Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F363BEDE/69F538C474C511EFB86D2C93762E951A/pyKwoONloK3D2e6zzL_MBi2Q76k.mft
File:                     pyKwoONloK3D2e6zzL_MBi2Q76k.mft (raw, json)
Hash identifier:          s9l9Dvo9rrZJIk5LxB7knFQSQ2UEenxSd9DF/ZjJvTU=
Subject key identifier:   44:3C:96:D9:E9:F5:D9:BF:44:18:73:64:B6:5B:1A:3D:35:7E:42:DB
Authority key identifier: A7:22:B0:A0:E3:65:A0:AD:C3:D9:EE:B3:CC:BF:CC:06:2D:90:EF:A9
Certificate issuer:       /CN=F363BEDERI/serialNumber=A722B0A0E365A0ADC3D9EEB3CCBFCC062D90EFA9
Certificate serial:       0326
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/pyKwoONloK3D2e6zzL_MBi2Q76k.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BEDE/69F538C474C511EFB86D2C93762E951A/pyKwoONloK3D2e6zzL_MBi2Q76k.mft
Manifest number:          0324
Signing time:             Sun 15 Nov 2026 04:29:15 +0000
Manifest this update:     Sun 15 Nov 2026 04:29:14 +0000
Manifest next update:     Tue 17 Nov 2026 04:29:14 +0000
Files and hashes:         1: pyKwoONloK3D2e6zzL_MBi2Q76k.crl (hash: Ow24uzrVOubPfokmNYPwX3HnZT311E6EMbrztDu3sH8=)
                          2: 646E159AD43D11F18BE1240CCF1D38B0.roa (hash: 7KCP4dY+bvXJujSVoPK1huKNkw9wMsylcfCuwnhFh4I=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363BEDE/69F538C474C511EFB86D2C93762E951A/pyKwoONloK3D2e6zzL_MBi2Q76k.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363BEDE/69F538C474C511EFB86D2C93762E951A/pyKwoONloK3D2e6zzL_MBi2Q76k.mft
                          rsync://rpki.afrinic.net/repository/ripe/pyKwoONloK3D2e6zzL_MBi2Q76k.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 17 Nov 2026 00:45:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 806 (0x326)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BEDERI, serialNumber=A722B0A0E365A0ADC3D9EEB3CCBFCC062D90EFA9
        Validity
            Not Before: Nov 15 04:29:14 2026 GMT
            Not After : Nov 17 04:29:14 2026 GMT
        Subject: CN=6af9351b-312c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:9c:f4:ee:51:5d:81:86:a5:71:57:79:c3:bf:
                    6b:4f:22:d6:b7:85:00:55:8b:c9:f0:bb:e0:4f:bd:
                    f6:19:04:f0:86:b2:67:96:52:e6:d8:71:d2:b4:e1:
                    2d:46:71:09:72:1f:5a:5a:f3:63:47:16:2b:f1:47:
                    33:1d:db:45:b0:6b:4b:4a:f4:64:c7:1d:ac:38:da:
                    05:7d:6a:d9:09:1a:9c:1a:f0:fe:85:0b:ce:f4:8e:
                    33:dc:58:d0:b1:8f:9d:3e:87:b3:13:c5:76:77:6e:
                    9f:c1:87:3c:1a:67:9a:ef:0c:f2:73:a5:74:73:18:
                    2b:65:d8:36:69:10:9e:c6:47:0b:23:4d:35:a0:7b:
                    36:01:f2:e6:38:1c:21:89:ff:d2:1b:b6:42:14:eb:
                    ed:45:27:e0:e9:51:ac:98:44:ea:f8:8e:f1:57:5c:
                    01:9a:ef:4f:8b:e9:e7:7d:1f:ee:26:44:03:b9:db:
                    9f:d5:93:58:db:b0:26:d5:01:09:a2:d8:99:18:10:
                    12:b7:d4:a1:11:e1:93:30:8f:63:9f:17:55:9a:ad:
                    76:4d:cc:76:cb:32:e1:6f:54:cf:61:2d:f7:c9:cf:
                    0f:f7:27:27:74:2e:4f:da:14:b2:27:2e:b8:b0:23:
                    b1:19:aa:47:c5:29:b4:35:5e:75:24:9d:d7:70:78:
                    b3:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:3C:96:D9:E9:F5:D9:BF:44:18:73:64:B6:5B:1A:3D:35:7E:42:DB
            X509v3 Authority Key Identifier:
                keyid:A7:22:B0:A0:E3:65:A0:AD:C3:D9:EE:B3:CC:BF:CC:06:2D:90:EF:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BEDE/69F538C474C511EFB86D2C93762E951A/pyKwoONloK3D2e6zzL_MBi2Q76k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/pyKwoONloK3D2e6zzL_MBi2Q76k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BEDE/69F538C474C511EFB86D2C93762E951A/pyKwoONloK3D2e6zzL_MBi2Q76k.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:20:ed:fa:41:79:f3:d1:4e:6a:bb:9c:6b:23:d0:d1:7e:a7:
         bc:ad:5a:8f:36:44:0a:0c:43:17:6d:a5:84:18:8f:47:4c:1f:
         9a:10:0a:1e:6a:96:20:54:82:1b:a3:8a:13:bc:66:fd:86:0d:
         17:7b:d0:bc:9f:80:5f:ab:47:d5:ec:c9:c4:4a:61:99:c7:9a:
         fa:7d:d6:b2:25:25:ab:06:e6:73:fc:d2:19:93:ea:58:2f:4b:
         5e:eb:26:f1:b3:21:4c:8a:35:b2:cb:2b:03:a2:d8:59:da:64:
         95:be:a0:13:91:00:d2:6f:97:18:52:88:93:41:38:1f:f6:c0:
         29:52:08:c9:64:6c:c9:ad:53:19:b5:0f:e5:a6:2d:fa:88:c4:
         64:98:7e:c6:75:99:48:bd:9c:7b:37:47:e1:15:73:54:ff:99:
         55:79:82:d4:c3:45:56:f4:e3:6b:a9:c0:56:a0:6a:50:03:c6:
         cb:97:62:c9:6a:f4:27:22:3c:f3:bd:03:51:aa:ca:be:08:ed:
         58:c0:f7:bf:08:cd:8d:ed:1d:2d:c5:a3:5c:b2:26:4a:9f:a0:
         f5:37:e5:fc:91:3c:ec:be:a2:1e:6e:d5:12:69:8d:fa:d1:21:
         7f:91:9f:65:fb:78:95:db:b1:15:0d:24:41:b5:3f:c4:a7:d4:
         8e:9e:51:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----