Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FBB68/EEBD11DE767311EB92548A6DF8AEA228/3e9RyKD_hVBdng5v-gInbCpVrug.mft
File:                     3e9RyKD_hVBdng5v-gInbCpVrug.mft (raw, json)
Hash identifier:          Tw2LWOMmuBoBjbjh3Odc/QcpLwvcU4+Gvr4+SjEbs/M=
Subject key identifier:   CB:C4:A5:2A:73:D8:91:5E:C4:85:95:93:C3:0D:C6:98:46:56:7D:8B
Authority key identifier: DD:EF:51:C8:A0:FF:85:50:5D:9E:0E:6F:FA:02:27:6C:2A:55:AE:E8
Certificate issuer:       /CN=F36FBB68AR/serialNumber=DDEF51C8A0FF85505D9E0E6FFA02276C2A55AEE8
Certificate serial:       0695
Authority info access:    rsync://rpki.afrinic.net/repository/arin/3e9RyKD_hVBdng5v-gInbCpVrug.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FBB68/EEBD11DE767311EB92548A6DF8AEA228/3e9RyKD_hVBdng5v-gInbCpVrug.mft
Manifest number:          0691
Signing time:             Sun 27 Jul 2025 02:10:48 +0000
Manifest this update:     Sun 27 Jul 2025 02:10:47 +0000
Manifest next update:     Tue 29 Jul 2025 02:10:47 +0000
Files and hashes:         1: 3e9RyKD_hVBdng5v-gInbCpVrug.crl (hash: MuDNg8h8gXDLz6j80IhZ+Zd8/2UR7lIck03JyKgNWn8=)
                          2: 8EB8874C767711EB81CF8371F8AEA228.roa (hash: a5Ya8AZMPcr4yo5onV+OXArWF7aJzeoyFelL2j6STfo=)
                          3: A8B2187C767511EBB8015C6FF8AEA228.roa (hash: +55ryPzqgEQMEpzdUbqmX7lkwQdExVhKk9NqHf4i0Lk=)
                          4: 1E3F561E8B1A11EBB0DA3D71F8AEA228.roa (hash: Cpd4zmkYKicudOUgZJe6/OaQ296nySd++X2fdJd/rUU=)
                          5: F8B4E3247D9E11EB83704925F8AEA228.roa (hash: 63CDlb9OzE0Ed+gaeo+vCDqqodWQ+GqMecV9r4cwpCQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FBB68/EEBD11DE767311EB92548A6DF8AEA228/3e9RyKD_hVBdng5v-gInbCpVrug.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FBB68/EEBD11DE767311EB92548A6DF8AEA228/3e9RyKD_hVBdng5v-gInbCpVrug.mft
                          rsync://rpki.afrinic.net/repository/arin/3e9RyKD_hVBdng5v-gInbCpVrug.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Jul 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1685 (0x695)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FBB68AR, serialNumber=DDEF51C8A0FF85505D9E0E6FFA02276C2A55AEE8
        Validity
            Not Before: Jul 27 02:10:47 2025 GMT
            Not After : Jul 29 02:10:47 2025 GMT
        Subject: CN=68858aa8-ce2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b1:7e:fa:e8:23:d4:38:62:ce:18:09:bc:6a:
                    a1:8f:18:33:1b:8b:75:5d:96:a8:da:e2:28:d9:88:
                    60:74:f0:5b:33:ee:67:0b:75:d6:c5:9b:cc:db:64:
                    47:c5:54:af:b3:d6:82:60:f0:f5:78:a5:07:5c:8c:
                    a2:ca:ab:0f:2f:33:d6:04:c3:89:d7:b1:ae:1a:e7:
                    6b:3b:e7:8c:e2:65:26:95:7c:46:9d:c0:d4:5d:ea:
                    2e:fc:df:70:da:7b:f6:79:81:c8:c8:e4:79:e9:3d:
                    94:12:6e:7c:a7:bc:fb:4b:2b:dc:88:09:7c:5f:06:
                    73:4a:2d:87:a0:78:54:1e:60:a8:ab:21:61:82:e1:
                    c1:13:74:39:14:aa:cf:c2:36:a9:4f:58:ee:4c:ea:
                    77:b7:c2:ec:66:81:a0:e8:2a:a2:49:0c:d0:88:f2:
                    8a:cc:69:fd:f9:45:50:d8:e5:a7:e5:10:50:98:22:
                    f2:17:de:5d:74:31:38:38:a7:b0:e8:eb:6b:d0:8b:
                    5f:0d:2a:1c:f0:f9:57:cf:6c:15:6b:00:f2:0e:3c:
                    d8:19:95:ac:ae:d1:1a:26:47:60:7a:48:66:db:ad:
                    66:28:9e:7d:35:eb:2a:35:22:28:0f:3a:79:16:2f:
                    36:93:10:1b:6e:ab:2f:91:ac:88:4a:c2:ab:12:24:
                    db:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:C4:A5:2A:73:D8:91:5E:C4:85:95:93:C3:0D:C6:98:46:56:7D:8B
            X509v3 Authority Key Identifier:
                keyid:DD:EF:51:C8:A0:FF:85:50:5D:9E:0E:6F:FA:02:27:6C:2A:55:AE:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FBB68/EEBD11DE767311EB92548A6DF8AEA228/3e9RyKD_hVBdng5v-gInbCpVrug.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/3e9RyKD_hVBdng5v-gInbCpVrug.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FBB68/EEBD11DE767311EB92548A6DF8AEA228/3e9RyKD_hVBdng5v-gInbCpVrug.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:17:41:f0:b1:9b:7e:74:fa:b4:3c:0e:c9:b1:c4:5c:2f:7e:
         24:74:9c:7a:d8:5d:04:f9:8d:bf:13:88:38:33:2a:3e:f9:d5:
         bd:c6:59:3a:52:fd:45:d8:85:c5:01:db:44:68:b2:76:ea:15:
         86:ea:82:ee:b3:e4:2d:1a:16:66:9b:a3:70:45:a0:15:68:4c:
         1c:43:64:97:0d:4b:d1:87:be:97:5f:ab:a7:36:43:d7:af:39:
         a0:ef:12:53:97:39:90:6c:10:18:c0:89:ea:be:1a:61:80:73:
         ce:4b:6f:0c:95:7f:fb:35:b5:ce:7b:05:e0:d6:24:ae:41:d2:
         77:e0:27:05:36:86:3f:94:a7:91:d6:e2:22:f3:64:85:96:b7:
         18:95:39:94:3e:1b:99:03:74:11:41:2b:a4:34:f1:ba:6d:0d:
         8b:a7:0f:21:00:52:9e:52:01:6c:6a:0a:36:ba:db:89:a4:91:
         66:f5:61:41:14:52:da:3f:35:e7:cd:ff:a7:40:3c:2d:87:bf:
         a9:0b:53:7f:cb:bb:67:7f:9c:74:e0:23:e0:32:06:cd:d5:be:
         90:49:2b:85:56:bc:c8:48:8a:9b:64:70:97:66:26:a2:55:b6:
         87:62:02:a3:43:be:73:64:2b:f8:82:b0:79:39:f3:f8:4f:a6:
         16:fa:df:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 16:33:52 2025 by rpki-client