Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3625D4A/03EFFC9EBF3F11EEA6B40954775412E6/ebDAcmJ2iSrXTH0TD5nweuDmeko.mft
File:                     ebDAcmJ2iSrXTH0TD5nweuDmeko.mft (raw, json)
Hash identifier:          ywO7UK+QxHG098KUvtw4qe60ygmn0R9GIA5WcPFFSSo=
Subject key identifier:   19:57:F7:01:1C:39:09:AA:CB:7B:6A:83:3A:3B:D5:C4:C1:67:7A:B5
Authority key identifier: 79:B0:C0:72:62:76:89:2A:D7:4C:7D:13:0F:99:F0:7A:E0:E6:7A:4A
Certificate issuer:       /CN=F3625D4AAF/serialNumber=79B0C0726276892AD74C7D130F99F07AE0E67A4A
Certificate serial:       024D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ebDAcmJ2iSrXTH0TD5nweuDmeko.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3625D4A/03EFFC9EBF3F11EEA6B40954775412E6/ebDAcmJ2iSrXTH0TD5nweuDmeko.mft
Manifest number:          024C
Signing time:             Sat 23 Aug 2025 04:16:42 +0000
Manifest this update:     Sat 23 Aug 2025 04:16:41 +0000
Manifest next update:     Mon 25 Aug 2025 04:16:41 +0000
Files and hashes:         1: ebDAcmJ2iSrXTH0TD5nweuDmeko.crl (hash: F1nZoWCGWnoedet/URX9KBGFRzfzFDN3fYkjG37mA8w=)
                          2: 12A49B4ABF4011EE82ABE755775412E6.roa (hash: A3SsXw/efK2b5GKmG8JZKrlc0wfhdO7VSwE2A7UfoRE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3625D4A/03EFFC9EBF3F11EEA6B40954775412E6/ebDAcmJ2iSrXTH0TD5nweuDmeko.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3625D4A/03EFFC9EBF3F11EEA6B40954775412E6/ebDAcmJ2iSrXTH0TD5nweuDmeko.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ebDAcmJ2iSrXTH0TD5nweuDmeko.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Aug 2025 00:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 589 (0x24d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3625D4AAF, serialNumber=79B0C0726276892AD74C7D130F99F07AE0E67A4A
        Validity
            Not Before: Aug 23 04:16:41 2025 GMT
            Not After : Aug 25 04:16:41 2025 GMT
        Subject: CN=68a940aa-b325
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:ba:44:a5:f2:81:41:f9:e1:97:2a:56:88:1e:
                    1d:3d:7d:4a:44:2d:13:df:b4:8a:41:01:f6:dd:c8:
                    68:c5:7e:16:cb:48:c2:08:27:ed:e9:da:b0:06:75:
                    2c:ec:2a:2a:94:ac:35:b1:e4:6d:d3:d8:76:10:7e:
                    aa:c7:98:7b:79:ea:53:0a:9e:ad:9d:fb:0c:f4:77:
                    b1:b8:fa:c8:7f:81:19:06:3a:2d:24:93:ac:cc:ca:
                    27:03:eb:ee:6d:87:7c:ed:7c:79:81:01:a5:86:98:
                    a0:e5:52:1a:98:fd:2e:79:5d:26:94:7a:74:74:56:
                    be:da:14:af:86:2a:36:b1:cf:c2:1b:94:9c:46:51:
                    4f:e4:89:16:6a:ab:fa:1a:3a:06:eb:31:09:7f:f0:
                    c0:1a:12:c7:1e:33:12:e5:df:50:47:fc:ae:0b:c8:
                    9a:ed:b7:92:3e:30:5d:a3:f0:0b:fa:47:3e:40:a8:
                    49:8a:aa:59:c8:e3:6e:ef:e0:10:5d:e6:03:35:9a:
                    2c:48:fa:31:0e:cc:09:6b:de:b5:bd:91:86:26:f0:
                    bf:52:0d:a1:eb:10:02:df:a0:74:86:4b:3f:fe:4c:
                    b2:42:fe:a4:e4:cc:b6:93:33:43:42:4c:b3:0b:05:
                    3f:81:e1:82:28:05:99:e2:97:f3:0e:93:b5:9d:b4:
                    87:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:57:F7:01:1C:39:09:AA:CB:7B:6A:83:3A:3B:D5:C4:C1:67:7A:B5
            X509v3 Authority Key Identifier:
                keyid:79:B0:C0:72:62:76:89:2A:D7:4C:7D:13:0F:99:F0:7A:E0:E6:7A:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D4A/03EFFC9EBF3F11EEA6B40954775412E6/ebDAcmJ2iSrXTH0TD5nweuDmeko.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ebDAcmJ2iSrXTH0TD5nweuDmeko.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D4A/03EFFC9EBF3F11EEA6B40954775412E6/ebDAcmJ2iSrXTH0TD5nweuDmeko.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:2e:5d:84:40:2e:2e:d1:23:86:e9:fe:65:a7:39:5d:40:79:
         60:94:0f:ce:ad:8d:bf:ef:b8:ee:23:4d:b3:82:e6:01:cf:80:
         95:80:d0:8e:a1:cd:4f:01:03:ca:3f:26:69:92:62:94:5a:ea:
         e8:6a:3c:a1:53:dd:57:5f:a1:8d:30:a5:82:fc:c7:0a:64:cc:
         99:6d:76:06:40:ce:ba:75:bf:d9:a7:c1:21:2f:7a:b5:c9:b9:
         dd:83:00:f1:52:3c:ba:37:28:b6:c5:bf:41:f8:65:1b:a4:02:
         b7:7d:75:87:6a:c8:38:e3:f8:7e:47:99:02:2c:60:97:aa:b8:
         27:6f:e5:7e:53:c3:0d:21:d7:e5:7a:70:77:ce:5d:2d:b3:0e:
         dd:46:4b:c1:c6:98:93:ec:d4:2e:3c:25:92:88:d6:2d:4b:49:
         b6:56:ed:ec:98:54:b4:dc:6c:58:fd:b2:0f:dc:f7:0d:f4:c3:
         56:f9:cb:2f:1d:7c:30:6f:32:c0:e9:80:96:c7:2b:86:45:0f:
         77:31:d2:30:e5:cb:82:3c:2d:ba:d7:eb:54:1f:8a:e5:12:6e:
         de:de:cc:64:73:32:96:49:d0:b9:ad:30:5a:51:1d:c7:45:f7:
         8d:15:fc:64:22:5d:8a:10:d1:9a:49:c0:ba:54:11:9f:65:3c:
         b1:a5:7e:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:25:29 2025 by rpki-client