Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363E7DE/0AF6EC623D1811EFADCB7693762E951A/mEs08lM_l20v8hGUKFlsTLCoNJQ.mft
File:                     mEs08lM_l20v8hGUKFlsTLCoNJQ.mft (raw, json)
Hash identifier:          dS37mJ5t0Ku0GuqaRvxRzjQ0mMSj54KKXd3/pWvqqMQ=
Subject key identifier:   0A:48:4A:C6:EB:0C:DA:9A:C8:5C:C4:86:8C:2F:B0:6C:C3:44:9F:E1
Authority key identifier: 98:4B:34:F2:53:3F:97:6D:2F:F2:11:94:28:59:6C:4C:B0:A8:34:94
Certificate issuer:       /CN=F363E7DEAF/serialNumber=984B34F2533F976D2FF2119428596C4CB0A83494
Certificate serial:       0284
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/mEs08lM_l20v8hGUKFlsTLCoNJQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363E7DE/0AF6EC623D1811EFADCB7693762E951A/mEs08lM_l20v8hGUKFlsTLCoNJQ.mft
Manifest number:          0283
Signing time:             Thu 26 Mar 2026 05:06:40 +0000
Manifest this update:     Thu 26 Mar 2026 05:06:39 +0000
Manifest next update:     Sat 28 Mar 2026 05:06:39 +0000
Files and hashes:         1: mEs08lM_l20v8hGUKFlsTLCoNJQ.crl (hash: scf+v7t0XK4xD45yQLQnhR8ugPp/4RwWQzL2gfMUNgQ=)
                          2: D26968643D1911EF839BE3A0762E951A.roa (hash: J0djfjB+ImP9O4b/Y0DGlGrugUtQ+yVNNLjhpRXf1yA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363E7DE/0AF6EC623D1811EFADCB7693762E951A/mEs08lM_l20v8hGUKFlsTLCoNJQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363E7DE/0AF6EC623D1811EFADCB7693762E951A/mEs08lM_l20v8hGUKFlsTLCoNJQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/mEs08lM_l20v8hGUKFlsTLCoNJQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 644 (0x284)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363E7DEAF, serialNumber=984B34F2533F976D2FF2119428596C4CB0A83494
        Validity
            Not Before: Mar 26 05:06:39 2026 GMT
            Not After : Mar 28 05:06:39 2026 GMT
        Subject: CN=69c4bedf-c5d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:03:a1:2d:1a:38:40:6d:cc:5d:35:b8:8a:57:
                    b5:a4:8a:29:cb:70:e6:50:ee:9e:40:0d:fc:b8:05:
                    68:1f:f6:21:f4:46:18:e2:cc:89:0d:2a:90:fd:79:
                    13:b7:17:ca:50:a4:f7:db:99:e3:e6:11:81:61:63:
                    72:3e:cc:ed:c0:fe:05:f4:25:77:ea:e9:20:04:b7:
                    bd:84:7c:06:39:03:6c:f8:50:ae:a1:d2:a0:f8:65:
                    86:d7:5d:40:64:4a:77:79:62:ab:0e:90:eb:c2:ef:
                    3c:5a:28:dd:30:cf:04:e9:a0:28:3d:d0:0f:0d:ca:
                    82:95:5e:fc:e9:61:c5:ad:9f:09:98:00:5b:0a:b7:
                    09:f2:b5:de:c4:2a:94:b7:79:ec:ee:b6:94:a4:22:
                    1f:63:cd:ea:8c:a5:8f:e2:98:c1:b0:eb:63:e9:7e:
                    91:92:57:a7:9a:f7:25:18:72:c6:c6:60:9f:0d:f4:
                    dc:6c:35:81:b6:dc:ad:d3:6c:3d:b9:62:c0:35:2c:
                    2d:19:2e:a0:3a:fa:d9:97:5d:46:0b:b5:00:c8:36:
                    c4:13:10:13:80:87:f0:51:7b:25:de:6f:0d:52:f4:
                    ce:b7:a8:5e:ab:87:89:08:ea:16:78:5e:0e:e1:1e:
                    fc:16:24:78:c2:51:45:82:bd:75:bc:1f:17:de:cb:
                    bd:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:48:4A:C6:EB:0C:DA:9A:C8:5C:C4:86:8C:2F:B0:6C:C3:44:9F:E1
            X509v3 Authority Key Identifier:
                keyid:98:4B:34:F2:53:3F:97:6D:2F:F2:11:94:28:59:6C:4C:B0:A8:34:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363E7DE/0AF6EC623D1811EFADCB7693762E951A/mEs08lM_l20v8hGUKFlsTLCoNJQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/mEs08lM_l20v8hGUKFlsTLCoNJQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363E7DE/0AF6EC623D1811EFADCB7693762E951A/mEs08lM_l20v8hGUKFlsTLCoNJQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:11:1e:db:23:af:3c:93:38:8c:be:12:1a:df:43:b0:5d:b5:
         89:6c:79:6c:c5:e3:5d:d9:be:62:0c:7b:e8:21:c2:6b:d6:07:
         69:91:c2:37:b1:38:57:c2:63:60:bb:93:3e:ca:ea:f9:48:4f:
         f2:c2:bd:cf:d5:33:00:f6:07:59:3a:08:5c:d5:3d:0f:62:6d:
         12:e3:a0:94:17:ac:88:e5:ca:42:99:0b:24:74:eb:13:3f:35:
         9f:04:a8:cc:c9:87:a8:d9:0c:2c:0e:1e:ec:6e:d6:b4:0f:10:
         96:29:28:66:75:02:90:4f:f4:7d:99:83:d4:30:5b:8e:43:57:
         cb:2f:e1:84:8a:d0:9a:a1:54:2c:65:cf:ee:1a:9d:ba:eb:17:
         75:66:0d:20:40:9f:a6:59:7c:04:d7:17:54:e1:3c:ab:79:09:
         40:0d:5d:81:56:0f:b2:71:20:cb:0c:96:08:6c:d7:90:6d:25:
         a5:76:94:01:5b:1e:0c:a3:44:0a:49:54:77:31:df:cb:82:53:
         01:42:6c:b4:2f:71:b1:bf:6a:3a:2f:92:d3:9e:c5:42:68:a6:
         ab:16:05:33:2d:80:ad:63:0c:ea:8b:93:15:22:7d:77:fd:0a:
         a3:2f:f1:bd:25:6c:4b:10:e3:18:fc:22:90:b5:2b:86:8b:18:
         9e:d3:36:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:44:03 2026 by rpki-client