Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/cHofKGrimG32SRDDA05RiafCFt0.mft
File:                     cHofKGrimG32SRDDA05RiafCFt0.mft (raw, json)
Hash identifier:          Q46lv8+m4y67YhUEQ9RzlEk+w2Zef1zDJIZroJon+1M=
Subject key identifier:   22:0F:11:26:C8:13:CB:2C:31:5E:3A:10:86:69:61:BA:EC:82:D9:D7
Authority key identifier: 70:7A:1F:28:6A:E2:98:6D:F6:49:10:C3:03:4E:51:89:A7:C2:16:DD
Certificate issuer:       /CN=F3644DAEAF/serialNumber=707A1F286AE2986DF64910C3034E5189A7C216DD
Certificate serial:       07D1
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/cHofKGrimG32SRDDA05RiafCFt0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/cHofKGrimG32SRDDA05RiafCFt0.mft
Manifest number:          07CD
Signing time:             Fri 24 Jul 2026 02:04:12 +0000
Manifest this update:     Fri 24 Jul 2026 02:04:11 +0000
Manifest next update:     Sun 26 Jul 2026 02:04:11 +0000
Files and hashes:         1: cHofKGrimG32SRDDA05RiafCFt0.crl (hash: r2ZASVnE7AECnWa/glIeVF9tYseiVtjJw9Y60aeV5Sw=)
                          2: 9C013D2EE05511ECBDACD89CF1222468.roa (hash: UGj7GRnwJOSfAQPFu2EMncmzBzkv3j77PzP+YrH85ms=)
                          3: 6FE5059AE05511EC8F6C299CF1222468.roa (hash: 3Y9hbnFs2RPSkmUCx7/XEKKtj3J0P6/CZTYRoO7RuTs=)
                          4: CA385ECC978E11F0A04E5980DAE4EC9C.roa (hash: O+sWw2ccWdiZcvRBVii039jCozcaeIkFVcemmzJTRYE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/cHofKGrimG32SRDDA05RiafCFt0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/cHofKGrimG32SRDDA05RiafCFt0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/cHofKGrimG32SRDDA05RiafCFt0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 26 Jul 2026 00:07:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2001 (0x7d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3644DAEAF, serialNumber=707A1F286AE2986DF64910C3034E5189A7C216DD
        Validity
            Not Before: Jul 24 02:04:11 2026 GMT
            Not After : Jul 26 02:04:11 2026 GMT
        Subject: CN=6a62c81c-443a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:f1:a1:f5:e7:11:44:24:ba:de:aa:b4:a2:ab:
                    11:af:85:88:98:dc:96:fe:cb:fd:24:8d:e2:ca:ba:
                    3a:98:0f:c4:cd:7e:c2:5a:7e:29:46:d0:e0:b5:f9:
                    ff:c1:18:2a:56:53:18:5d:be:2a:10:9e:90:83:19:
                    2f:6e:6b:17:ef:d9:11:dc:ab:97:20:44:49:62:a7:
                    b0:fc:80:56:d8:09:6f:cb:8c:47:43:da:1f:18:f3:
                    c6:21:54:34:e1:6e:37:ae:0b:a1:f4:d0:43:e1:75:
                    9f:49:ad:08:65:55:65:07:35:f1:50:3c:00:c0:fd:
                    da:47:09:bd:86:ca:4b:5f:13:c8:40:be:a0:f3:f3:
                    b7:92:7a:62:b7:2b:dc:c4:10:8e:0c:04:b1:f9:a2:
                    7b:e0:cb:45:59:2b:ac:64:5a:dc:32:61:f1:74:93:
                    03:1d:f2:c8:e1:3d:59:60:f0:96:df:b6:cb:78:97:
                    07:50:6e:06:3c:36:11:8b:2d:69:f7:e3:b2:f0:08:
                    56:2f:b3:4a:1b:b3:36:b8:6b:9d:ee:11:39:24:1f:
                    e8:84:49:a8:c4:f8:d1:a3:cf:f8:1e:b4:28:c7:c4:
                    89:f6:bd:c7:3d:8c:f9:22:33:24:7b:ff:6c:c7:30:
                    2f:5a:6a:aa:52:97:69:f9:f5:26:27:d7:b6:98:11:
                    04:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:0F:11:26:C8:13:CB:2C:31:5E:3A:10:86:69:61:BA:EC:82:D9:D7
            X509v3 Authority Key Identifier:
                keyid:70:7A:1F:28:6A:E2:98:6D:F6:49:10:C3:03:4E:51:89:A7:C2:16:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/cHofKGrimG32SRDDA05RiafCFt0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/cHofKGrimG32SRDDA05RiafCFt0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/cHofKGrimG32SRDDA05RiafCFt0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:18:c1:8f:5d:24:5a:a7:37:8c:b0:ac:fa:64:b8:d7:f1:8f:
         c0:56:75:b2:15:7d:05:cd:c7:63:fa:d2:a3:c0:bb:34:95:6e:
         b5:f0:49:b3:b7:15:b6:8e:f7:02:9e:2b:6a:28:2a:40:23:79:
         f7:b4:4d:10:94:34:a5:98:78:a3:56:76:23:8b:06:87:cd:7c:
         81:6c:9a:3b:28:b4:8a:71:b4:ea:ff:97:7e:d6:ec:e8:da:94:
         59:b6:7b:bf:16:a4:3e:5c:7d:af:ea:d5:8f:b3:98:1c:b1:1f:
         7f:08:46:b5:cc:f2:2e:ec:e9:9c:29:91:a1:2d:41:89:f2:8a:
         5b:15:50:d2:ff:c6:46:49:9a:35:64:2c:3e:48:92:2f:1d:3d:
         6f:e5:c5:ff:90:32:e9:24:d7:90:a3:52:85:9c:2c:7d:50:89:
         36:80:dd:68:f4:f7:8e:bd:17:b4:a0:b5:fe:12:f6:e2:45:08:
         1f:6a:a3:76:5b:23:7c:d7:b1:07:9a:00:8e:9a:ed:73:4a:9b:
         53:80:fc:0e:9e:c6:fc:4f:65:50:fb:18:d0:c2:3d:0f:c1:0d:
         40:dd:ac:b5:00:ab:8f:2c:ac:d9:7f:0d:11:bb:8b:52:ca:82:
         fd:2a:75:43:ed:cd:7c:65:e1:b1:d2:d4:0b:47:f0:c6:23:88:
         50:87:da:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:02:08 2026 by rpki-client