Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C684F/C401133ED48311E98A92991CF8AEA228/qq2zeUNQh6CU8n12Cd-4YvxcxGU.mft
File:                     qq2zeUNQh6CU8n12Cd-4YvxcxGU.mft (raw, json)
Hash identifier:          Tsm4rdntcmUfyNFonRDPQAQCzg+MUkntDTfiXUjA4Jk=
Subject key identifier:   AE:AE:9A:B5:F3:77:D6:92:71:9B:F9:91:D2:56:1E:33:80:3F:BB:FB
Authority key identifier: AA:AD:B3:79:43:50:87:A0:94:F2:7D:76:09:DF:B8:62:FC:5C:C4:65
Certificate issuer:       /CN=F36C684FRI/serialNumber=AAADB379435087A094F27D7609DFB862FC5CC465
Certificate serial:       08B4
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/qq2zeUNQh6CU8n12Cd-4YvxcxGU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C684F/C401133ED48311E98A92991CF8AEA228/qq2zeUNQh6CU8n12Cd-4YvxcxGU.mft
Manifest number:          08B4
Signing time:             Tue 26 Aug 2025 01:40:40 +0000
Manifest this update:     Tue 26 Aug 2025 01:40:39 +0000
Manifest next update:     Thu 28 Aug 2025 01:40:39 +0000
Files and hashes:         1: qq2zeUNQh6CU8n12Cd-4YvxcxGU.crl (hash: u4H4bp4egP9ObeKy3uWCkpOm6BarCYOTOQVQAzpmRTI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C684F/C401133ED48311E98A92991CF8AEA228/qq2zeUNQh6CU8n12Cd-4YvxcxGU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C684F/C401133ED48311E98A92991CF8AEA228/qq2zeUNQh6CU8n12Cd-4YvxcxGU.mft
                          rsync://rpki.afrinic.net/repository/ripe/qq2zeUNQh6CU8n12Cd-4YvxcxGU.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 28 Aug 2025 00:45:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2228 (0x8b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C684FRI, serialNumber=AAADB379435087A094F27D7609DFB862FC5CC465
        Validity
            Not Before: Aug 26 01:40:39 2025 GMT
            Not After : Aug 28 01:40:39 2025 GMT
        Subject: CN=68ad1098-c6ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:5d:b8:06:95:3f:1e:a8:c0:9f:4a:fd:91:55:
                    5d:02:ac:69:c3:38:c4:9e:0f:57:60:25:09:c2:ab:
                    22:99:d3:d2:9d:bf:1a:96:65:2c:87:fd:6f:52:ff:
                    5d:81:bb:db:6f:c4:c7:a5:0c:eb:8d:45:89:f5:82:
                    f0:b1:42:14:12:ec:6b:60:51:46:6d:52:ea:a0:83:
                    43:03:b9:39:a5:57:54:33:db:f2:34:c3:20:e8:14:
                    9e:e8:ca:7f:d4:12:05:ed:42:c3:86:c6:63:b4:7b:
                    a8:d0:e2:b8:74:ed:11:3a:8a:cb:34:c9:7a:c9:b1:
                    24:c3:15:6c:1c:28:2e:81:41:cf:30:09:76:fa:c0:
                    1a:e3:f1:a7:ad:8b:33:3d:66:71:88:74:0d:18:ec:
                    8a:d5:a7:77:cb:ad:84:05:0f:6c:e6:0c:fd:97:fb:
                    63:d6:a2:d7:14:e1:0a:0b:7f:30:21:c1:7b:75:af:
                    c9:30:ab:80:70:db:e8:2f:0d:56:f2:3d:48:0e:69:
                    79:00:6e:80:fe:92:b7:e5:26:52:1b:e4:aa:99:e4:
                    88:23:7a:f2:12:f2:e5:45:bd:bc:fe:58:ef:2f:bb:
                    c4:88:07:73:17:d9:af:b7:0f:88:8b:80:a0:7f:16:
                    ad:ab:ca:bd:45:2e:e4:bd:9f:71:c3:98:f9:7d:b7:
                    7f:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:AE:9A:B5:F3:77:D6:92:71:9B:F9:91:D2:56:1E:33:80:3F:BB:FB
            X509v3 Authority Key Identifier:
                keyid:AA:AD:B3:79:43:50:87:A0:94:F2:7D:76:09:DF:B8:62:FC:5C:C4:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C684F/C401133ED48311E98A92991CF8AEA228/qq2zeUNQh6CU8n12Cd-4YvxcxGU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/qq2zeUNQh6CU8n12Cd-4YvxcxGU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C684F/C401133ED48311E98A92991CF8AEA228/qq2zeUNQh6CU8n12Cd-4YvxcxGU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:dc:08:5b:6c:42:10:88:71:fe:71:66:53:b9:f3:c4:e4:70:
         f4:e1:92:d9:a9:ba:58:42:fe:d2:f3:3d:a7:c4:26:89:92:a7:
         28:52:08:c2:cb:37:fc:73:99:62:08:1a:e1:fa:37:60:53:d1:
         7f:81:d2:20:b9:6b:ff:c7:6d:5f:ee:b6:0e:96:75:8d:79:1c:
         2a:6a:03:a4:e1:0d:da:18:cf:29:4c:3e:43:13:ab:10:4a:86:
         24:90:27:3c:4d:f5:30:2b:d7:96:73:dc:10:b6:6a:28:0e:b5:
         84:9d:75:61:d5:ab:56:92:42:d7:7f:ab:77:ee:75:db:e5:c1:
         44:03:4f:3e:44:36:99:8e:53:f5:58:ec:fb:ff:46:77:d7:aa:
         21:e7:1e:82:1d:8b:07:b4:b6:13:d5:a3:56:7a:74:5d:08:d5:
         8e:75:81:8a:a7:07:0e:68:17:5a:e4:9c:f5:d1:3b:ed:4c:1a:
         08:aa:d6:e4:74:4d:97:b7:5d:0d:00:e0:16:98:73:c5:76:00:
         4e:b2:47:24:15:54:fa:87:bf:b7:51:32:61:33:40:96:d4:f0:
         b8:0c:1d:90:28:d0:81:45:d0:29:f6:69:b6:5f:b5:ad:eb:69:
         db:00:08:9d:39:32:aa:a9:f2:57:40:f9:bb:ff:17:d7:83:93:
         59:d9:e3:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 26 10:15:41 2025 by rpki-client