Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EBDD7/67F004C6BE1D11EB8576B942F8AEA228/lyz9rusSb2_NRpalkPcBiDeqX_I.mft
File:                     lyz9rusSb2_NRpalkPcBiDeqX_I.mft (raw, json)
Hash identifier:          WMPZ6P5Ys4bque3eOKCAVe0W+4SV4qX1E8pJF88aoV8=
Subject key identifier:   3D:02:C3:38:AC:7D:09:BA:05:E3:1B:C4:AD:A6:D2:66:A6:44:EC:2B
Authority key identifier: 97:2C:FD:AE:EB:12:6F:6F:CD:46:96:A5:90:F7:01:88:37:AA:5F:F2
Certificate issuer:       /CN=F36EBDD7RI/serialNumber=972CFDAEEB126F6FCD4696A590F7018837AA5FF2
Certificate serial:       0739
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/lyz9rusSb2_NRpalkPcBiDeqX_I.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EBDD7/67F004C6BE1D11EB8576B942F8AEA228/lyz9rusSb2_NRpalkPcBiDeqX_I.mft
Manifest number:          0738
Signing time:             Mon 27 Apr 2026 02:09:57 +0000
Manifest this update:     Mon 27 Apr 2026 02:09:56 +0000
Manifest next update:     Wed 29 Apr 2026 02:09:56 +0000
Files and hashes:         1: lyz9rusSb2_NRpalkPcBiDeqX_I.crl (hash: u8BKdrNh5XkLHKcwVOxtvN+PXYeUDvAkagA+bs34D0k=)
                          2: FCF2744EE4DD11ED83CFE7E95C736454.roa (hash: 7tfnNvaHIqZ7VHDcLuyEzEdaFsax5cOARy6FVza2SjE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36EBDD7/67F004C6BE1D11EB8576B942F8AEA228/lyz9rusSb2_NRpalkPcBiDeqX_I.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36EBDD7/67F004C6BE1D11EB8576B942F8AEA228/lyz9rusSb2_NRpalkPcBiDeqX_I.mft
                          rsync://rpki.afrinic.net/repository/ripe/lyz9rusSb2_NRpalkPcBiDeqX_I.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 29 Apr 2026 00:45:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1849 (0x739)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EBDD7RI, serialNumber=972CFDAEEB126F6FCD4696A590F7018837AA5FF2
        Validity
            Not Before: Apr 27 02:09:56 2026 GMT
            Not After : Apr 29 02:09:56 2026 GMT
        Subject: CN=69eec575-a0b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:97:2f:39:ab:d3:18:20:e9:e9:48:c9:00:0d:
                    4e:c1:fa:ea:2e:3c:33:80:31:b1:cc:3d:7c:07:89:
                    95:e6:2a:b9:5a:12:ff:e7:91:51:a1:22:45:06:0d:
                    2c:d5:e1:14:d7:66:00:58:63:85:ba:7c:ed:79:de:
                    d1:b6:c7:9a:12:cd:b5:59:f6:05:bc:f5:19:69:88:
                    8e:b0:f7:0c:37:3f:4b:8f:63:13:de:8c:8c:2d:92:
                    15:c8:ae:5e:f7:c5:64:fd:21:d8:78:04:95:56:79:
                    0b:cc:e2:6c:fe:e0:c4:7a:5e:b7:de:58:a4:db:c6:
                    03:fb:46:86:29:cb:38:fc:f8:34:12:64:06:48:88:
                    5c:91:f6:88:6d:01:1e:4f:c0:3e:ee:6a:57:e1:e8:
                    ed:b4:f9:9a:47:74:8d:08:b7:97:31:9b:31:94:b3:
                    b9:8f:26:27:f7:59:bc:38:d6:27:1d:40:9c:18:62:
                    32:99:e9:43:3a:d4:a0:36:b7:43:9b:53:2a:59:9c:
                    40:16:45:54:9c:fa:2b:90:12:ab:29:df:1b:4b:4e:
                    f4:24:f9:2a:ec:08:0e:bb:ac:d5:48:48:7f:02:ec:
                    cd:f8:e3:5a:bb:c7:89:48:95:c2:7d:7a:5f:ac:e6:
                    04:b9:02:c9:65:a5:a0:8d:26:11:0a:e5:3c:f7:9b:
                    94:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:02:C3:38:AC:7D:09:BA:05:E3:1B:C4:AD:A6:D2:66:A6:44:EC:2B
            X509v3 Authority Key Identifier:
                keyid:97:2C:FD:AE:EB:12:6F:6F:CD:46:96:A5:90:F7:01:88:37:AA:5F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EBDD7/67F004C6BE1D11EB8576B942F8AEA228/lyz9rusSb2_NRpalkPcBiDeqX_I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/lyz9rusSb2_NRpalkPcBiDeqX_I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EBDD7/67F004C6BE1D11EB8576B942F8AEA228/lyz9rusSb2_NRpalkPcBiDeqX_I.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:21:17:01:1c:de:65:ed:05:bb:25:dc:bd:82:f3:2f:1b:00:
         03:21:07:2a:fd:04:f3:b2:fa:d8:0b:a9:da:02:22:02:5e:ab:
         37:f2:66:dd:47:7c:d2:13:ac:7a:9c:0e:6f:a1:6b:e4:a0:f8:
         ab:7a:25:e2:be:2b:a9:57:3e:6a:3d:30:4c:7f:35:68:5e:7b:
         25:b9:3d:d4:b8:e4:b7:5b:78:a6:0f:de:81:74:9e:f5:b6:1b:
         d4:79:b5:5c:95:62:0f:e2:2e:c8:c7:1d:b5:3e:fa:dc:1d:7b:
         ca:b2:24:48:36:5f:df:42:63:8a:20:99:bc:d0:e5:d5:c3:61:
         7d:22:23:3e:49:3d:6e:35:91:c3:9e:ce:9f:9d:25:c1:53:d4:
         c3:8e:9d:80:d7:bc:b8:1a:55:5a:76:a0:37:8c:0d:ba:46:34:
         9a:1f:5c:e8:f4:6f:3b:15:f3:e1:da:87:bd:77:8b:8a:6d:05:
         d3:1c:20:8e:14:d4:78:59:7d:e2:4e:5e:4d:b7:be:08:e9:be:
         35:3c:f3:3b:08:a5:f5:41:f3:3d:e3:6c:52:ec:1d:a3:3c:8b:
         5c:c2:ce:13:ea:74:d1:15:40:47:81:ba:b3:8a:b8:45:da:ff:
         db:b5:4f:e0:22:1a:d6:30:09:3d:35:70:73:42:a0:b7:d7:c0:
         59:b5:ed:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 11:59:35 2026 by rpki-client