Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3619C8C/DE28B16C5FDA11EF8ACEB9A9762E951A/D1pm1nbRb8eSfE4kaUoejHekQGs.mft
File:                     D1pm1nbRb8eSfE4kaUoejHekQGs.mft (raw, json)
Hash identifier:          BwQh2Xp3EnZmW2qiLlP25I56Jt8Pfmf+VZm0nJ73Dvo=
Subject key identifier:   30:00:BF:0F:E0:80:B5:B0:A6:9F:A9:3B:2E:30:30:BE:6D:1B:47:09
Authority key identifier: 0F:5A:66:D6:76:D1:6F:C7:92:7C:4E:24:69:4A:1E:8C:77:A4:40:6B
Certificate issuer:       /CN=F3619C8CRI/serialNumber=0F5A66D676D16FC7927C4E24694A1E8C77A4406B
Certificate serial:       028C
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/D1pm1nbRb8eSfE4kaUoejHekQGs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3619C8C/DE28B16C5FDA11EF8ACEB9A9762E951A/D1pm1nbRb8eSfE4kaUoejHekQGs.mft
Manifest number:          028B
Signing time:             Wed 13 May 2026 04:26:03 +0000
Manifest this update:     Wed 13 May 2026 04:26:02 +0000
Manifest next update:     Fri 15 May 2026 04:26:02 +0000
Files and hashes:         1: D1pm1nbRb8eSfE4kaUoejHekQGs.crl (hash: uo1rL94izV83IUFce7Q3Hj5Q+g6/nIZCBwKvw0rvoTo=)
                          2: 556811145FEA11EF84A2058A762E951A.roa (hash: P0gvfxM0hcVTDkEmLqEkHZpP55/CRPi31FOdnN+KXYg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3619C8C/DE28B16C5FDA11EF8ACEB9A9762E951A/D1pm1nbRb8eSfE4kaUoejHekQGs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3619C8C/DE28B16C5FDA11EF8ACEB9A9762E951A/D1pm1nbRb8eSfE4kaUoejHekQGs.mft
                          rsync://rpki.afrinic.net/repository/ripe/D1pm1nbRb8eSfE4kaUoejHekQGs.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 15 May 2026 00:45:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 652 (0x28c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3619C8CRI, serialNumber=0F5A66D676D16FC7927C4E24694A1E8C77A4406B
        Validity
            Not Before: May 13 04:26:02 2026 GMT
            Not After : May 15 04:26:02 2026 GMT
        Subject: CN=6a03fd5b-fe7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:8d:23:b6:95:86:0e:17:6b:86:a4:f8:ed:07:
                    a7:d1:5f:88:85:73:47:02:b5:9e:75:d9:c3:84:2f:
                    89:f0:99:3d:63:01:65:d8:4d:95:fd:48:a7:0c:0d:
                    1a:b7:e0:86:7a:69:fd:eb:0d:e9:24:3a:41:db:b2:
                    9b:0f:40:cf:36:c4:35:ed:a6:e6:e0:88:15:36:01:
                    8e:1a:7e:a2:fb:fa:35:12:3f:28:40:e9:02:bf:cb:
                    44:05:23:96:f2:73:32:36:45:f2:ae:ad:c5:2b:23:
                    68:c7:23:9b:8b:f1:f9:9e:48:9c:da:f2:e2:fb:40:
                    c9:ea:f8:c8:6c:f6:cd:73:40:93:c2:c9:7c:be:58:
                    5e:b8:5b:3f:6c:c7:84:f1:5c:ad:a2:8b:42:93:7e:
                    ab:30:0b:7a:ec:5c:33:fd:c9:cb:ee:26:8e:19:ef:
                    59:f5:8f:e4:0c:51:46:43:7a:50:03:85:7f:48:be:
                    41:67:d3:63:ac:aa:c6:78:4c:b6:6f:5b:86:66:f3:
                    f8:7c:5a:69:35:e2:7b:9a:08:cd:2c:4f:5f:46:ed:
                    a7:02:7d:11:4d:b5:e6:03:1c:c0:6f:b0:dc:5a:2c:
                    df:8e:c1:77:3d:30:d1:9a:ff:ff:48:88:cd:5b:2b:
                    29:b2:02:fa:74:70:49:d1:73:9d:05:a6:99:b8:93:
                    54:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:00:BF:0F:E0:80:B5:B0:A6:9F:A9:3B:2E:30:30:BE:6D:1B:47:09
            X509v3 Authority Key Identifier:
                keyid:0F:5A:66:D6:76:D1:6F:C7:92:7C:4E:24:69:4A:1E:8C:77:A4:40:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3619C8C/DE28B16C5FDA11EF8ACEB9A9762E951A/D1pm1nbRb8eSfE4kaUoejHekQGs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/D1pm1nbRb8eSfE4kaUoejHekQGs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3619C8C/DE28B16C5FDA11EF8ACEB9A9762E951A/D1pm1nbRb8eSfE4kaUoejHekQGs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:50:c7:e1:95:a5:4c:bb:4f:15:93:bb:8f:33:aa:77:e1:63:
         13:f7:b8:98:75:a8:6a:39:4b:87:3d:83:c8:2d:49:bc:90:eb:
         5c:d1:dc:7b:05:4d:e8:0c:aa:3b:4a:7f:ca:d5:02:ac:0c:86:
         98:fc:7f:6b:1f:f9:f6:ae:37:a4:50:ee:c3:b0:6e:7e:ba:b4:
         8a:61:73:6b:17:9b:ba:7b:25:32:85:a0:d7:8a:b2:63:4d:96:
         fa:44:93:4d:6b:c4:a3:5d:6b:f2:67:23:35:60:30:7d:f2:2c:
         b8:1a:8d:35:fd:98:57:05:09:75:7a:9b:e8:a8:36:b7:8f:85:
         bd:65:68:80:aa:57:42:6f:de:bc:a5:08:f0:00:95:59:89:6b:
         eb:9c:a7:17:54:a6:0f:60:4a:3c:d3:2b:55:f0:69:d6:4b:01:
         e8:5f:a0:64:36:fb:de:57:28:45:64:19:05:b6:8b:3b:eb:5d:
         43:9f:0a:e4:ce:57:e9:f0:42:3d:e4:f4:27:d1:f7:1e:7d:6a:
         e9:d4:db:f6:7b:ef:72:ee:ea:fc:d4:e7:b0:d5:12:b6:01:b8:
         75:01:63:7f:72:d8:4d:e8:c2:db:a1:ab:72:51:18:78:37:58:
         30:da:ca:49:db:7a:33:22:6d:c4:76:2f:3d:5e:31:a1:d2:7d:
         2e:a7:1b:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:10:49 2026 by rpki-client