Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CC4C5/F0A872C6DE6B11F0986944EADAE4EC9C/oHAxgIgisopRzqJ21BM9cIqlFO0.mft
File:                     oHAxgIgisopRzqJ21BM9cIqlFO0.mft (raw, json)
Hash identifier:          JU7tYTQKMg259nIFz/HRNRk+oXfk8sixUV0pkgDjSTA=
Subject key identifier:   69:AE:34:09:F5:C1:4A:BF:81:49:2A:1F:77:54:33:F6:2A:D5:A0:B3
Authority key identifier: A0:70:31:80:88:22:B2:8A:51:CE:A2:76:D4:13:3D:70:8A:A5:14:ED
Certificate issuer:       /CN=F36CC4C5RI/serialNumber=A07031808822B28A51CEA276D4133D708AA514ED
Certificate serial:       56
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/oHAxgIgisopRzqJ21BM9cIqlFO0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36CC4C5/F0A872C6DE6B11F0986944EADAE4EC9C/oHAxgIgisopRzqJ21BM9cIqlFO0.mft
Manifest number:          55
Signing time:             Fri 13 Mar 2026 04:41:44 +0000
Manifest this update:     Fri 13 Mar 2026 04:41:43 +0000
Manifest next update:     Sun 15 Mar 2026 04:41:43 +0000
Files and hashes:         1: oHAxgIgisopRzqJ21BM9cIqlFO0.crl (hash: R0Zd1lI70NfK5yeKobLr3IsNyJ/Hr0jGN7IXAGpFolY=)
                          2: 6BB245F8DE6E11F0A9CDBA7BDAE4EC9C.roa (hash: xOgvdv+bzOxwVoZHfk68mQJwNieIGm7/dHTt7BIs17g=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36CC4C5/F0A872C6DE6B11F0986944EADAE4EC9C/oHAxgIgisopRzqJ21BM9cIqlFO0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36CC4C5/F0A872C6DE6B11F0986944EADAE4EC9C/oHAxgIgisopRzqJ21BM9cIqlFO0.mft
                          rsync://rpki.afrinic.net/repository/ripe/oHAxgIgisopRzqJ21BM9cIqlFO0.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 15 Mar 2026 00:45:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 86 (0x56)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36CC4C5RI, serialNumber=A07031808822B28A51CEA276D4133D708AA514ED
        Validity
            Not Before: Mar 13 04:41:43 2026 GMT
            Not After : Mar 15 04:41:43 2026 GMT
        Subject: CN=69b39588-2424
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:31:f5:12:ba:a5:69:da:58:ea:8d:4f:16:d8:
                    35:8a:64:ac:04:89:1b:53:1b:05:2e:36:2b:de:4f:
                    bd:d4:b5:6c:7a:32:65:36:7f:89:c6:94:42:6a:6c:
                    70:03:78:d0:5d:95:19:4c:70:16:ff:23:21:b4:9c:
                    c7:07:b2:fe:06:df:72:21:60:89:e4:7a:94:20:45:
                    41:e3:83:31:dd:d0:5b:0e:ca:1a:20:4b:a7:27:85:
                    09:b4:95:1d:82:0a:8f:87:58:05:2b:89:69:82:46:
                    65:69:5a:02:f7:d5:5d:4b:ae:99:b2:1e:47:cb:3a:
                    7b:0c:90:3b:2a:53:e9:77:4c:a9:f3:61:78:8f:57:
                    dc:40:ae:0a:0f:4b:53:bd:1f:47:46:f9:7b:f2:1e:
                    e7:bf:b3:1e:7d:6a:dd:28:5b:e4:d8:a5:0c:f9:75:
                    80:d1:89:08:0e:46:1a:8f:bf:b2:d6:99:b0:c3:ba:
                    d6:8d:24:4d:20:a6:da:9a:c7:7f:f4:b6:0b:17:e6:
                    46:56:97:77:09:30:c8:de:81:dc:e0:17:c6:67:67:
                    21:46:60:56:4f:32:95:29:0d:41:62:16:43:26:73:
                    bf:13:eb:53:4b:aa:d2:4e:09:ce:35:bf:da:68:88:
                    0c:7f:ea:8c:e0:08:32:48:9f:19:83:d5:18:f8:a2:
                    87:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:AE:34:09:F5:C1:4A:BF:81:49:2A:1F:77:54:33:F6:2A:D5:A0:B3
            X509v3 Authority Key Identifier:
                keyid:A0:70:31:80:88:22:B2:8A:51:CE:A2:76:D4:13:3D:70:8A:A5:14:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36CC4C5/F0A872C6DE6B11F0986944EADAE4EC9C/oHAxgIgisopRzqJ21BM9cIqlFO0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/oHAxgIgisopRzqJ21BM9cIqlFO0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CC4C5/F0A872C6DE6B11F0986944EADAE4EC9C/oHAxgIgisopRzqJ21BM9cIqlFO0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:bf:d5:ca:87:19:c1:0f:52:0f:af:44:06:f9:bb:51:43:a4:
         1b:5c:ef:08:4f:c0:3a:07:3e:1d:d5:48:56:b1:9e:74:59:1f:
         97:94:4a:cd:fd:29:23:a1:c6:ae:cc:a8:83:33:72:01:d8:af:
         c3:73:80:a9:07:13:55:d0:54:c2:7a:07:cb:97:87:ac:6b:f6:
         a3:c6:47:f8:76:6b:a8:f5:e5:1b:45:8b:ef:10:b9:72:5f:9d:
         85:ac:5b:c5:70:3f:d1:bf:01:f3:cc:0d:40:fb:a0:d1:05:f4:
         e8:fc:e5:0a:7e:66:ab:05:90:06:92:79:37:f8:fa:02:66:d2:
         ae:45:46:e2:28:91:26:38:2b:cf:36:a0:f3:60:45:29:e8:1b:
         5b:2e:f2:81:60:10:56:07:8a:93:0d:87:b7:f7:4b:f1:22:f3:
         bd:96:a6:d5:a1:4d:d3:66:62:24:80:bb:8f:47:a8:89:4a:0b:
         35:c8:8f:71:db:32:46:41:bd:f1:6e:af:fa:04:7e:4f:b0:1b:
         ed:76:24:2a:2f:58:49:ef:68:fa:28:c5:46:e9:43:09:aa:62:
         2b:1d:4b:1c:f4:c4:22:60:b4:c7:31:bb:fc:f0:bf:d0:10:ff:
         1d:c1:63:a2:2d:a3:9c:28:f0:38:39:ea:fb:11:f4:9d:3b:d5:
         fa:a4:ba:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 09:46:38 2026 by rpki-client