Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36FB4CD/B321F4FEC17D11F1A69FE1DCCE1D38B0/Dri02bCDtqoVZiHtqi0RESt8WAQ.mft
File:                     Dri02bCDtqoVZiHtqi0RESt8WAQ.mft (raw, json)
Hash identifier:          ns34WfOgWY4qpxhHcbLBSYLglSI24nU4Cp/x7/YnZeU=
Subject key identifier:   60:7F:2C:49:BC:BC:BB:4F:04:AF:12:F8:96:2C:26:C0:2B:C1:12:7F
Authority key identifier: 0E:B8:B4:D9:B0:83:B6:AA:15:66:21:ED:AA:2D:11:11:2B:7C:58:04
Certificate issuer:       /CN=F36FB4CDRI/serialNumber=0EB8B4D9B083B6AA156621EDAA2D11112B7C5804
Certificate serial:       16
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/Dri02bCDtqoVZiHtqi0RESt8WAQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FB4CD/B321F4FEC17D11F1A69FE1DCCE1D38B0/Dri02bCDtqoVZiHtqi0RESt8WAQ.mft
Manifest number:          16
Signing time:             Tue 27 Oct 2026 05:59:42 +0000
Manifest this update:     Tue 27 Oct 2026 05:59:42 +0000
Manifest next update:     Thu 29 Oct 2026 05:59:42 +0000
Files and hashes:         1: Dri02bCDtqoVZiHtqi0RESt8WAQ.crl (hash: DiateLL+f1Bw8HPh8U+eiE3IBXU/PZacyYb5VhS511o=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FB4CD/B321F4FEC17D11F1A69FE1DCCE1D38B0/Dri02bCDtqoVZiHtqi0RESt8WAQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FB4CD/B321F4FEC17D11F1A69FE1DCCE1D38B0/Dri02bCDtqoVZiHtqi0RESt8WAQ.mft
                          rsync://rpki.afrinic.net/repository/ripe/Dri02bCDtqoVZiHtqi0RESt8WAQ.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 29 Oct 2026 00:45:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 22 (0x16)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FB4CDRI, serialNumber=0EB8B4D9B083B6AA156621EDAA2D11112B7C5804
        Validity
            Not Before: Oct 27 05:59:42 2026 GMT
            Not After : Oct 29 05:59:42 2026 GMT
        Subject: CN=6ae03dce-dd33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:9a:9f:72:00:18:b5:34:08:8f:c9:ff:9c:e2:
                    25:b2:4c:4a:91:33:05:35:fc:42:12:14:c7:ac:07:
                    f7:94:38:ec:40:e5:f2:b1:59:44:c3:ac:f5:b6:2c:
                    a2:8f:f7:51:c8:b5:ee:1c:61:01:3b:b2:97:aa:d7:
                    e1:94:4b:51:b0:f3:07:a1:d4:af:d7:af:50:37:d7:
                    18:f0:47:e2:9f:fd:bd:07:d1:82:44:b3:a3:f7:84:
                    7e:96:39:a4:1a:be:d7:3f:da:41:41:8c:7b:68:19:
                    f8:6f:9d:ea:e0:75:16:b2:1a:47:57:a3:df:cb:57:
                    6a:bc:2e:b5:ca:19:e3:4e:fd:92:e1:ca:39:11:ba:
                    7f:ad:c7:4c:c1:60:01:f5:3f:b6:c4:f0:45:7d:8b:
                    0e:a5:41:6a:c6:2b:6e:0e:69:b1:b9:f7:3a:90:38:
                    77:9b:75:74:52:68:28:c1:68:28:8b:f3:8d:2f:cf:
                    02:56:3e:d4:12:b5:8f:84:ad:ec:0e:bc:90:4c:98:
                    91:5a:68:ed:73:5c:80:b9:66:19:c0:6d:f8:8f:e7:
                    3e:f7:92:2e:d0:1d:c9:5e:56:48:69:71:40:4d:ca:
                    14:3a:36:d6:c3:9e:6f:83:b6:ae:c1:4d:25:4a:77:
                    26:7b:3e:c4:53:41:91:86:e4:76:6a:be:29:9c:c9:
                    0a:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:7F:2C:49:BC:BC:BB:4F:04:AF:12:F8:96:2C:26:C0:2B:C1:12:7F
            X509v3 Authority Key Identifier:
                keyid:0E:B8:B4:D9:B0:83:B6:AA:15:66:21:ED:AA:2D:11:11:2B:7C:58:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FB4CD/B321F4FEC17D11F1A69FE1DCCE1D38B0/Dri02bCDtqoVZiHtqi0RESt8WAQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/Dri02bCDtqoVZiHtqi0RESt8WAQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FB4CD/B321F4FEC17D11F1A69FE1DCCE1D38B0/Dri02bCDtqoVZiHtqi0RESt8WAQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:0d:fe:76:2d:24:1e:d0:7c:3a:e0:f1:d6:87:c3:9b:49:e7:
         df:59:bd:ed:04:09:48:1e:81:b6:8f:f9:d4:c9:4b:f9:09:f1:
         63:04:ae:47:ba:91:a9:10:04:3c:26:ce:84:a3:c9:28:85:ac:
         ee:22:75:e2:03:16:c8:e3:6d:b5:27:cd:a9:b8:66:93:35:b2:
         d9:1d:38:8f:f4:51:66:bb:e9:6c:ed:1f:9a:37:aa:34:2a:1f:
         9f:59:9b:ed:b4:ea:1b:74:d2:cb:85:a2:12:cb:34:a8:f4:70:
         69:60:dd:73:5f:1f:c1:4b:23:cd:62:f6:6d:92:e0:33:7f:51:
         36:d6:2a:14:6c:d4:a0:c4:6f:fb:9b:2a:29:d0:f1:36:6c:ef:
         94:57:8f:83:7a:00:d7:be:7f:6e:a3:9e:e4:ce:d4:ee:c4:b3:
         51:39:eb:b2:ab:1c:b2:57:69:87:14:c9:67:71:65:74:14:2f:
         da:a7:e1:15:6e:e4:0c:01:8d:37:23:68:30:38:56:cb:f7:d1:
         90:aa:9a:d3:60:ca:49:49:6e:39:23:68:c3:a4:5a:b3:c6:1e:
         d4:ed:09:5c:ea:55:1a:c3:f6:43:d6:da:42:b0:0a:eb:fa:f7:
         7d:37:1b:9c:8a:d4:0f:fe:a9:e2:1d:ab:dd:02:9b:c2:fa:a7:
         1d:b6:9e:72
-----BEGIN CERTIFICATE-----
MIIFkjCCBHqgAwIBAgIBFjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzZG
QjRDRFJJMTEwLwYDVQQFEygwRUI4QjREOUIwODNCNkFBMTU2NjIxRURBQTJEMTEx
MTJCN0M1ODA0MB4XDTI2MTAyNzA1NTk0MloXDTI2MTAyOTA1NTk0MlowGDEWMBQG
A1UEAxMNNmFlMDNkY2UtZGQzMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANean3IAGLU0CI/J/5ziJbJMSpEzBTX8QhIUx6wH95Q47EDl8rFZRMOs9bYs
oo/3Uci17hxhATuyl6rX4ZRLUbDzB6HUr9evUDfXGPBH4p/9vQfRgkSzo/eEfpY5
pBq+1z/aQUGMe2gZ+G+d6uB1FrIaR1ej38tXarwutcoZ4079kuHKORG6f63HTMFg
AfU/tsTwRX2LDqVBasYrbg5psbn3OpA4d5t1dFJoKMFoKIvzjS/PAlY+1BK1j4St
7A68kEyYkVpo7XNcgLlmGcBt+I/nPveSLtAdyV5WSGlxQE3KFDo21sOeb4O2rsFN
JUp3Jns+xFNBkYbkdmq+KZzJCvkCAwEAAaOCArUwggKxMB0GA1UdDgQWBBRgfyxJ
vLy7TwSvEviWLCbAK8ESfzAfBgNVHSMEGDAWgBQOuLTZsIO2qhVmIe2qLRERK3xY
BDAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2RkI0Q0QvQjMyMUY0RkVDMTdEMTFGMUE2OUZFMURDQ0UxRDM4QjAvRHJpMDJi
Q0R0cW9WWmlIdHFpMFJFU3Q4V0FRLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L3JpcGUv
RHJpMDJiQ0R0cW9WWmlIdHFpMFJFU3Q4V0FRLmNlcjBPBgNVHSABAf8ERTBDMEEG
CCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmljLm5l
dC9wb2xpY3kvQ1BTLnBkZjCB1QYIKwYBBQUHAQsEgcgwgcUwgYsGCCsGAQUFBzAL
hn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVw
b3NpdG9yeS9GMzZGQjRDRC9CMzIxRjRGRUMxN0QxMUYxQTY5RkUxRENDRTFEMzhC
MC9EcmkwMmJDRHRxb1ZaaUh0cWkwUkVTdDhXQVEubWZ0MDUGCCsGAQUFBzANhilo
dHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEF
BQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwDQYJKoZIhvcNAQELBQADggEBAHsN/nYtJB7QfDrg8daHw5tJ599Zve0ECUge
gbaP+dTJS/kJ8WMErke6kakQBDwmzoSjySiFrO4ideIDFsjjbbUnzam4ZpM1stkd
OI/0UWa76WztH5o3qjQqH59Zm+206ht00suFohLLNKj0cGlg3XNfH8FLI81i9m2S
4DN/UTbWKhRs1KDEb/ubKinQ8TZs75RXj4N6ANe+f26jnuTO1O7Es1E567KrHLJX
aYcUyWdxZXQUL9qn4RVu5AwBjTcjaDA4Vsv30ZCqmtNgyklJbjkjaMOkWrPGHtTt
CVzqVRrD9kPW2kKwCuv69303G5yK1A/+qeIdq90Cm8L6px22nnI=
-----END CERTIFICATE-----