Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C67A4/AD38F85627B011F19CC9CBAEDAE4EC9C/NfEnWyh-nA-Oo6hLizVKsCS3aXI.mft
File:                     NfEnWyh-nA-Oo6hLizVKsCS3aXI.mft (raw, json)
Hash identifier:          8niElmzjEbPuabgcgq18zX8iXoxQSUXOCpFo/4WD6q0=
Subject key identifier:   3D:EB:BB:FE:B0:47:C3:3C:B6:56:77:3C:DF:54:11:FC:EB:14:9F:44
Authority key identifier: 35:F1:27:5B:28:7E:9C:0F:8E:A3:A8:4B:8B:35:4A:B0:24:B7:69:72
Certificate issuer:       /CN=F36C67A4AF/serialNumber=35F1275B287E9C0F8EA3A84B8B354AB024B76972
Certificate serial:       30
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/NfEnWyh-nA-Oo6hLizVKsCS3aXI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C67A4/AD38F85627B011F19CC9CBAEDAE4EC9C/NfEnWyh-nA-Oo6hLizVKsCS3aXI.mft
Manifest number:          2F
Signing time:             Thu 07 May 2026 05:31:06 +0000
Manifest this update:     Thu 07 May 2026 05:31:05 +0000
Manifest next update:     Sat 09 May 2026 05:31:05 +0000
Files and hashes:         1: NfEnWyh-nA-Oo6hLizVKsCS3aXI.crl (hash: TucX8oyL/G2N6H7CSMCAB6TOIjzoO/s2Hc4Km19LpkQ=)
                          2: 3100489627B211F18A08A3B6DAE4EC9C.roa (hash: KxXVh/K4PRDNOgb6lGt6sWf5pvipfL5DWCni74reBi0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C67A4/AD38F85627B011F19CC9CBAEDAE4EC9C/NfEnWyh-nA-Oo6hLizVKsCS3aXI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C67A4/AD38F85627B011F19CC9CBAEDAE4EC9C/NfEnWyh-nA-Oo6hLizVKsCS3aXI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/NfEnWyh-nA-Oo6hLizVKsCS3aXI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 09 May 2026 00:07:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 48 (0x30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C67A4AF, serialNumber=35F1275B287E9C0F8EA3A84B8B354AB024B76972
        Validity
            Not Before: May  7 05:31:05 2026 GMT
            Not After : May  9 05:31:05 2026 GMT
        Subject: CN=69fc239a-cf55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:9a:05:6d:9e:ed:68:f8:8b:a8:05:a8:95:ad:
                    30:3b:6e:e5:1c:31:0a:3a:c4:52:fa:20:36:2c:e6:
                    71:bd:03:44:10:65:89:a5:59:56:4b:76:0b:9d:3b:
                    00:cc:7a:4d:1f:09:4c:e1:c5:63:d1:7f:d9:4b:bc:
                    41:92:87:3f:16:37:2c:8a:f7:2d:94:e7:02:de:58:
                    ce:f7:3e:2e:28:bd:1e:e4:d0:f2:0c:0e:f1:33:ba:
                    cd:19:1f:15:81:a0:e6:93:78:97:8d:8f:89:09:fd:
                    5e:60:07:33:ab:0e:8f:44:1c:c9:23:61:29:dc:a9:
                    86:78:4c:83:40:bb:5e:02:31:57:9f:7b:39:80:a6:
                    dd:46:c9:08:b9:62:ea:89:60:21:5c:ab:92:3e:55:
                    8f:0e:b6:ea:34:3a:93:a4:30:08:47:b1:07:39:45:
                    a8:84:c1:b0:fa:e7:55:06:1b:e5:52:0a:8b:1a:6b:
                    15:37:a5:60:fa:c1:d2:90:fd:49:fe:a8:cd:a0:8a:
                    65:67:6c:50:4e:5b:36:c4:9e:95:b1:e5:71:ad:37:
                    f8:d2:6f:bd:85:7d:fe:65:c1:63:c1:73:77:1e:20:
                    39:ac:a4:e3:b1:97:4b:e3:ca:9e:89:ac:dc:93:a2:
                    2a:d7:e9:c0:04:a5:9a:f8:4e:0f:e1:c3:7b:cc:41:
                    12:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:EB:BB:FE:B0:47:C3:3C:B6:56:77:3C:DF:54:11:FC:EB:14:9F:44
            X509v3 Authority Key Identifier:
                keyid:35:F1:27:5B:28:7E:9C:0F:8E:A3:A8:4B:8B:35:4A:B0:24:B7:69:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C67A4/AD38F85627B011F19CC9CBAEDAE4EC9C/NfEnWyh-nA-Oo6hLizVKsCS3aXI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/NfEnWyh-nA-Oo6hLizVKsCS3aXI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C67A4/AD38F85627B011F19CC9CBAEDAE4EC9C/NfEnWyh-nA-Oo6hLizVKsCS3aXI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:0f:e6:f9:88:34:51:59:fc:c6:df:58:73:d3:12:99:43:d3:
         85:de:d4:a8:a8:29:d2:9c:09:22:83:e7:44:99:a7:65:99:82:
         9d:4c:05:de:ce:8e:b8:83:92:35:0f:dd:80:76:02:c3:0f:ab:
         ec:7f:dc:36:b2:df:4b:e7:ae:bc:8c:ed:26:58:93:01:06:89:
         32:3e:35:5e:c9:0f:2c:ee:cd:cb:74:22:5b:14:7c:13:39:e4:
         5b:0a:9a:a6:be:d1:cd:f5:90:51:34:8c:ce:59:3d:90:4c:92:
         28:03:bf:d3:14:30:34:d1:c6:7e:67:8e:a8:80:fb:d4:9f:1e:
         4c:21:6c:ac:45:62:7d:ee:36:67:a0:34:b3:cb:30:f0:f7:5c:
         fa:99:82:12:c6:c7:42:19:64:17:f6:09:fb:44:ea:af:49:e0:
         7c:d9:4a:e4:da:c8:b8:94:51:14:b8:cb:1c:23:ef:55:ab:0c:
         5e:80:1b:c8:2b:20:92:4d:b7:1c:d9:c7:44:51:ee:e6:bb:f0:
         09:ee:65:cc:85:d8:de:62:d2:6a:df:a7:c0:5e:e9:80:c9:29:
         a2:18:05:79:03:ed:d9:a6:0e:5b:e7:06:75:e9:cb:f4:74:32:
         c4:3a:54:46:11:5a:78:09:75:4a:ca:ba:e5:78:bb:e0:3b:04:
         39:4b:56:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 21:31:58 2026 by rpki-client