Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C684F/C401133ED48311E98A92991CF8AEA228/qq2zeUNQh6CU8n12Cd-4YvxcxGU.mft
File:                     qq2zeUNQh6CU8n12Cd-4YvxcxGU.mft (raw, json)
Hash identifier:          YKSxxLv1mtZrlRjM2Eyby6veJr9sGMJD7ihLZZQTBos=
Subject key identifier:   40:3C:24:4F:37:E0:D8:59:56:FD:2F:5A:FE:79:36:23:72:1A:62:8D
Authority key identifier: AA:AD:B3:79:43:50:87:A0:94:F2:7D:76:09:DF:B8:62:FC:5C:C4:65
Certificate issuer:       /CN=F36C684FRI/serialNumber=AAADB379435087A094F27D7609DFB862FC5CC465
Certificate serial:       08F1
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/qq2zeUNQh6CU8n12Cd-4YvxcxGU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C684F/C401133ED48311E98A92991CF8AEA228/qq2zeUNQh6CU8n12Cd-4YvxcxGU.mft
Manifest number:          08F1
Signing time:             Sun 26 Oct 2025 01:35:00 +0000
Manifest this update:     Sun 26 Oct 2025 01:34:59 +0000
Manifest next update:     Tue 28 Oct 2025 01:34:59 +0000
Files and hashes:         1: qq2zeUNQh6CU8n12Cd-4YvxcxGU.crl (hash: iFZZCUAQdtGXgvxoj+Uvzc8yhwfWin6WfPwFCSRXchw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C684F/C401133ED48311E98A92991CF8AEA228/qq2zeUNQh6CU8n12Cd-4YvxcxGU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C684F/C401133ED48311E98A92991CF8AEA228/qq2zeUNQh6CU8n12Cd-4YvxcxGU.mft
                          rsync://rpki.afrinic.net/repository/ripe/qq2zeUNQh6CU8n12Cd-4YvxcxGU.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 28 Oct 2025 00:45:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2289 (0x8f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C684FRI, serialNumber=AAADB379435087A094F27D7609DFB862FC5CC465
        Validity
            Not Before: Oct 26 01:34:59 2025 GMT
            Not After : Oct 28 01:34:59 2025 GMT
        Subject: CN=68fd7ac3-e2a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:64:93:ba:30:e3:49:d7:b7:af:e1:e6:f5:96:
                    88:83:73:a4:f8:81:94:58:8d:b7:23:80:7b:87:d4:
                    1f:15:a4:92:19:cb:77:76:e6:03:b7:69:93:d2:9a:
                    f6:13:97:9e:9e:f2:f3:a6:6b:62:62:88:66:74:39:
                    a6:5a:8b:99:18:8b:4d:bc:34:a0:78:4a:75:5b:ce:
                    92:54:5c:60:66:8a:98:df:bb:19:2c:e0:d7:5c:65:
                    c1:d3:9d:61:a0:05:d6:b1:c9:94:92:a4:67:96:59:
                    a8:c2:e3:f7:ac:1e:7f:67:9c:1a:ed:09:ee:a7:7c:
                    0c:ce:28:e1:f4:da:74:71:b8:81:09:8f:86:9d:a3:
                    a6:19:c1:fb:d2:97:68:23:a4:1d:64:a3:d5:78:62:
                    ae:d4:6e:84:28:0d:a3:cb:f7:b1:8a:7a:b4:18:b4:
                    b3:5e:cb:f0:3f:df:bc:e5:82:54:4a:4b:d6:53:b8:
                    f2:bd:f0:a7:f4:ff:96:85:c7:6b:5c:44:1e:ee:f6:
                    48:4e:ce:d8:3d:c8:9a:57:39:ef:4b:6e:ba:02:bf:
                    0f:05:73:c7:f7:58:31:30:0c:36:cb:a9:e9:f4:21:
                    f3:ee:2d:5c:c5:c4:72:c4:a2:12:2d:8a:2e:5a:d1:
                    92:71:6b:ca:b1:2b:04:a8:a1:92:fb:e0:1f:c9:fc:
                    c5:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:3C:24:4F:37:E0:D8:59:56:FD:2F:5A:FE:79:36:23:72:1A:62:8D
            X509v3 Authority Key Identifier:
                keyid:AA:AD:B3:79:43:50:87:A0:94:F2:7D:76:09:DF:B8:62:FC:5C:C4:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C684F/C401133ED48311E98A92991CF8AEA228/qq2zeUNQh6CU8n12Cd-4YvxcxGU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/qq2zeUNQh6CU8n12Cd-4YvxcxGU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C684F/C401133ED48311E98A92991CF8AEA228/qq2zeUNQh6CU8n12Cd-4YvxcxGU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:8b:89:13:d5:0f:9b:c4:fe:f2:91:c8:d2:94:16:67:80:aa:
         d6:11:09:b2:ee:5c:a7:ce:dc:34:18:3a:a1:95:20:ce:5c:44:
         61:3e:bc:9b:16:bd:a9:2a:32:d5:e1:f9:b8:55:af:39:5c:9f:
         76:46:63:0b:9d:92:48:17:97:41:05:c8:3a:71:ec:b9:a2:da:
         06:b8:3f:23:74:38:9f:70:70:3e:51:ac:ac:60:b9:e1:d5:5e:
         bf:72:27:32:9c:1b:55:90:9a:26:1d:1a:96:7f:be:b5:40:58:
         3e:31:e1:64:0f:b9:6d:e0:51:ce:3e:c6:55:80:be:9a:9f:d1:
         6c:04:8b:6a:15:14:50:51:c8:5f:6f:ac:1d:2a:6a:50:0b:8f:
         51:7c:f7:1f:41:bd:cf:1c:76:2a:40:0c:db:97:cd:78:61:fb:
         a7:f4:59:14:46:50:bf:7a:3f:f2:57:e5:e7:8c:ad:55:7b:6d:
         74:f3:84:a6:42:51:01:5f:25:2c:20:82:e3:10:6c:8d:83:e6:
         c4:ac:c7:1c:81:eb:72:2d:12:30:15:41:04:db:27:d3:31:a2:
         60:ab:f4:f7:3c:59:36:54:f0:23:da:ce:87:b6:1e:71:8a:04:
         3f:99:c3:31:4e:c9:d9:f8:26:d1:ae:a2:b0:3c:6a:a6:bf:46:
         52:d8:ed:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 04:35:56 2025 by rpki-client