Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F363235D/677CFDEC4C3911F083EC3397DAE4EC9C/Bal449VH9Vk-SwMZcDhZhpRQWMY.mft
File:                     Bal449VH9Vk-SwMZcDhZhpRQWMY.mft (raw, json)
Hash identifier:          xo5BX87OdyqN/gytKHFU0TWMX1C+Yk6W80V5v+2uqbY=
Subject key identifier:   2F:43:95:99:7A:27:75:20:EE:C0:BC:73:BB:C1:B9:61:64:2F:53:B6
Authority key identifier: 05:A9:78:E3:D5:47:F5:59:3E:4B:03:19:70:38:59:86:94:50:58:C6
Certificate issuer:       /CN=F363235DAF/serialNumber=05A978E3D547F5593E4B031970385986945058C6
Certificate serial:       01E7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Bal449VH9Vk-SwMZcDhZhpRQWMY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363235D/677CFDEC4C3911F083EC3397DAE4EC9C/Bal449VH9Vk-SwMZcDhZhpRQWMY.mft
Manifest number:          01E2
Signing time:             Wed 23 Sep 2026 04:56:00 +0000
Manifest this update:     Wed 23 Sep 2026 04:55:59 +0000
Manifest next update:     Fri 25 Sep 2026 04:55:59 +0000
Files and hashes:         1: Bal449VH9Vk-SwMZcDhZhpRQWMY.crl (hash: iK8MMUa8ZlsTxwS2vRU4F6mlbLXCX7qkK3k6850K5RE=)
                          2: 956D6C004C7A11F0941F5DBBDAE4EC9C.roa (hash: 4pbVD/R5drzn4R/PeVc+1JSe6FAId7REQJilHo0BefE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363235D/677CFDEC4C3911F083EC3397DAE4EC9C/Bal449VH9Vk-SwMZcDhZhpRQWMY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363235D/677CFDEC4C3911F083EC3397DAE4EC9C/Bal449VH9Vk-SwMZcDhZhpRQWMY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Bal449VH9Vk-SwMZcDhZhpRQWMY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 25 Sep 2026 04:55:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 487 (0x1e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363235DAF, serialNumber=05A978E3D547F5593E4B031970385986945058C6
        Validity
            Not Before: Sep 23 04:55:59 2026 GMT
            Not After : Sep 25 04:55:59 2026 GMT
        Subject: CN=6ab35bdf-e5a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:83:c0:c8:0e:1a:44:23:70:c0:a6:c8:3f:70:
                    f3:d9:cb:70:f2:bd:92:82:0e:f3:57:89:00:52:47:
                    fc:60:49:8e:2d:a5:35:50:15:11:47:b9:29:41:61:
                    01:34:da:e9:bc:af:de:66:c8:e6:2d:3a:3c:6a:34:
                    da:dc:de:74:f2:cf:9c:41:5e:7a:e4:ac:a0:42:0d:
                    b8:fe:67:02:2c:b2:7d:5c:fd:d1:25:c0:6d:1b:4b:
                    2c:cb:28:ce:bd:cd:c0:67:55:8a:54:e0:91:33:d6:
                    f6:96:04:97:45:58:23:c6:86:cb:61:1f:e5:4b:17:
                    d0:79:18:9b:0b:9c:e0:73:24:5f:a2:b0:87:9b:fe:
                    65:c3:2f:bc:f0:cf:37:05:94:80:00:4f:3d:f4:d8:
                    75:ee:df:96:66:05:c9:44:dc:b0:42:f2:ff:cf:fa:
                    98:6f:a2:7d:27:ce:e4:af:91:bf:63:ca:e0:74:f8:
                    0e:77:ec:b4:4c:98:bc:a1:37:21:d6:62:e7:48:d1:
                    dd:fb:d7:f3:79:a7:00:06:bc:6c:30:15:3d:b0:b8:
                    7e:eb:4a:bc:66:3e:27:91:17:2b:12:55:83:b3:17:
                    c3:e4:3b:a4:ec:c2:6f:2d:88:87:ec:39:5d:1e:d5:
                    a1:db:6e:99:2e:98:cd:ae:fc:bc:66:c0:c7:15:28:
                    c8:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:43:95:99:7A:27:75:20:EE:C0:BC:73:BB:C1:B9:61:64:2F:53:B6
            X509v3 Authority Key Identifier:
                keyid:05:A9:78:E3:D5:47:F5:59:3E:4B:03:19:70:38:59:86:94:50:58:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363235D/677CFDEC4C3911F083EC3397DAE4EC9C/Bal449VH9Vk-SwMZcDhZhpRQWMY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Bal449VH9Vk-SwMZcDhZhpRQWMY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363235D/677CFDEC4C3911F083EC3397DAE4EC9C/Bal449VH9Vk-SwMZcDhZhpRQWMY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:2f:6f:24:37:93:65:85:57:3b:79:3f:e2:67:5a:47:7d:c7:
         12:cb:62:c0:6a:6a:13:60:70:83:bf:09:df:66:49:40:7b:4b:
         b8:65:14:cc:d4:86:e8:a3:7c:5b:f4:b4:d6:49:f9:58:e0:e6:
         16:ac:7f:c1:ff:dd:37:82:86:ca:f1:ab:8a:e0:02:ac:67:ee:
         b6:a8:fe:ba:18:45:38:ed:be:b6:16:2c:12:3b:0b:e6:e3:bc:
         a3:10:c3:8f:93:2d:5d:37:17:62:8e:78:4c:1c:ca:73:07:0b:
         fa:d6:f0:cd:c1:b7:bf:21:b5:10:6e:11:53:df:d2:14:32:7b:
         65:3d:59:ae:52:88:85:35:cc:13:4c:49:3c:be:96:d8:54:8b:
         91:89:a7:42:81:fe:dc:60:77:e9:29:61:15:de:69:3f:e2:9a:
         f7:4d:67:b7:9d:dc:06:ba:34:a1:3a:e4:2d:8f:ba:07:59:63:
         64:c1:51:10:6f:88:92:d9:df:9d:e9:cc:69:68:a1:d0:7a:9c:
         4f:d5:29:35:6d:01:83:dc:27:4a:40:a4:87:58:c4:ea:96:eb:
         87:f9:ab:ce:93:3c:2b:8a:56:ce:24:59:26:1e:6d:11:23:05:
         b1:f3:f5:7b:43:f6:75:28:f8:7b:34:3f:4d:e3:ec:46:9f:3c:
         b8:05:99:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----