Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3658AF9/5C52F2F4783611F09A24A0E3DAE4EC9C/1X3hPvIcIQ_suBv_eMQUm-o6fDI.mft
File:                     1X3hPvIcIQ_suBv_eMQUm-o6fDI.mft (raw, json)
Hash identifier:          kg30jjTJoM4naD6WwI0huXxvzUiw1gEaodvQLoIAldA=
Subject key identifier:   77:FD:39:97:1E:0E:70:CE:8C:7C:91:E8:15:C0:F6:AB:28:DB:55:16
Authority key identifier: D5:7D:E1:3E:F2:1C:21:0F:EC:B8:1B:FF:78:C4:14:9B:EA:3A:7C:32
Certificate issuer:       /CN=F3658AF9RI/serialNumber=D57DE13EF21C210FECB81BFF78C4149BEA3A7C32
Certificate serial:       0114
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/1X3hPvIcIQ_suBv_eMQUm-o6fDI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3658AF9/5C52F2F4783611F09A24A0E3DAE4EC9C/1X3hPvIcIQ_suBv_eMQUm-o6fDI.mft
Manifest number:          0114
Signing time:             Tue 12 May 2026 05:04:09 +0000
Manifest this update:     Tue 12 May 2026 05:04:08 +0000
Manifest next update:     Thu 14 May 2026 05:04:08 +0000
Files and hashes:         1: 1X3hPvIcIQ_suBv_eMQUm-o6fDI.crl (hash: SXpA2zZYucudob+Fl5BZTWoPnQX8Kk4UkS5fV5q9WNo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3658AF9/5C52F2F4783611F09A24A0E3DAE4EC9C/1X3hPvIcIQ_suBv_eMQUm-o6fDI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3658AF9/5C52F2F4783611F09A24A0E3DAE4EC9C/1X3hPvIcIQ_suBv_eMQUm-o6fDI.mft
                          rsync://rpki.afrinic.net/repository/ripe/1X3hPvIcIQ_suBv_eMQUm-o6fDI.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 14 May 2026 05:04:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 276 (0x114)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3658AF9RI, serialNumber=D57DE13EF21C210FECB81BFF78C4149BEA3A7C32
        Validity
            Not Before: May 12 05:04:08 2026 GMT
            Not After : May 14 05:04:08 2026 GMT
        Subject: CN=6a02b4c8-8411
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a5:f7:c7:5c:3d:86:a7:49:aa:e0:88:c9:f7:
                    bb:79:96:6a:13:97:14:2d:56:55:df:f9:e7:9a:54:
                    55:2c:4e:39:28:05:08:6f:c2:71:54:41:69:3f:21:
                    10:17:55:8f:64:7f:b6:05:0b:9b:76:1b:68:e3:ed:
                    28:96:ba:1b:b1:36:25:ee:59:f8:1a:2b:bf:a8:f9:
                    15:90:ca:f4:9b:84:9c:1b:e3:12:1b:c4:7b:07:31:
                    fd:d3:17:93:ea:ac:d3:de:ef:62:db:b8:0b:50:90:
                    4a:c1:61:aa:4c:f1:ad:ab:c1:c9:c0:a5:a2:7d:1d:
                    f0:6a:78:c3:ac:eb:cb:9e:4c:61:99:48:2d:8c:8e:
                    6c:e4:ee:7c:c3:a8:f2:e8:28:ee:39:a5:5a:89:62:
                    06:e8:e6:c4:1c:ce:0a:7d:0e:6a:df:1b:dc:eb:4e:
                    18:d4:dd:c3:c1:14:e4:1a:2f:a6:05:2c:d7:58:43:
                    b8:4f:e1:ec:bd:0f:27:9e:76:27:35:a3:b6:3d:6e:
                    98:70:3f:8b:ca:5c:96:9a:06:dd:4f:4b:e8:22:fb:
                    12:3d:96:13:4d:dd:75:ee:70:01:70:28:0a:f0:a2:
                    3d:57:77:65:e0:5e:89:cf:b5:37:fc:88:4c:ef:41:
                    4e:29:6d:cb:1f:c3:fc:9a:e7:2f:19:41:99:9e:a3:
                    f9:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:FD:39:97:1E:0E:70:CE:8C:7C:91:E8:15:C0:F6:AB:28:DB:55:16
            X509v3 Authority Key Identifier:
                keyid:D5:7D:E1:3E:F2:1C:21:0F:EC:B8:1B:FF:78:C4:14:9B:EA:3A:7C:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3658AF9/5C52F2F4783611F09A24A0E3DAE4EC9C/1X3hPvIcIQ_suBv_eMQUm-o6fDI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/1X3hPvIcIQ_suBv_eMQUm-o6fDI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3658AF9/5C52F2F4783611F09A24A0E3DAE4EC9C/1X3hPvIcIQ_suBv_eMQUm-o6fDI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:e7:b4:fe:a3:67:02:4b:3d:b6:14:8a:ce:80:26:f5:3f:85:
         59:f9:77:32:21:25:cc:b1:5d:25:43:81:9d:07:fd:a0:6d:1b:
         6f:72:46:a9:53:b4:15:7c:b6:14:1c:0e:b5:72:f4:71:e8:bd:
         79:20:8f:89:37:d8:9a:98:ad:4c:e8:53:9f:9f:5c:92:eb:11:
         ab:74:39:9c:77:81:f8:7f:4f:d0:7b:dd:82:ee:28:c8:ea:5f:
         37:07:18:11:1d:5e:ef:5e:47:15:71:b4:5b:7a:90:3f:d9:cb:
         50:28:29:5a:c0:5b:b6:36:78:70:6e:9c:af:41:c6:f2:23:3b:
         84:15:ba:77:d9:45:72:e5:c0:8e:8e:c2:dc:0b:24:4b:00:bb:
         20:91:51:35:50:8c:9e:e0:1b:87:61:4e:a9:ed:b2:dd:dd:3f:
         4e:85:e2:9f:54:d4:06:d1:c0:86:4a:42:04:e8:86:6c:a9:47:
         1a:57:08:2c:90:66:2e:19:16:5d:95:48:c2:3a:1e:b0:fc:15:
         ce:d7:ce:47:97:a2:87:8a:6d:75:35:2c:07:f3:20:38:cb:0f:
         3e:a9:63:04:4d:3c:8e:7f:f4:43:21:f0:e1:c5:fc:f3:44:01:
         a1:d3:f2:06:8c:99:61:4c:4b:1c:d5:a5:49:c6:2b:b6:ae:24:
         90:fc:b7:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:30:39 2026 by rpki-client