Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36E38E5/C89F9E94553E11ED8E2230CAF1222468/e5XIh1o9qSB6rcxUQDFzjYpiLas.mft
File:                     e5XIh1o9qSB6rcxUQDFzjYpiLas.mft (raw, json)
Hash identifier:          dt84gGS/z73GnR0i6bDTyvjhk1ykJxYkokSxbP6odAw=
Subject key identifier:   2B:1B:DC:D2:6E:8D:1D:D0:43:CF:A8:77:A7:D6:98:0F:CB:2F:B7:5A
Authority key identifier: 7B:95:C8:87:5A:3D:A9:20:7A:AD:CC:54:40:31:73:8D:8A:62:2D:AB
Certificate issuer:       /CN=F36E38E5AF/serialNumber=7B95C8875A3DA9207AADCC544031738D8A622DAB
Certificate serial:       05DE
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/e5XIh1o9qSB6rcxUQDFzjYpiLas.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E38E5/C89F9E94553E11ED8E2230CAF1222468/e5XIh1o9qSB6rcxUQDFzjYpiLas.mft
Manifest number:          05DE
Signing time:             Mon 26 Oct 2026 03:03:54 +0000
Manifest this update:     Mon 26 Oct 2026 03:03:53 +0000
Manifest next update:     Wed 28 Oct 2026 03:03:53 +0000
Files and hashes:         1: e5XIh1o9qSB6rcxUQDFzjYpiLas.crl (hash: ZCsFeKYTBxSpY3nM5WSD8pLsgHtcxQbDxqtNKR10858=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E38E5/C89F9E94553E11ED8E2230CAF1222468/e5XIh1o9qSB6rcxUQDFzjYpiLas.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E38E5/C89F9E94553E11ED8E2230CAF1222468/e5XIh1o9qSB6rcxUQDFzjYpiLas.mft
                          rsync://rpki.afrinic.net/repository/afrinic/e5XIh1o9qSB6rcxUQDFzjYpiLas.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 28 Oct 2026 03:03:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1502 (0x5de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E38E5AF, serialNumber=7B95C8875A3DA9207AADCC544031738D8A622DAB
        Validity
            Not Before: Oct 26 03:03:53 2026 GMT
            Not After : Oct 28 03:03:53 2026 GMT
        Subject: CN=6adec31a-bdd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:5b:8f:94:78:5d:2c:96:09:fe:97:c8:62:28:
                    36:c7:bc:39:0e:13:7c:80:99:33:46:e9:50:94:6f:
                    26:bf:4f:b2:c3:c8:1c:4e:f3:51:4e:e0:fe:d1:2a:
                    e0:71:a7:4f:96:94:d3:db:3b:5d:62:02:f7:9d:4a:
                    1c:08:53:a1:6c:a6:e9:ef:6d:92:b2:8e:f1:6c:5e:
                    eb:32:c3:de:41:83:27:ba:a3:fa:e8:02:c5:b9:9c:
                    3b:31:44:35:eb:26:82:c3:71:7b:35:1c:80:be:1a:
                    b8:91:75:38:e3:e1:d8:09:1c:41:a3:32:f3:0f:53:
                    70:9f:5d:e9:23:90:ae:4b:5c:c0:03:78:0a:87:74:
                    52:0e:47:03:cd:f4:28:b3:ea:3b:2b:33:12:66:bd:
                    85:c2:05:bd:84:bf:8c:cf:b8:05:9c:cc:ee:e3:5c:
                    2e:93:ec:ac:69:0b:0a:ba:a0:dc:70:7b:70:70:02:
                    f0:d4:20:e3:2e:3e:b2:e6:50:4c:04:1f:39:21:06:
                    a2:49:0f:99:c5:9a:cc:34:f3:01:5b:44:6a:d4:53:
                    0d:e6:7a:07:92:84:d0:8d:5e:bb:59:55:6a:eb:e5:
                    97:5e:63:f7:0d:68:30:7b:1f:0d:c1:e3:23:77:04:
                    ed:a0:bf:24:96:b2:44:40:41:2a:52:77:cc:78:45:
                    4b:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:1B:DC:D2:6E:8D:1D:D0:43:CF:A8:77:A7:D6:98:0F:CB:2F:B7:5A
            X509v3 Authority Key Identifier:
                keyid:7B:95:C8:87:5A:3D:A9:20:7A:AD:CC:54:40:31:73:8D:8A:62:2D:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E38E5/C89F9E94553E11ED8E2230CAF1222468/e5XIh1o9qSB6rcxUQDFzjYpiLas.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/e5XIh1o9qSB6rcxUQDFzjYpiLas.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E38E5/C89F9E94553E11ED8E2230CAF1222468/e5XIh1o9qSB6rcxUQDFzjYpiLas.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:4e:e5:43:60:16:49:dd:16:bc:f1:b4:c1:71:6b:78:1f:ec:
         16:0f:7c:1c:19:c8:7e:56:4a:60:8f:bc:1e:02:19:ab:eb:c2:
         40:68:6b:86:9f:fc:f9:5b:ce:68:df:1b:ab:71:05:f1:44:d1:
         d3:cc:7c:3b:8e:43:66:e6:9d:2f:5b:95:0d:81:ef:1e:e3:56:
         be:a9:f5:71:6e:2e:ff:af:d5:2c:2c:ed:74:51:b1:a8:0f:4c:
         82:8f:32:15:e4:43:1d:99:d2:eb:ea:72:0a:1a:cf:3a:73:ff:
         0c:8d:81:70:03:b4:a4:c6:62:2d:23:de:ff:b4:cb:14:fa:d8:
         60:19:85:08:1b:82:d9:a0:8e:87:5c:c2:92:9d:99:72:8c:d9:
         2d:a9:2f:bb:89:c0:78:10:74:fc:00:8b:82:cc:80:21:d8:1f:
         ae:e6:74:de:6b:49:0a:de:df:6a:0c:87:be:39:46:e3:9e:e7:
         cb:a8:67:6d:a3:24:86:3e:61:17:a4:d2:c9:5b:35:77:72:94:
         74:3f:c1:4b:71:e2:3d:6b:b9:5f:44:46:15:a5:16:10:49:a3:
         3e:cd:67:14:25:b0:cc:30:42:be:90:f5:86:b1:7b:89:99:b9:
         6a:9e:aa:76:0f:6c:f4:6a:12:e2:52:0f:55:a0:e4:91:75:c2:
         cb:ad:7c:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----