Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3628CF1/9D19D566560D11EEAF3DBC214AD9E6FC/JJfLAcvhH34S4q3Y1P8jILlpA20.mft
File:                     JJfLAcvhH34S4q3Y1P8jILlpA20.mft (raw, json)
Hash identifier:          gXfiPdEtkVg7mzVgWxqpJEU+CanATxBdtHHk9CvU6sw=
Subject key identifier:   BA:CC:96:C1:D9:3B:34:18:5D:D1:D9:5B:21:1C:A0:C3:CB:31:6B:90
Authority key identifier: 24:97:CB:01:CB:E1:1F:7E:12:E2:AD:D8:D4:FF:23:20:B9:69:03:6D
Certificate issuer:       /CN=F3628CF1AF/serialNumber=2497CB01CBE11F7E12E2ADD8D4FF2320B969036D
Certificate serial:       03B4
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JJfLAcvhH34S4q3Y1P8jILlpA20.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3628CF1/9D19D566560D11EEAF3DBC214AD9E6FC/JJfLAcvhH34S4q3Y1P8jILlpA20.mft
Manifest number:          03B2
Signing time:             Thu 26 Mar 2026 04:24:37 +0000
Manifest this update:     Thu 26 Mar 2026 04:24:36 +0000
Manifest next update:     Sat 28 Mar 2026 04:24:36 +0000
Files and hashes:         1: JJfLAcvhH34S4q3Y1P8jILlpA20.crl (hash: /6rnibBJi6FPrvkC2RizyHnKUiPyExboiOkJ/0G82RM=)
                          2: D5189642585A11EE959ED9784AD9E6FC.roa (hash: KsQ50yFvchQtrtq3TNZ2t0VHuQZ3asdeMse4z12DwNw=)
                          3: 0525AE88585B11EEA76861794AD9E6FC.roa (hash: 7rp3+TdgE0k+yfnwL23onTrWLktoLa5cPkFU5dKOKQ0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3628CF1/9D19D566560D11EEAF3DBC214AD9E6FC/JJfLAcvhH34S4q3Y1P8jILlpA20.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3628CF1/9D19D566560D11EEAF3DBC214AD9E6FC/JJfLAcvhH34S4q3Y1P8jILlpA20.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JJfLAcvhH34S4q3Y1P8jILlpA20.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 948 (0x3b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3628CF1AF, serialNumber=2497CB01CBE11F7E12E2ADD8D4FF2320B969036D
        Validity
            Not Before: Mar 26 04:24:36 2026 GMT
            Not After : Mar 28 04:24:36 2026 GMT
        Subject: CN=69c4b505-be66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a5:2f:b0:02:00:44:ab:2e:cc:7f:e3:71:97:
                    65:10:44:0c:97:a7:ba:53:6b:b3:ea:c2:8f:ab:ee:
                    c0:7c:f3:4c:87:cf:60:0e:a6:fb:a8:e3:50:40:b3:
                    6a:aa:97:e0:69:f0:56:fe:30:2b:72:d1:3a:38:08:
                    e8:1d:bf:3f:90:2c:4e:63:08:f7:5f:91:45:1d:83:
                    da:a4:e3:fe:c8:58:a1:ea:3c:ea:30:b7:e1:f0:cb:
                    21:ed:4c:d4:15:f6:99:e8:d4:26:4b:6c:ba:70:20:
                    97:6d:54:b1:0a:47:6b:0d:a8:18:36:f1:48:94:fa:
                    28:e7:29:d4:de:96:fd:2f:86:5b:2a:ab:12:08:79:
                    34:1a:a9:85:ef:2c:14:f6:9a:e4:1a:95:1c:04:5c:
                    57:d9:2d:da:66:ea:7d:b4:18:ab:92:05:a6:65:0b:
                    b0:66:a2:cb:2a:f8:f6:3e:a6:85:c0:bd:6b:f0:54:
                    aa:ce:8a:03:50:a3:d2:b9:56:9e:c9:1c:2b:a9:91:
                    35:c2:ee:97:3f:89:29:c1:68:06:50:f6:c4:da:75:
                    13:a2:75:fa:9d:95:c1:05:37:05:4f:d9:63:3c:29:
                    50:f0:72:73:15:dc:a7:23:14:b3:44:41:28:12:18:
                    b8:94:80:c7:84:f7:fa:60:d8:58:a5:41:db:c2:29:
                    9d:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:CC:96:C1:D9:3B:34:18:5D:D1:D9:5B:21:1C:A0:C3:CB:31:6B:90
            X509v3 Authority Key Identifier:
                keyid:24:97:CB:01:CB:E1:1F:7E:12:E2:AD:D8:D4:FF:23:20:B9:69:03:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3628CF1/9D19D566560D11EEAF3DBC214AD9E6FC/JJfLAcvhH34S4q3Y1P8jILlpA20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JJfLAcvhH34S4q3Y1P8jILlpA20.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3628CF1/9D19D566560D11EEAF3DBC214AD9E6FC/JJfLAcvhH34S4q3Y1P8jILlpA20.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:c7:63:75:ac:0c:19:6d:de:85:4e:fa:49:dd:b3:1e:5b:c2:
         ae:e9:fa:ff:85:44:3a:d6:5c:fd:3f:9c:8d:38:9b:cf:a2:8a:
         94:34:ee:5c:a8:05:f0:54:bc:17:3c:02:c3:66:dc:a9:bd:50:
         e3:62:6e:56:3f:8d:7b:c0:ce:ca:91:be:12:7a:dc:79:17:8b:
         13:b5:0f:77:63:6c:93:e4:e7:b4:06:2b:b3:63:0c:01:d4:c1:
         c3:50:25:1c:fc:98:be:4e:d1:92:7e:ef:c6:a7:32:d6:bc:90:
         68:7e:8f:12:0a:b9:ca:5d:cd:0f:58:16:be:a9:1d:31:15:7b:
         d7:ab:a1:e8:39:20:93:63:8d:5a:a3:02:bc:f3:13:42:1d:15:
         de:50:8f:e6:3c:f1:b3:b5:5d:1a:0f:16:83:7f:e4:7e:79:92:
         06:11:7e:67:fd:67:79:af:c2:11:e8:16:17:ae:d7:a9:9e:91:
         97:ab:01:0b:5a:04:2d:ca:1e:f1:82:3a:dd:42:77:ec:20:1a:
         31:f5:72:42:54:a7:a7:20:51:81:9a:8e:af:08:03:51:04:66:
         30:d7:b5:f0:95:bc:38:1f:0f:f9:aa:36:92:67:fa:7e:19:9c:
         7e:d7:1b:d6:d3:7b:a2:fc:22:bd:85:a6:26:24:24:58:59:d5:
         d8:1d:92:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:39:44 2026 by rpki-client