Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361E497/708176AAF93211EC88DB648CF1222468/JPTjVN3eyJE4I7D5JAelNKvz-YI.mft
File:                     JPTjVN3eyJE4I7D5JAelNKvz-YI.mft (raw, json)
Hash identifier:          c2eHc3W/07f3RVUGPKnXXC0sLMKDWX/FgHzuVI1junQ=
Subject key identifier:   0A:BA:B1:F2:6E:27:2F:98:E8:04:66:BE:19:F7:A0:26:AC:E9:0B:8F
Authority key identifier: 24:F4:E3:54:DD:DE:C8:91:38:23:B0:F9:24:07:A5:34:AB:F3:F9:82
Certificate issuer:       /CN=F361E497AF/serialNumber=24F4E354DDDEC8913823B0F92407A534ABF3F982
Certificate serial:       04E2
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JPTjVN3eyJE4I7D5JAelNKvz-YI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361E497/708176AAF93211EC88DB648CF1222468/JPTjVN3eyJE4I7D5JAelNKvz-YI.mft
Manifest number:          04DE
Signing time:             Mon 20 Oct 2025 02:53:56 +0000
Manifest this update:     Mon 20 Oct 2025 02:53:55 +0000
Manifest next update:     Wed 22 Oct 2025 02:53:55 +0000
Files and hashes:         1: JPTjVN3eyJE4I7D5JAelNKvz-YI.crl (hash: USsrGITBK1kerjDQAvTimFH6H3ZVuF1TI+uIO12T+AQ=)
                          2: 4FE73C3EFB9111EC8E02F994F1222468.roa (hash: GjnKB/yazoMug9KsY/PrUtk45d27ruy608z+yD9gvcY=)
                          3: 08D750B8FB9111EC80F40194F1222468.roa (hash: Nh4OvBKp1qS4BddvATEM7GauwQ1rZ+sG7Y/Z75HPcSg=)
                          4: 3569861EFB9111ECABF49894F1222468.roa (hash: xfjrAkm4LufZusLE6b6YUbeIGmJjoUsjJjVfL2I+eVI=)
                          5: 20A6A34CFB9111ECB4636694F1222468.roa (hash: fEGzGBD0T3F0W0X1kqgg2mvvPQfKpajK9d5gjC8kLxs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361E497/708176AAF93211EC88DB648CF1222468/JPTjVN3eyJE4I7D5JAelNKvz-YI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361E497/708176AAF93211EC88DB648CF1222468/JPTjVN3eyJE4I7D5JAelNKvz-YI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JPTjVN3eyJE4I7D5JAelNKvz-YI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 22 Oct 2025 00:06:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1250 (0x4e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361E497AF, serialNumber=24F4E354DDDEC8913823B0F92407A534ABF3F982
        Validity
            Not Before: Oct 20 02:53:55 2025 GMT
            Not After : Oct 22 02:53:55 2025 GMT
        Subject: CN=68f5a444-a11c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:6a:77:af:d4:65:00:d1:14:10:7f:5b:3c:a9:
                    ab:34:f5:56:fc:93:8b:ed:dc:86:c9:f5:a3:10:b2:
                    a6:24:b5:ed:78:15:2f:30:62:22:42:06:67:2b:d5:
                    d9:38:e2:45:fd:65:03:f4:e7:16:82:83:ea:be:41:
                    2e:e2:ce:81:58:ea:10:24:9d:22:db:da:9d:2a:80:
                    a8:2d:81:36:2a:42:6f:2b:f6:7c:f6:19:ab:a2:ec:
                    a5:ef:6b:d7:b7:cc:8a:0e:4e:e4:cf:ac:35:da:9d:
                    9a:57:7a:bf:61:31:04:cb:d4:92:1e:99:af:64:cf:
                    ed:ba:2b:2a:0a:18:2c:04:d2:2a:85:53:57:e5:99:
                    85:6d:23:62:20:99:82:7c:42:ee:aa:ff:82:df:65:
                    7c:8e:b9:51:cb:b3:e2:b8:f4:fe:63:85:98:95:1d:
                    b1:1d:63:4d:eb:3e:a5:9a:14:2a:c5:0e:d9:d5:c1:
                    ec:1b:b9:6f:5b:5d:18:31:c5:b3:ec:8f:dd:67:70:
                    57:91:aa:65:87:64:cf:55:e0:d9:cb:02:08:48:5a:
                    f7:be:a9:d6:a9:ad:d5:15:61:03:ea:b8:0a:61:ec:
                    18:d2:09:23:4e:ad:7a:80:92:bb:e1:c6:65:5b:3a:
                    a3:39:86:3e:7d:71:b3:2c:70:0e:e2:6f:1c:1c:2b:
                    5e:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:BA:B1:F2:6E:27:2F:98:E8:04:66:BE:19:F7:A0:26:AC:E9:0B:8F
            X509v3 Authority Key Identifier:
                keyid:24:F4:E3:54:DD:DE:C8:91:38:23:B0:F9:24:07:A5:34:AB:F3:F9:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361E497/708176AAF93211EC88DB648CF1222468/JPTjVN3eyJE4I7D5JAelNKvz-YI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JPTjVN3eyJE4I7D5JAelNKvz-YI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361E497/708176AAF93211EC88DB648CF1222468/JPTjVN3eyJE4I7D5JAelNKvz-YI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:a3:ef:c0:63:d6:ca:5f:8d:42:d5:af:a1:2a:d2:10:5b:ba:
         08:9e:24:34:a9:e7:80:67:1a:45:bd:48:d0:10:83:6a:81:15:
         bb:8d:9d:47:86:0a:09:a7:93:c3:d4:84:ec:45:9d:be:45:78:
         4f:dd:d2:be:a3:4e:72:d7:ae:34:d4:4f:6a:80:49:44:e2:36:
         db:00:9a:be:dc:cf:fc:7b:96:2f:46:c2:7c:92:e5:03:09:21:
         f0:3b:d2:44:2b:2b:d7:f9:29:44:ed:37:90:4e:fd:2d:61:6d:
         4f:8e:69:e0:43:47:27:fe:da:09:cd:43:8d:00:ac:34:b2:b8:
         a4:1a:93:a6:ba:f4:f9:52:85:b3:70:1f:45:e4:0a:1f:64:c6:
         47:bb:6f:67:94:b7:d8:5e:39:be:f4:36:40:6c:85:a5:ff:56:
         cc:ae:45:c1:92:32:c8:85:ed:33:90:ad:b4:ea:58:0e:b3:3b:
         55:e9:70:67:09:79:db:b6:4c:04:a7:ba:a4:cf:c8:d5:bd:63:
         00:35:53:6a:1b:1d:da:58:3a:86:30:02:95:4e:1f:e4:5e:7d:
         d2:07:08:c9:86:31:a8:ae:97:d9:33:be:96:85:8b:3c:5a:47:
         8a:7e:f0:35:7e:6d:e0:de:cd:44:9c:50:a3:2b:70:79:3c:60:
         27:f7:95:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:10:05 2025 by rpki-client