Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3616EA4/D074417C354E11F097434DA3DAE4EC9C/h2h0NgiWQiWeHHlERxdaLHZY6qw.mft
File:                     h2h0NgiWQiWeHHlERxdaLHZY6qw.mft (raw, json)
Hash identifier:          49PSeGmU0/179SG1GJhi8no7z6yYMQrTPx2weO8mcWI=
Subject key identifier:   9F:96:52:F6:00:17:92:2C:8E:DC:38:A0:65:7F:7F:EC:56:B1:20:F1
Authority key identifier: 87:68:74:36:08:96:42:25:9E:1C:79:44:47:17:5A:2C:76:58:EA:AC
Certificate issuer:       /CN=F3616EA4AF/serialNumber=87687436089642259E1C794447175A2C7658EAAC
Certificate serial:       01BB
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/h2h0NgiWQiWeHHlERxdaLHZY6qw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3616EA4/D074417C354E11F097434DA3DAE4EC9C/h2h0NgiWQiWeHHlERxdaLHZY6qw.mft
Manifest number:          01B8
Signing time:             Fri 24 Jul 2026 04:53:06 +0000
Manifest this update:     Fri 24 Jul 2026 04:53:05 +0000
Manifest next update:     Sun 26 Jul 2026 04:53:05 +0000
Files and hashes:         1: h2h0NgiWQiWeHHlERxdaLHZY6qw.crl (hash: SUrKFWeBQ8sK8Pn1UGTeJ+htc5IfRbmOMaKrkcyeIqY=)
                          2: 60A315E6417711F0BAB45C7CDAE4EC9C.roa (hash: 1DDIa6aslINFzcXNYReTt3YTJSjzz9Bz8PpNSRKmn4s=)
                          3: 8ABD40685DBA11F0882F677FDAE4EC9C.roa (hash: LtTHAsI+8AgzrnAlcOiN9VsFsRmyEiAm6n6J+entv6Q=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3616EA4/D074417C354E11F097434DA3DAE4EC9C/h2h0NgiWQiWeHHlERxdaLHZY6qw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3616EA4/D074417C354E11F097434DA3DAE4EC9C/h2h0NgiWQiWeHHlERxdaLHZY6qw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/h2h0NgiWQiWeHHlERxdaLHZY6qw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 26 Jul 2026 00:07:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 443 (0x1bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3616EA4AF, serialNumber=87687436089642259E1C794447175A2C7658EAAC
        Validity
            Not Before: Jul 24 04:53:05 2026 GMT
            Not After : Jul 26 04:53:05 2026 GMT
        Subject: CN=6a62efb2-f6b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:c4:85:47:06:c4:27:c3:57:e8:80:b8:38:28:
                    41:4d:c4:9f:64:c9:77:7e:a1:a5:d5:4e:ef:9f:85:
                    08:9e:45:fe:b5:22:00:f2:29:98:71:ab:eb:4c:cc:
                    24:4b:d4:f8:d7:2e:bb:17:dc:cb:5b:e4:45:54:86:
                    9b:28:78:9f:ef:ad:fd:ec:46:5b:5b:ae:35:7d:78:
                    59:16:31:33:57:ac:2e:b2:f5:d4:c6:23:86:be:db:
                    52:9a:3d:4a:de:ab:b3:b1:f0:21:ad:16:b0:3c:0f:
                    09:d1:fa:24:11:2c:9a:3a:c8:87:65:d5:e7:6e:2d:
                    04:13:7a:9d:30:30:db:e4:6d:29:2d:b3:49:28:b9:
                    59:f5:4e:4e:01:62:8d:f9:89:ec:08:d6:56:e9:a5:
                    44:fb:a2:33:50:c0:2d:ee:b9:ff:51:00:98:ef:91:
                    73:87:71:cd:58:59:c9:7c:eb:ce:1b:3c:6e:d9:8d:
                    4d:7d:e4:62:34:e8:e3:63:1a:a1:1f:bc:ac:cb:ed:
                    26:84:32:75:69:9a:d3:a3:77:5e:85:79:ef:a6:8a:
                    b0:f9:ae:e3:2a:4f:34:e8:e6:55:f4:40:35:30:a3:
                    e7:25:52:d1:35:e8:94:93:5e:b4:02:33:2e:5e:ea:
                    a6:7e:c5:2c:1d:cf:97:9f:cb:1b:00:77:19:bb:d4:
                    e6:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:96:52:F6:00:17:92:2C:8E:DC:38:A0:65:7F:7F:EC:56:B1:20:F1
            X509v3 Authority Key Identifier:
                keyid:87:68:74:36:08:96:42:25:9E:1C:79:44:47:17:5A:2C:76:58:EA:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3616EA4/D074417C354E11F097434DA3DAE4EC9C/h2h0NgiWQiWeHHlERxdaLHZY6qw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/h2h0NgiWQiWeHHlERxdaLHZY6qw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3616EA4/D074417C354E11F097434DA3DAE4EC9C/h2h0NgiWQiWeHHlERxdaLHZY6qw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ce:26:33:54:21:52:83:9e:b2:e7:b3:01:c8:be:06:2c:ad:ed:
         80:13:87:16:0c:60:c5:9a:f3:c0:e4:9b:59:2d:89:58:06:07:
         ff:4c:b5:97:bc:31:46:dd:26:5d:6f:24:52:c3:4f:30:aa:07:
         d4:f4:a5:0f:91:36:bd:c9:79:95:fb:a1:53:77:96:7b:0b:49:
         92:37:93:d7:1c:f2:5b:dc:0b:79:41:4a:78:e6:c6:b8:4a:4b:
         dc:67:b2:4e:ed:f6:15:76:97:48:98:65:1a:a0:0b:e9:8a:75:
         18:b9:8e:03:b6:bd:7c:19:c2:ce:f3:a1:28:d9:9e:b2:d8:82:
         9f:ca:c1:b7:c1:b8:8f:08:8d:dc:3d:77:a9:13:fe:8c:d4:0d:
         fa:19:a4:91:93:12:3b:6b:6b:e1:98:c9:bb:11:9a:1e:c2:e4:
         45:d3:48:69:85:48:2f:f0:8c:92:a1:16:ad:5c:57:b5:fb:37:
         bb:5c:ef:35:a5:c4:f8:50:d3:ec:64:37:52:91:0f:51:57:62:
         8d:12:b0:7c:77:05:1f:21:a8:b6:a8:2a:53:05:03:7e:fe:d6:
         03:86:cf:59:3f:a9:a6:8e:67:07:94:51:09:39:28:27:1d:f9:
         55:ec:03:da:b2:c3:25:23:46:e6:83:fa:f8:50:41:cd:ab:93:
         bd:36:fd:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:24:53 2026 by rpki-client