Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DE42D/CC9AA0E641DA11EEB03EBE374AD9E6FC/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.mft
File:                     nYXa0C_Bd6QOm5BwI3BvP5d0TaA.mft (raw, json)
Hash identifier:          0MnKEmR3268DBtE5auT+idL4apIweoQ1l8Qsh7oamLo=
Subject key identifier:   28:0D:98:48:15:CC:B2:E3:82:6E:FF:0F:6B:CB:4B:1F:72:09:4C:39
Authority key identifier: 9D:85:DA:D0:2F:C1:77:A4:0E:9B:90:70:23:70:6F:3F:97:74:4D:A0
Certificate issuer:       /CN=F36DE42DRI/serialNumber=9D85DAD02FC177A40E9B907023706F3F97744DA0
Certificate serial:       0448
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DE42D/CC9AA0E641DA11EEB03EBE374AD9E6FC/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.mft
Manifest number:          0447
Signing time:             Sun 26 Jul 2026 03:41:07 +0000
Manifest this update:     Sun 26 Jul 2026 03:41:07 +0000
Manifest next update:     Tue 28 Jul 2026 03:41:07 +0000
Files and hashes:         1: nYXa0C_Bd6QOm5BwI3BvP5d0TaA.crl (hash: b1cJKtAujJBfxCKl8/E+r8TpoDCiVjCaNJcrjVIVbho=)
                          2: CC9C343441E311EEA3DA33544AD9E6FC.roa (hash: O2w06Y8bPWrlQlM0KiCR/CDJJh42Y1TIJDGWDlX/VL0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36DE42D/CC9AA0E641DA11EEB03EBE374AD9E6FC/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36DE42D/CC9AA0E641DA11EEB03EBE374AD9E6FC/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.mft
                          rsync://rpki.afrinic.net/repository/ripe/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 28 Jul 2026 03:41:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1096 (0x448)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DE42DRI, serialNumber=9D85DAD02FC177A40E9B907023706F3F97744DA0
        Validity
            Not Before: Jul 26 03:41:07 2026 GMT
            Not After : Jul 28 03:41:07 2026 GMT
        Subject: CN=6a6581d3-4f03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:68:ea:90:fa:8f:13:08:b1:1a:e0:0a:ed:fa:
                    1b:fc:a3:17:86:f9:f7:4c:04:ba:c8:57:e7:ab:a8:
                    8d:12:3b:e9:79:99:a3:84:11:7f:99:b0:f2:87:70:
                    75:ce:b4:a5:fa:9a:36:46:04:ed:37:8f:61:90:86:
                    c1:21:50:3a:d7:c3:39:3d:55:64:73:48:be:7b:1e:
                    dd:bc:5d:94:71:b0:61:39:1a:ec:41:ea:68:50:42:
                    12:bd:30:74:4c:5c:c2:31:aa:9b:97:df:7c:62:45:
                    12:e6:03:89:8e:b8:61:09:df:39:bd:4f:f8:8c:d2:
                    7a:9b:88:a2:54:58:92:96:4b:37:d6:7b:71:33:48:
                    51:7f:de:97:4c:3d:ed:05:4e:6c:84:44:0f:7f:91:
                    5b:3d:f6:9b:95:42:7f:0f:4c:eb:30:f8:70:ef:4f:
                    23:c0:27:61:46:57:b3:8f:25:2e:34:9b:a4:dd:bb:
                    ca:bc:b3:3f:8d:d6:22:85:f7:57:49:d8:b8:b4:32:
                    21:bb:84:0a:d6:d7:c9:30:37:0d:1b:e0:66:89:e4:
                    d5:bd:9d:96:ae:47:90:b1:b3:9b:43:7f:5f:f4:fe:
                    14:a4:33:73:18:d8:87:d9:6f:0e:2b:cb:2c:43:57:
                    c4:3f:81:81:7e:11:84:ca:02:cf:33:15:34:a9:7f:
                    94:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:0D:98:48:15:CC:B2:E3:82:6E:FF:0F:6B:CB:4B:1F:72:09:4C:39
            X509v3 Authority Key Identifier:
                keyid:9D:85:DA:D0:2F:C1:77:A4:0E:9B:90:70:23:70:6F:3F:97:74:4D:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DE42D/CC9AA0E641DA11EEB03EBE374AD9E6FC/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DE42D/CC9AA0E641DA11EEB03EBE374AD9E6FC/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:bc:81:b8:d4:63:eb:cc:89:af:5a:d6:3c:db:55:01:b3:72:
         f1:85:71:60:40:92:9c:1a:c0:9a:80:38:43:87:24:74:3d:9f:
         9b:3b:57:8e:c0:38:f2:b9:70:a9:27:e1:74:bc:a5:a9:6f:dd:
         b7:fd:88:11:c6:77:17:91:d1:3d:e3:f8:04:be:b2:63:f8:ad:
         e3:f9:9f:94:41:fc:ce:34:76:c3:16:3f:60:54:d8:cc:f3:df:
         d9:a0:87:26:f2:89:05:80:5a:f3:f2:1b:49:d5:32:5f:89:f5:
         41:2c:bb:81:6a:d6:cd:15:f0:07:bf:3b:7b:f9:4d:e6:a8:15:
         8a:bb:33:6b:c5:1f:8d:03:57:cf:6b:d9:bd:9b:22:27:4f:e6:
         90:e1:b3:12:8c:db:2e:6f:6b:c9:f2:4e:3e:5c:da:cc:8a:a3:
         3b:95:7d:71:4e:72:5d:f0:7f:b8:87:38:e4:78:61:50:22:4a:
         8d:29:c0:02:42:2a:f3:71:95:2a:be:87:f9:d9:c7:05:c4:07:
         d5:39:e0:4a:91:3d:31:2c:1b:ae:fc:5d:4c:b5:98:38:fa:19:
         de:7d:34:b3:49:69:ec:b5:01:52:df:8b:ee:45:4e:b1:68:ca:
         d3:42:71:bb:f9:e7:39:48:ec:95:f2:8a:f4:da:97:de:03:c2:
         46:11:b0:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 04:23:37 2026 by rpki-client