Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36DE42D/CC9AA0E641DA11EEB03EBE374AD9E6FC/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.mft
File:                     nYXa0C_Bd6QOm5BwI3BvP5d0TaA.mft (raw, json)
Hash identifier:          75WmS839u1vZTBOPeMIejMA0zqk/+Xxf4UO9SI+t4Uw=
Subject key identifier:   66:6B:23:E6:A0:C1:F1:63:0B:54:22:64:D2:4C:1B:67:4B:FC:EE:82
Authority key identifier: 9D:85:DA:D0:2F:C1:77:A4:0E:9B:90:70:23:70:6F:3F:97:74:4D:A0
Certificate issuer:       /CN=F36DE42DRI/serialNumber=9D85DAD02FC177A40E9B907023706F3F97744DA0
Certificate serial:       04A5
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DE42D/CC9AA0E641DA11EEB03EBE374AD9E6FC/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.mft
Manifest number:          04A4
Signing time:             Tue 27 Oct 2026 03:40:21 +0000
Manifest this update:     Tue 27 Oct 2026 03:40:20 +0000
Manifest next update:     Thu 29 Oct 2026 03:40:20 +0000
Files and hashes:         1: nYXa0C_Bd6QOm5BwI3BvP5d0TaA.crl (hash: A7cFrqLytv1xzgk4P+LF0qR9VLi/t/VTUpwwkBekxgA=)
                          2: CC9C343441E311EEA3DA33544AD9E6FC.roa (hash: O2w06Y8bPWrlQlM0KiCR/CDJJh42Y1TIJDGWDlX/VL0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36DE42D/CC9AA0E641DA11EEB03EBE374AD9E6FC/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36DE42D/CC9AA0E641DA11EEB03EBE374AD9E6FC/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.mft
                          rsync://rpki.afrinic.net/repository/ripe/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 29 Oct 2026 00:45:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1189 (0x4a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DE42DRI, serialNumber=9D85DAD02FC177A40E9B907023706F3F97744DA0
        Validity
            Not Before: Oct 27 03:40:20 2026 GMT
            Not After : Oct 29 03:40:20 2026 GMT
        Subject: CN=6ae01d25-4771
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:10:27:2e:56:64:7a:d4:cf:e8:ee:76:db:20:
                    b5:db:e2:40:ad:c5:58:46:42:ca:6c:24:f2:fb:e8:
                    43:d1:92:e6:69:bc:93:6a:0a:72:ce:22:bf:b1:2c:
                    25:9d:71:63:24:27:fa:d4:35:60:ac:8c:62:7a:25:
                    85:9d:d8:2d:16:a7:0c:19:1a:28:81:a7:f8:09:56:
                    48:8d:a6:30:1c:06:2e:49:7b:94:cf:be:e5:46:57:
                    cc:37:c4:9a:58:c8:dc:1d:c9:97:05:e5:2d:4a:4c:
                    f9:a0:fd:a7:53:03:2b:94:33:f3:82:58:6e:90:6f:
                    ae:e0:aa:eb:f3:8d:4e:8d:ad:20:29:0d:98:9e:a1:
                    77:8d:5b:47:3e:ae:48:14:bc:b1:48:cb:aa:6f:f4:
                    72:f6:d7:aa:2a:dd:ed:8a:06:fe:e0:56:9e:d3:25:
                    e4:6a:24:41:eb:3d:d5:25:1a:de:4c:1e:65:7b:b2:
                    fb:e9:c6:0f:5a:99:cf:d2:9b:cc:76:48:cd:63:fb:
                    6d:7f:52:ec:83:e8:ec:0b:94:59:cf:5e:66:a5:87:
                    38:b8:f5:5f:7d:a9:ee:0d:0a:35:2c:db:24:d8:b8:
                    65:6a:6c:b9:5e:0e:0a:5d:5f:dc:37:87:33:1d:8a:
                    c6:48:6f:52:8f:b8:7e:99:05:2a:9c:f5:0a:82:17:
                    e1:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:6B:23:E6:A0:C1:F1:63:0B:54:22:64:D2:4C:1B:67:4B:FC:EE:82
            X509v3 Authority Key Identifier:
                keyid:9D:85:DA:D0:2F:C1:77:A4:0E:9B:90:70:23:70:6F:3F:97:74:4D:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DE42D/CC9AA0E641DA11EEB03EBE374AD9E6FC/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DE42D/CC9AA0E641DA11EEB03EBE374AD9E6FC/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:7c:ac:73:44:78:28:91:56:91:f0:77:10:e9:ef:2b:ee:01:
         bc:16:43:1a:19:14:38:0b:75:df:3b:04:0f:67:d0:2e:fa:a3:
         07:ca:24:e1:0b:8a:89:b1:5b:ca:87:a6:79:f7:60:9f:c7:9f:
         9e:cc:c2:71:8f:89:a6:bc:7f:eb:89:af:3f:ab:7e:5b:3b:ad:
         ad:54:9f:82:8a:a1:e5:d8:fb:8b:53:56:88:30:76:68:a0:e6:
         cf:10:f6:09:a5:5d:9e:0b:b3:66:8c:04:fe:1a:39:66:20:55:
         75:40:44:f2:04:ee:d9:f2:3a:8e:e7:5d:8d:fa:eb:11:67:0c:
         c3:86:52:ea:b4:bc:4e:0e:c3:b0:b5:19:f2:6a:28:4a:4e:c3:
         44:5d:25:ee:a2:ae:7f:f0:88:d4:54:0f:27:90:25:ea:27:24:
         7c:fa:06:2d:90:be:db:66:17:4f:33:2f:a0:d7:c7:a9:ce:06:
         05:e2:94:af:9c:6f:58:e9:fb:cc:2d:07:a2:cc:23:2b:50:04:
         fe:97:69:7b:e0:b9:1e:e3:c4:c4:c5:10:bb:6c:4d:77:83:94:
         ce:4c:9c:09:b7:0c:df:3d:60:29:50:a1:22:34:84:23:9b:55:
         6b:7f:6a:6a:d0:6f:6c:90:53:81:33:31:67:f5:09:28:4b:e0:
         20:85:25:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----