Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DE42D/CC9AA0E641DA11EEB03EBE374AD9E6FC/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.mft
File:                     nYXa0C_Bd6QOm5BwI3BvP5d0TaA.mft (raw, json)
Hash identifier:          mC6mB5H27g/0A0d3yRipdw3ZnU1YQhHQgVfIh4diqbs=
Subject key identifier:   38:C5:16:CE:6B:91:EE:CD:9D:0C:83:37:DC:6F:61:68:91:2D:64:E0
Authority key identifier: 9D:85:DA:D0:2F:C1:77:A4:0E:9B:90:70:23:70:6F:3F:97:74:4D:A0
Certificate issuer:       /CN=F36DE42DRI/serialNumber=9D85DAD02FC177A40E9B907023706F3F97744DA0
Certificate serial:       0341
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DE42D/CC9AA0E641DA11EEB03EBE374AD9E6FC/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.mft
Manifest number:          0340
Signing time:             Fri 07 Nov 2025 05:26:18 +0000
Manifest this update:     Fri 07 Nov 2025 05:26:18 +0000
Manifest next update:     Sun 09 Nov 2025 05:26:18 +0000
Files and hashes:         1: nYXa0C_Bd6QOm5BwI3BvP5d0TaA.crl (hash: ApIjeFri/JMKf9zo4A/tYoAEKNQL5xtH8JI6mwbUbuw=)
                          2: CC9C343441E311EEA3DA33544AD9E6FC.roa (hash: O2w06Y8bPWrlQlM0KiCR/CDJJh42Y1TIJDGWDlX/VL0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36DE42D/CC9AA0E641DA11EEB03EBE374AD9E6FC/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36DE42D/CC9AA0E641DA11EEB03EBE374AD9E6FC/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.mft
                          rsync://rpki.afrinic.net/repository/ripe/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 09 Nov 2025 00:45:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 833 (0x341)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DE42DRI, serialNumber=9D85DAD02FC177A40E9B907023706F3F97744DA0
        Validity
            Not Before: Nov  7 05:26:18 2025 GMT
            Not After : Nov  9 05:26:18 2025 GMT
        Subject: CN=690d82fa-51a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:c0:6b:08:e1:e6:f9:b3:e9:dc:9b:f8:76:2f:
                    df:f1:e3:58:f2:83:11:ec:80:4f:e9:ad:d2:85:3c:
                    83:ef:4c:d3:eb:51:86:62:6c:82:82:1c:2e:94:de:
                    e5:fa:83:d7:5b:4b:88:70:87:ee:29:9b:a1:3f:2a:
                    38:f1:93:cd:1a:11:4f:ff:08:f0:f2:f4:59:1f:a0:
                    6d:06:44:d4:26:40:cb:02:7f:b1:90:7d:4d:70:23:
                    9a:5c:8f:72:4f:99:64:28:ba:2c:94:f3:7f:83:2d:
                    ee:5c:17:97:09:30:f0:80:99:a0:9c:38:12:5b:b0:
                    38:e5:38:51:5e:03:2a:5a:40:6d:3f:17:50:32:e5:
                    20:70:79:0c:21:7c:31:c2:7a:82:d5:ad:e8:58:b2:
                    dc:04:c4:eb:41:c6:31:58:79:2d:be:75:7b:f8:34:
                    f7:27:a0:74:53:15:6c:83:61:16:45:30:02:9e:79:
                    23:0b:ca:fe:f9:d5:05:b4:1c:d7:4b:df:40:d4:c5:
                    c5:2a:ed:f0:a4:8a:2b:6c:0a:7d:a0:f6:b9:56:31:
                    81:76:66:5b:5c:da:3b:87:6d:1d:87:f9:56:62:ec:
                    96:07:06:23:20:c8:6c:e1:cc:7c:fe:de:60:c7:86:
                    b2:f2:90:f7:5b:1d:b9:31:32:f5:17:95:2d:73:26:
                    b0:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:C5:16:CE:6B:91:EE:CD:9D:0C:83:37:DC:6F:61:68:91:2D:64:E0
            X509v3 Authority Key Identifier:
                keyid:9D:85:DA:D0:2F:C1:77:A4:0E:9B:90:70:23:70:6F:3F:97:74:4D:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DE42D/CC9AA0E641DA11EEB03EBE374AD9E6FC/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DE42D/CC9AA0E641DA11EEB03EBE374AD9E6FC/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:d7:1e:63:98:95:0e:50:b3:fb:19:15:ba:60:39:83:07:ef:
         ae:5c:7e:53:c6:a4:43:cb:e3:bb:84:b8:4d:60:db:98:9f:b4:
         72:0b:18:85:64:0d:e9:9f:51:23:d7:3b:26:7e:ea:f2:97:f2:
         6e:c5:24:16:9f:d1:4d:a0:5e:36:20:d8:73:66:d6:94:5c:c5:
         cb:0a:d3:cb:67:36:4b:b1:20:c4:88:39:32:f1:b3:75:22:af:
         c4:23:04:32:af:fd:91:09:09:07:43:6b:d1:ad:d1:1b:0e:b4:
         2a:c7:d2:7e:68:7e:45:40:d0:1b:51:6c:47:1b:9c:6b:87:27:
         3c:5f:de:9b:d9:47:2a:47:a0:88:4b:c2:03:58:42:5a:e0:a3:
         e7:a7:7d:d4:c2:1e:7e:f8:79:48:57:e4:97:2a:82:ca:88:da:
         89:2a:be:f3:64:ae:5a:ab:75:d5:01:b4:b4:f7:82:02:5b:0d:
         7b:38:a1:a5:73:39:58:c5:99:f1:e2:03:e0:ab:7d:d1:73:81:
         04:11:ec:37:b5:f1:7d:23:6d:8d:e7:cd:bc:a4:72:dc:f7:cc:
         8b:f6:9f:6f:49:8a:34:14:2e:08:25:89:6b:dd:89:21:99:9a:
         4b:08:c1:66:e7:eb:fb:d3:aa:e5:ff:96:ca:72:42:db:84:d8:
         d6:75:ec:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 7 08:48:10 2025 by rpki-client