Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3651B12/1CC77B125BF011F0936AE0D9DAE4EC9C/1F-q3w0PsrIYxNl-HvQbwMkznC8.mft
File:                     1F-q3w0PsrIYxNl-HvQbwMkznC8.mft (raw, json)
Hash identifier:          Db+GBFePNKBhnOhCtR3FsXXTVAJFyktQK8QMgd8Sl2w=
Subject key identifier:   97:B3:A8:D1:F3:44:1A:DF:E8:72:DF:6F:5D:CB:48:0D:E9:2A:E5:D2
Authority key identifier: D4:5F:AA:DF:0D:0F:B2:B2:18:C4:D9:7E:1E:F4:1B:C0:C9:33:9C:2F
Certificate issuer:       /CN=F3651B12RI/serialNumber=D45FAADF0D0FB2B218C4D97E1EF41BC0C9339C2F
Certificate serial:       01C7
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/1F-q3w0PsrIYxNl-HvQbwMkznC8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3651B12/1CC77B125BF011F0936AE0D9DAE4EC9C/1F-q3w0PsrIYxNl-HvQbwMkznC8.mft
Manifest number:          01C7
Signing time:             Thu 01 Oct 2026 05:00:53 +0000
Manifest this update:     Thu 01 Oct 2026 05:00:52 +0000
Manifest next update:     Sat 03 Oct 2026 05:00:52 +0000
Files and hashes:         1: 1F-q3w0PsrIYxNl-HvQbwMkznC8.crl (hash: ORt8egHkR9QWNwaBgHD0i75kcZrL/GchdqfCRETZQYQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3651B12/1CC77B125BF011F0936AE0D9DAE4EC9C/1F-q3w0PsrIYxNl-HvQbwMkznC8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3651B12/1CC77B125BF011F0936AE0D9DAE4EC9C/1F-q3w0PsrIYxNl-HvQbwMkznC8.mft
                          rsync://rpki.afrinic.net/repository/ripe/1F-q3w0PsrIYxNl-HvQbwMkznC8.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 03 Oct 2026 00:45:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 455 (0x1c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3651B12RI, serialNumber=D45FAADF0D0FB2B218C4D97E1EF41BC0C9339C2F
        Validity
            Not Before: Oct  1 05:00:52 2026 GMT
            Not After : Oct  3 05:00:52 2026 GMT
        Subject: CN=6abde905-ba78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:a8:da:59:11:2b:03:7b:b5:ad:36:bd:5a:fc:
                    06:9c:dd:68:12:9a:a5:87:ab:00:d9:d3:3c:8a:cd:
                    7f:8a:19:fc:38:60:7a:db:7c:a3:e8:85:6f:9e:a6:
                    2e:a2:b6:1d:32:c1:4c:69:fe:0f:ae:5c:3d:b6:33:
                    62:2f:3a:92:27:16:af:21:55:57:5e:3b:8c:61:7c:
                    d8:61:12:a4:4c:64:fb:e3:14:72:3c:ec:a4:6e:59:
                    e6:e8:bf:72:64:aa:7b:0e:5e:ee:cd:fe:a3:d5:73:
                    65:c4:23:51:6b:8a:23:93:90:58:33:6d:09:e8:eb:
                    09:fb:0f:12:da:a9:5b:71:d6:40:20:3a:88:94:05:
                    0e:c3:b2:03:1e:2c:5c:27:78:0d:7a:cc:a9:33:81:
                    27:b4:d9:5f:b7:2d:82:fa:ad:e3:db:2b:49:b1:b5:
                    08:77:0c:84:2b:52:5d:9f:76:e0:cf:49:21:11:69:
                    51:f6:d5:f0:0b:ac:10:af:b1:70:31:90:38:ec:81:
                    7f:f3:e2:88:5c:8f:47:da:29:2c:2b:4c:05:ce:e9:
                    50:30:33:72:c2:a3:8d:fe:4e:ff:29:a5:c6:c7:49:
                    bd:c3:b1:62:d5:b0:cc:7e:5e:67:3c:53:ab:19:c8:
                    5b:99:aa:a9:35:6f:5a:04:01:7f:5b:e6:49:72:e4:
                    3d:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:B3:A8:D1:F3:44:1A:DF:E8:72:DF:6F:5D:CB:48:0D:E9:2A:E5:D2
            X509v3 Authority Key Identifier:
                keyid:D4:5F:AA:DF:0D:0F:B2:B2:18:C4:D9:7E:1E:F4:1B:C0:C9:33:9C:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3651B12/1CC77B125BF011F0936AE0D9DAE4EC9C/1F-q3w0PsrIYxNl-HvQbwMkznC8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/1F-q3w0PsrIYxNl-HvQbwMkznC8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3651B12/1CC77B125BF011F0936AE0D9DAE4EC9C/1F-q3w0PsrIYxNl-HvQbwMkznC8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:c0:7b:42:c4:b7:81:6e:cf:cf:01:e8:d9:0f:05:8f:ad:0b:
         3c:17:89:a8:15:7f:09:d1:d8:35:12:df:d9:f7:16:7e:6e:7a:
         90:99:48:20:b8:23:4d:c8:79:a2:94:30:f2:8e:8c:6f:df:48:
         ae:fc:7d:6b:d8:11:da:e3:0d:1d:9d:71:ef:47:94:29:42:a1:
         4c:d0:c8:db:86:42:51:c5:8a:bc:57:c3:44:fa:cd:ce:b1:35:
         96:b9:a9:0c:80:4e:b3:e1:21:c7:89:9f:03:ae:b4:69:e8:c2:
         0c:4d:98:ae:2d:f5:e0:3c:39:02:80:e2:9b:8f:eb:a4:b7:35:
         9d:4c:82:23:6d:40:bb:b8:fa:da:1a:4b:0d:db:97:e7:61:d6:
         08:da:2b:dd:75:46:8e:5c:bd:e2:54:d3:15:6a:fa:07:dd:05:
         f7:1d:99:1a:56:53:4a:16:3e:e8:a8:7c:c6:e2:7a:f8:1f:0b:
         88:84:3e:aa:dc:21:00:9a:c3:80:bf:1f:c8:e9:cd:81:e7:12:
         7a:1c:84:48:cc:d4:5d:04:f1:a3:9b:59:f4:10:3d:45:4c:2f:
         83:ff:4b:ca:e2:81:e7:7f:db:79:b1:21:b9:80:c4:e3:8a:4e:
         d6:80:30:f0:21:04:92:93:78:e2:ed:81:d7:83:f3:54:10:cc:
         90:58:35:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----