Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3652893/9742A64C5EED11EF8C934379762E951A/UJroMu1ribFqno9wWdMQAuvfVRY.mft
File:                     UJroMu1ribFqno9wWdMQAuvfVRY.mft (raw, json)
Hash identifier:          m+vRw8ciOxyMUJp+Sx6UR5NFAihpyvVh8Ey+uCfw9N8=
Subject key identifier:   26:06:2E:6A:97:6A:C2:FA:09:AB:4E:4D:BD:D2:9D:29:10:D1:BD:FF
Authority key identifier: 50:9A:E8:32:ED:6B:89:B1:6A:9E:8F:70:59:D3:10:02:EB:DF:55:16
Certificate issuer:       /CN=F3652893AF/serialNumber=509AE832ED6B89B16A9E8F7059D31002EBDF5516
Certificate serial:       02DB
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/UJroMu1ribFqno9wWdMQAuvfVRY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3652893/9742A64C5EED11EF8C934379762E951A/UJroMu1ribFqno9wWdMQAuvfVRY.mft
Manifest number:          02D6
Signing time:             Fri 24 Jul 2026 04:25:02 +0000
Manifest this update:     Fri 24 Jul 2026 04:25:02 +0000
Manifest next update:     Sun 26 Jul 2026 04:25:02 +0000
Files and hashes:         1: UJroMu1ribFqno9wWdMQAuvfVRY.crl (hash: abNxs2fSlxWA8+SJvKyWF1Ns/YuBt+3Gher6aZJOUnc=)
                          2: 25947A965EEF11EFA8CE8E84762E951A.roa (hash: w3FPrtTUNywICvBHUNi6Z9IDVeEht1kgjHG+aqy64j8=)
                          3: 0B46727E5EF011EF8D699F89762E951A.roa (hash: nreAgp5N7RBReJoLfOebgUnXd2HE0IWmlaF+azLEc+E=)
                          4: D1B2AC1C5EEF11EF93C62C89762E951A.roa (hash: vRmvo/WQ/7K1j/7ZFTOcVY6BLEhOIM6uf+eDFKl2Nlc=)
                          5: D2BD519A6F5F11EFB5A556BC762E951A.roa (hash: eDObOCF32CjsmNceS5K7zEOzteA210reg1RT/KbBTaY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3652893/9742A64C5EED11EF8C934379762E951A/UJroMu1ribFqno9wWdMQAuvfVRY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3652893/9742A64C5EED11EF8C934379762E951A/UJroMu1ribFqno9wWdMQAuvfVRY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/UJroMu1ribFqno9wWdMQAuvfVRY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 26 Jul 2026 00:07:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 731 (0x2db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3652893AF, serialNumber=509AE832ED6B89B16A9E8F7059D31002EBDF5516
        Validity
            Not Before: Jul 24 04:25:02 2026 GMT
            Not After : Jul 26 04:25:02 2026 GMT
        Subject: CN=6a62e91e-d6fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:3b:72:6a:ca:d8:f3:72:75:81:c0:d5:a7:fb:
                    2d:5b:5c:55:73:8b:9c:78:c9:c8:15:51:0e:6d:e9:
                    89:88:fb:a9:6f:03:57:db:15:34:c8:10:81:c5:70:
                    50:9c:66:fc:0b:57:61:b6:05:64:26:c2:6b:40:e7:
                    96:2b:d2:40:ee:74:dd:03:e7:9f:25:30:7b:36:4a:
                    3a:9c:05:3d:e1:4e:6a:5f:fb:4a:a3:77:d6:19:58:
                    1a:9e:51:9a:ed:59:4a:d9:11:88:cd:0a:7e:49:70:
                    28:37:8d:56:ac:a8:1c:ca:68:31:9f:d1:cb:72:71:
                    ff:15:b9:ae:a9:ca:7c:85:8b:a6:53:cd:04:01:40:
                    56:0b:54:3d:f3:c6:0f:dd:65:1d:00:67:1b:ca:95:
                    ce:64:54:e0:79:31:32:16:19:7a:9e:d0:c9:6b:d1:
                    39:9f:30:ef:8b:95:ff:0f:a3:7a:68:34:f7:9e:c1:
                    44:09:bd:92:0a:36:47:2c:dc:4d:e7:3b:83:9b:73:
                    d2:c3:23:60:bf:ef:cb:bd:a7:48:7f:e9:e2:f7:fc:
                    17:d6:90:80:43:ce:f5:98:a8:39:f1:64:36:35:9c:
                    04:06:15:61:14:97:a4:1c:d3:ca:e3:b6:2f:27:89:
                    5e:9e:7b:be:6c:95:49:d0:93:b5:55:d8:97:13:29:
                    cb:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:06:2E:6A:97:6A:C2:FA:09:AB:4E:4D:BD:D2:9D:29:10:D1:BD:FF
            X509v3 Authority Key Identifier:
                keyid:50:9A:E8:32:ED:6B:89:B1:6A:9E:8F:70:59:D3:10:02:EB:DF:55:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3652893/9742A64C5EED11EF8C934379762E951A/UJroMu1ribFqno9wWdMQAuvfVRY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/UJroMu1ribFqno9wWdMQAuvfVRY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3652893/9742A64C5EED11EF8C934379762E951A/UJroMu1ribFqno9wWdMQAuvfVRY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:7b:ea:69:28:6d:b0:67:e4:c5:e9:d0:ba:1c:33:3c:29:7b:
         fa:39:3e:65:02:c0:89:6f:6b:88:0a:68:b1:98:d3:12:03:bf:
         36:78:22:c1:67:20:5a:b5:aa:60:c5:3b:de:6e:07:f1:32:8a:
         ba:94:76:fa:16:ec:31:55:55:f4:dd:9e:0a:33:eb:13:82:bc:
         f5:bf:7b:12:c3:ce:c6:1b:d4:8b:f4:4d:52:37:7a:b5:1e:24:
         68:f3:9a:64:72:75:80:e2:98:83:79:ae:9b:69:f4:05:48:d9:
         f0:af:b0:21:d0:3b:55:71:b1:0b:d1:1e:e1:5b:b6:5d:69:67:
         af:c9:38:94:a1:f7:ae:6b:79:b0:b3:f4:6a:db:f6:96:bf:c6:
         d8:07:e6:df:fc:e1:99:48:b9:82:f0:c4:33:67:bd:01:0e:38:
         a9:2e:2a:b2:73:ec:d9:04:14:87:54:0b:c5:5a:3b:6d:73:86:
         43:b7:2e:78:4f:f4:77:6a:99:0d:20:c1:e2:2d:7d:cf:5c:3d:
         18:68:1b:ad:47:0a:95:09:17:5a:b0:0e:22:56:9c:79:90:dd:
         c3:92:cd:5e:08:48:c4:ed:56:f8:cc:9f:2a:ea:16:a8:b4:9e:
         2a:7e:87:be:ae:b7:5c:42:b8:a7:38:70:b3:72:6b:5d:17:34:
         3c:1b:99:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:02:21 2026 by rpki-client