Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E1028/2526B4EAC8A411EC887B5F99F1222468/YiXGU2dIRI8cYBvpr6uCfJptjJg.mft
File:                     YiXGU2dIRI8cYBvpr6uCfJptjJg.mft (raw, json)
Hash identifier:          VTRXoN3KMbKkAO8inRzasLv8UU1skA0ZbkVywxp+QyE=
Subject key identifier:   71:CB:A0:90:0F:0C:9B:42:31:C7:0B:35:B7:72:9C:61:2F:23:EC:F4
Authority key identifier: 62:25:C6:53:67:48:44:8F:1C:60:1B:E9:AF:AB:82:7C:9A:6D:8C:98
Certificate issuer:       /CN=F36E1028RI/serialNumber=6225C6536748448F1C601BE9AFAB827C9A6D8C98
Certificate serial:       0503
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/YiXGU2dIRI8cYBvpr6uCfJptjJg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E1028/2526B4EAC8A411EC887B5F99F1222468/YiXGU2dIRI8cYBvpr6uCfJptjJg.mft
Manifest number:          04FD
Signing time:             Tue 09 Sep 2025 02:44:14 +0000
Manifest this update:     Tue 09 Sep 2025 02:44:13 +0000
Manifest next update:     Thu 11 Sep 2025 02:44:13 +0000
Files and hashes:         1: YiXGU2dIRI8cYBvpr6uCfJptjJg.crl (hash: SHTZ1haRL3lKIMVnxTnwML0FI0RGONpeSyofVZILoOA=)
                          2: 78BBD498055511EEA313DE484AD9E6FC.roa (hash: gcOnw1oPuRTUxnfEp8Cnw2+KJImBfDvkykgZT1R/8jY=)
                          3: EC9655DEBAA211EEAEF6CA61775412E6.roa (hash: yvnXk52RrKBf5bxHjNgZoK+IZnQ2KvhA6TE4cpIiWLU=)
                          4: 1456D4A2586C11EEB137AB2E4AD9E6FC.roa (hash: 0m1O0dIgqFqkbHZ4x0YYbYO8gehKt7WacNKL0mWlsYk=)
                          5: D6EE1EFE055511EEA37AC8494AD9E6FC.roa (hash: oUt21oQyRcYFeyIoTpveRUVSzhhNTG7bwuYrK/bZUtw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E1028/2526B4EAC8A411EC887B5F99F1222468/YiXGU2dIRI8cYBvpr6uCfJptjJg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E1028/2526B4EAC8A411EC887B5F99F1222468/YiXGU2dIRI8cYBvpr6uCfJptjJg.mft
                          rsync://rpki.afrinic.net/repository/ripe/YiXGU2dIRI8cYBvpr6uCfJptjJg.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 11 Sep 2025 00:45:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1283 (0x503)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E1028RI, serialNumber=6225C6536748448F1C601BE9AFAB827C9A6D8C98
        Validity
            Not Before: Sep  9 02:44:13 2025 GMT
            Not After : Sep 11 02:44:13 2025 GMT
        Subject: CN=68bf947e-c92f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a8:e5:5e:c1:c9:88:a1:ce:de:41:b8:b6:ba:
                    7c:e5:2f:f6:d0:fa:72:32:1a:77:4d:f1:19:80:16:
                    45:6c:79:21:94:2d:8b:dd:aa:f8:3e:b2:b3:2d:39:
                    99:5f:3a:21:eb:77:60:87:37:a8:b6:43:bb:d8:0b:
                    19:57:65:b4:46:29:3c:8e:9b:8c:6a:2a:13:d9:68:
                    c0:cb:60:f4:15:50:58:73:bf:10:1e:7d:3f:53:a8:
                    54:87:e5:da:eb:5e:f8:03:9e:f9:96:40:59:32:57:
                    cb:39:88:c2:03:73:b3:59:17:3e:46:d3:1a:b3:05:
                    70:87:eb:6d:6c:17:62:6a:e7:aa:12:bb:d1:c8:81:
                    12:d2:90:0d:bf:7d:f7:d7:93:48:dc:74:d4:4e:9e:
                    02:59:d4:27:25:37:a7:92:12:76:4e:81:0f:2f:f4:
                    d4:2d:02:ec:92:75:b1:54:19:42:c0:87:35:8a:f4:
                    6c:1f:68:fa:dc:48:a8:f1:50:23:67:e2:72:4e:0b:
                    07:c9:e2:c6:6b:d7:77:ca:e8:7d:00:fe:17:62:39:
                    03:5c:7d:82:14:74:c4:78:95:e3:81:d6:5b:7e:5e:
                    10:c5:d9:71:4f:ce:49:3c:10:0c:00:5e:f8:5d:98:
                    51:7e:c1:81:75:b8:51:06:96:b9:eb:66:7d:79:89:
                    37:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:CB:A0:90:0F:0C:9B:42:31:C7:0B:35:B7:72:9C:61:2F:23:EC:F4
            X509v3 Authority Key Identifier:
                keyid:62:25:C6:53:67:48:44:8F:1C:60:1B:E9:AF:AB:82:7C:9A:6D:8C:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E1028/2526B4EAC8A411EC887B5F99F1222468/YiXGU2dIRI8cYBvpr6uCfJptjJg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/YiXGU2dIRI8cYBvpr6uCfJptjJg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E1028/2526B4EAC8A411EC887B5F99F1222468/YiXGU2dIRI8cYBvpr6uCfJptjJg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:35:45:20:b1:31:bc:57:e7:a3:42:59:2d:1f:eb:c2:25:93:
         e4:81:ea:44:8c:21:6b:74:bd:1c:27:ab:2f:2e:82:0b:30:7c:
         bf:6f:86:1e:36:df:9b:d0:fb:58:59:17:75:a4:8f:54:83:68:
         72:14:90:51:01:2a:b3:f3:5a:e7:08:5f:f5:42:10:eb:f6:1f:
         ed:03:6a:40:18:fd:96:7b:a4:4d:87:3f:23:fe:c2:4a:96:e1:
         27:e0:bc:b0:48:fd:91:0c:2d:18:10:8b:86:f0:46:0d:18:c3:
         81:ea:3f:f8:c3:82:e7:5e:bf:76:55:71:04:f6:56:61:01:a5:
         04:97:cc:19:da:9f:72:ec:6b:87:a5:ad:7c:29:bb:0b:2b:ea:
         de:7f:de:60:91:2c:4b:c1:9e:29:32:66:3e:43:22:fd:00:da:
         d1:b5:14:ff:a0:6c:cb:f9:fb:c9:9e:59:a3:0d:ff:11:72:1d:
         94:c3:4d:7d:95:be:c7:f2:86:24:b8:03:0a:85:d1:58:7d:54:
         0b:ea:f3:e3:18:23:56:10:65:3e:4e:d2:14:7d:51:41:4a:ae:
         7c:9f:6a:e8:48:d3:f4:ea:e8:aa:f2:98:0f:a6:16:e5:37:02:
         cd:4f:02:37:77:24:23:a5:12:2a:80:60:fe:db:1d:12:c2:df:
         35:58:40:92
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICBQMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RTEwMjhSSTExMC8GA1UEBRMoNjIyNUM2NTM2NzQ4NDQ4RjFDNjAxQkU5QUZBQjgy
N0M5QTZEOEM5ODAeFw0yNTA5MDkwMjQ0MTNaFw0yNTA5MTEwMjQ0MTNaMBgxFjAU
BgNVBAMTDTY4YmY5NDdlLWM5MmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDJqOVewcmIoc7eQbi2unzlL/bQ+nIyGndN8RmAFkVseSGULYvdqvg+srMt
OZlfOiHrd2CHN6i2Q7vYCxlXZbRGKTyOm4xqKhPZaMDLYPQVUFhzvxAefT9TqFSH
5drrXvgDnvmWQFkyV8s5iMIDc7NZFz5G0xqzBXCH621sF2Jq56oSu9HIgRLSkA2/
fffXk0jcdNROngJZ1CclN6eSEnZOgQ8v9NQtAuySdbFUGULAhzWK9GwfaPrcSKjx
UCNn4nJOCwfJ4sZr13fK6H0A/hdiOQNcfYIUdMR4leOB1lt+XhDF2XFPzkk8EAwA
XvhdmFF+wYF1uFEGlrnrZn15iTd7AgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUccug
kA8Mm0Ixxws1t3KcYS8j7PQwHwYDVR0jBBgwFoAUYiXGU2dIRI8cYBvpr6uCfJpt
jJgwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkUxMDI4LzI1MjZCNEVBQzhBNDExRUM4ODdCNUY5OUYxMjIyNDY4L1lpWEdV
MmRJUkk4Y1lCdnByNnVDZkpwdGpKZy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9yaXBl
L1lpWEdVMmRJUkk4Y1lCdnByNnVDZkpwdGpKZy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2RTEwMjgvMjUyNkI0RUFDOEE0MTFFQzg4N0I1Rjk5RjEyMjI0
NjgvWWlYR1UyZElSSThjWUJ2cHI2dUNmSnB0akpnLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCGNUUgsTG8V+ejQlktH+vCJZPkgepEjCFr
dL0cJ6svLoILMHy/b4YeNt+b0PtYWRd1pI9Ug2hyFJBRASqz81rnCF/1QhDr9h/t
A2pAGP2We6RNhz8j/sJKluEn4LywSP2RDC0YEIuG8EYNGMOB6j/4w4LnXr92VXEE
9lZhAaUEl8wZ2p9y7GuHpa18KbsLK+ref95gkSxLwZ4pMmY+QyL9ANrRtRT/oGzL
+fvJnlmjDf8Rch2Uw019lb7H8oYkuAMKhdFYfVQL6vPjGCNWEGU+TtIUfVFBSq58
n2roSNP06uiq8pgPphblNwLNTwI3dyQjpRIqgGD+2x0Swt81WECS
-----END CERTIFICATE-----
Generated at Tue Sep 9 23:05:21 2025 by rpki-client