Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C01B9/AFDA9FDCDA2E11EEA6D125A7775412E6/OWSdY4-MUgk4TWK4gN9_jH5G4fs.mft
File:                     OWSdY4-MUgk4TWK4gN9_jH5G4fs.mft (raw, json)
Hash identifier:          CIynYJ4al/WpImJAflpKecgRjelniLnfI9TS5RBfJs8=
Subject key identifier:   A1:18:08:72:A4:0C:E8:44:2F:78:C2:92:B7:B9:56:41:39:49:D1:79
Authority key identifier: 39:64:9D:63:8F:8C:52:09:38:4D:62:B8:80:DF:7F:8C:7E:46:E1:FB
Certificate issuer:       /CN=F36C01B9RI/serialNumber=39649D638F8C5209384D62B880DF7F8C7E46E1FB
Certificate serial:       0388
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/OWSdY4-MUgk4TWK4gN9_jH5G4fs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C01B9/AFDA9FDCDA2E11EEA6D125A7775412E6/OWSdY4-MUgk4TWK4gN9_jH5G4fs.mft
Manifest number:          0384
Signing time:             Sun 26 Jul 2026 04:03:54 +0000
Manifest this update:     Sun 26 Jul 2026 04:03:54 +0000
Manifest next update:     Tue 28 Jul 2026 04:03:54 +0000
Files and hashes:         1: OWSdY4-MUgk4TWK4gN9_jH5G4fs.crl (hash: gHVCxDqbawmfXsUSubzfpJnsDUiGvLLMwLWLV/DcHo8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C01B9/AFDA9FDCDA2E11EEA6D125A7775412E6/OWSdY4-MUgk4TWK4gN9_jH5G4fs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C01B9/AFDA9FDCDA2E11EEA6D125A7775412E6/OWSdY4-MUgk4TWK4gN9_jH5G4fs.mft
                          rsync://rpki.afrinic.net/repository/ripe/OWSdY4-MUgk4TWK4gN9_jH5G4fs.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 28 Jul 2026 04:03:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 904 (0x388)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C01B9RI, serialNumber=39649D638F8C5209384D62B880DF7F8C7E46E1FB
        Validity
            Not Before: Jul 26 04:03:54 2026 GMT
            Not After : Jul 28 04:03:54 2026 GMT
        Subject: CN=6a65872a-91a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:0e:14:25:60:56:94:fc:7e:e3:5c:bf:1e:78:
                    49:93:82:a1:6d:b2:39:e6:8b:29:93:04:69:cf:1a:
                    2b:08:bf:f0:1f:de:81:7d:1f:01:54:fb:fb:0d:e7:
                    d9:ea:48:f0:29:59:ef:29:a9:bd:e3:b4:40:fc:38:
                    e3:d4:e6:e6:6f:8f:a6:18:2c:d6:37:27:5a:79:68:
                    5a:fa:ef:1b:42:d6:ce:bd:47:74:94:81:9f:4f:2a:
                    c6:e8:b9:ce:73:d6:00:c6:8c:02:a1:5c:29:18:e9:
                    36:4a:72:65:4d:74:ed:65:d3:29:19:c3:90:c4:6f:
                    41:c0:2c:62:df:c4:74:48:a2:76:75:0f:08:e6:1f:
                    c4:af:eb:a8:a3:da:3f:82:45:7c:bc:64:d7:d4:1d:
                    36:51:f7:f5:16:fb:ae:f5:83:58:66:38:89:47:20:
                    4b:44:ad:bc:9d:69:29:67:76:a1:b7:02:70:f2:31:
                    bb:5e:6d:e6:ba:b3:b2:17:1b:65:7c:72:df:a6:e8:
                    00:3e:2b:8d:1c:98:c9:ac:de:f8:b8:20:87:85:a7:
                    26:94:cd:7c:33:dd:97:af:95:d9:03:d1:6b:65:44:
                    95:61:39:79:aa:b7:37:bf:0a:2c:b3:1e:c8:a8:f6:
                    b9:a5:7d:65:ae:fe:80:3f:af:6d:ca:05:18:3d:8c:
                    84:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:18:08:72:A4:0C:E8:44:2F:78:C2:92:B7:B9:56:41:39:49:D1:79
            X509v3 Authority Key Identifier:
                keyid:39:64:9D:63:8F:8C:52:09:38:4D:62:B8:80:DF:7F:8C:7E:46:E1:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C01B9/AFDA9FDCDA2E11EEA6D125A7775412E6/OWSdY4-MUgk4TWK4gN9_jH5G4fs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/OWSdY4-MUgk4TWK4gN9_jH5G4fs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C01B9/AFDA9FDCDA2E11EEA6D125A7775412E6/OWSdY4-MUgk4TWK4gN9_jH5G4fs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:96:65:e8:46:5a:e5:00:ea:51:2a:28:1f:7e:85:19:c3:d6:
         4a:72:64:12:5f:88:63:7e:53:df:43:f3:b1:7c:eb:23:30:c9:
         f2:6d:f8:bf:d5:0d:69:3c:a6:09:a2:ea:8e:7f:e5:1c:c0:68:
         0d:8b:3b:8c:d6:57:69:9a:6a:c1:e3:51:58:3b:84:38:53:9c:
         5e:89:4b:cd:80:58:1c:33:7d:6a:c1:e8:11:57:68:a2:2a:8d:
         c6:c6:2b:91:06:79:a9:52:d2:79:0b:12:cd:d7:b3:8d:5c:a9:
         91:bc:c4:46:ae:1a:82:d2:e6:d7:c5:52:61:f5:4f:66:75:85:
         fa:6e:35:c7:fa:55:fa:4c:ae:fd:a7:17:85:fa:42:02:60:27:
         2a:2e:df:ae:66:a6:32:9a:df:bf:23:1b:ef:b2:1c:db:d6:22:
         08:b4:89:3c:43:a8:88:2d:0c:d8:f6:57:fe:61:9a:75:d4:dd:
         4a:fb:90:35:5a:f6:57:dd:e6:ce:58:e8:59:80:09:fb:ca:41:
         87:4b:39:c6:0c:d7:ce:e8:78:a7:47:f9:dc:d1:b7:37:3e:1b:
         52:c7:cd:62:28:a2:fa:f4:b3:ef:e6:fd:9b:af:8e:2c:f6:76:
         e5:65:d9:d1:22:df:65:80:f7:53:27:c0:ae:9a:c3:2e:29:94:
         3b:d5:17:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 04:22:20 2026 by rpki-client