27:ac:07:a9:95:d3:26:bf:e8:
                    f5:b6:79:87:da:75:b8:54:90:9e:c9:f1:f6:6e:91:
                    97:84:24:57:dc:93:17:54:d2:a0:ba:ae:98:8e:d0:
                    7c:72:97:cd:46:b9:bc:41:ac:a4:d2:5d:21:6c:b4:
                    a4:eb:65:22:ee:61:81:c6:7d:1d:d2:05:58:13:b2:
                    23:cb:a2:2b:73:b3:b1:73:b5:ec:5c:79:8f:3d:8c:
                    3b:b3:79:07:73:a8:7e:a6:1f:8e:2a:06:00:2b:e6:
                    e3:60:5a:91:d4:f3:9f:0d:dd:0d:04:0a:c8:12:dc:
                    1b:ee:d6:46:31:65:d2:6a:21:19:ee:e8:9a:df:34:
                    37:72:b4:ff:88:a6:36:3f:da:e2:69:27:46:be:69:
                    e5:fb:6f:2b:b2:48:ef:c5:e6:05:14:92:b6:23:65:
                    42:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:98:DD:8E:97:F1:EF:9E:FC:A9:35:14:87:47:D8:E7:20:49:92:92
            X509v3 Authority Key Identifier:
                keyid:B0:EB:85:4D:C0:D8:9A:32:33:C9:25:51:D1:6D:14:D4:38:CF:55:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B5EE7/ED7066526B9011F0819CC681DAE4EC9C/sOuFTcDYmjIzySVR0W0U1DjPVR8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/sOuFTcDYmjIzySVR0W0U1DjPVR8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B5EE7/ED7066526B9011F0819CC681DAE4EC9C/sOuFTcDYmjIzySVR0W0U1DjPVR8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:82:39:57:ef:e3:89:e8:3a:f9:40:d6:bb:99:90:82:d3:56:
         26:46:49:4f:cb:7f:60:bb:2d:a9:d0:0d:d1:08:f1:63:42:b9:
         4d:10:3b:0b:71:76:ca:c5:ca:65:1e:9a:a9:44:a1:bb:47:63:
         95:ae:11:4f:dc:a1:f9:29:9f:0a:ed:12:19:55:93:95:2c:a3:
         7f:ff:38:0a:a3:50:77:b4:02:8e:d8:b4:dc:76:28:e7:c1:9a:
         b0:de:c1:4e:c8:fd:c0:ed:93:92:66:22:e7:f5:ff:c1:60:b7:
         72:89:8e:91:0c:90:f1:66:ba:77:79:7b:2c:43:7e:7f:ce:50:
         b1:e4:e8:71:d8:67:44:82:b4:28:5a:11:bd:8f:de:8a:26:30:
         ed:ec:88:21:46:e2:07:24:b6:60:ed:df:97:11:48:4c:ee:44:
         32:f7:39:4b:48:d7:3e:bc:91:85:7d:e7:4d:d0:f5:4d:4b:6e:
         84:6a:20:6b:15:22:e0:1f:11:cd:ea:f7:73:a4:66:56:34:f3:
         48:f1:8e:16:3f:83:f2:7e:7b:c4:24:ce:09:79:da:ee:9e:88:
         93:a1:07:9d:cc:f3:b6:84:f5:64:f7:d9:02:5e:b0:d7:df:1a:
         71:da:07:ea:27:54:14:fe:21:f9:a7:6e:64:7a:00:53:70:bb:
         8d:f3:30:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----