Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3658AF9/5C52F2F4783611F09A24A0E3DAE4EC9C/1X3hPvIcIQ_suBv_eMQUm-o6fDI.mft
File:                     1X3hPvIcIQ_suBv_eMQUm-o6fDI.mft (raw, json)
Hash identifier:          lvRZfL8yTUzsyN5KX/jg1UDXQdSqtDqPO0J2nmpdnCU=
Subject key identifier:   B4:12:11:02:05:54:BE:7D:A0:3C:EA:33:92:55:51:DE:BC:2E:FC:A4
Authority key identifier: D5:7D:E1:3E:F2:1C:21:0F:EC:B8:1B:FF:78:C4:14:9B:EA:3A:7C:32
Certificate issuer:       /CN=F3658AF9RI/serialNumber=D57DE13EF21C210FECB81BFF78C4149BEA3A7C32
Certificate serial:       015C
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/1X3hPvIcIQ_suBv_eMQUm-o6fDI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3658AF9/5C52F2F4783611F09A24A0E3DAE4EC9C/1X3hPvIcIQ_suBv_eMQUm-o6fDI.mft
Manifest number:          015C
Signing time:             Thu 23 Jul 2026 05:05:01 +0000
Manifest this update:     Thu 23 Jul 2026 05:05:00 +0000
Manifest next update:     Sat 25 Jul 2026 05:05:00 +0000
Files and hashes:         1: 1X3hPvIcIQ_suBv_eMQUm-o6fDI.crl (hash: F7GwMo9jjTgt/oQfV7iCnoxMc22C8Ka5ghHa1bqhG88=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3658AF9/5C52F2F4783611F09A24A0E3DAE4EC9C/1X3hPvIcIQ_suBv_eMQUm-o6fDI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3658AF9/5C52F2F4783611F09A24A0E3DAE4EC9C/1X3hPvIcIQ_suBv_eMQUm-o6fDI.mft
                          rsync://rpki.afrinic.net/repository/ripe/1X3hPvIcIQ_suBv_eMQUm-o6fDI.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 25 Jul 2026 05:04:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 348 (0x15c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3658AF9RI, serialNumber=D57DE13EF21C210FECB81BFF78C4149BEA3A7C32
        Validity
            Not Before: Jul 23 05:05:00 2026 GMT
            Not After : Jul 25 05:05:00 2026 GMT
        Subject: CN=6a61a0fd-e165
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:e7:1e:e7:fa:63:8e:5d:5c:29:81:4c:2d:e2:
                    8c:9d:22:4b:f3:b9:c3:0e:23:54:91:a4:4c:95:6c:
                    9b:f8:36:fa:78:67:c0:c3:f6:86:2a:a5:dd:5e:41:
                    66:94:9b:37:b8:bb:c1:87:39:15:22:54:27:18:00:
                    5f:b6:8c:8d:08:14:4d:37:f2:28:52:07:cd:59:d9:
                    08:51:3b:28:13:19:80:a2:c5:d2:d7:97:56:66:26:
                    eb:dc:9b:8b:b4:6f:3d:55:10:de:5c:2c:ef:a3:1b:
                    55:d8:d0:e3:9f:fd:f9:10:52:6d:11:56:0f:e2:0b:
                    b8:89:1e:f1:92:ea:54:ee:44:d3:65:ad:77:9d:f7:
                    ab:b6:d4:02:6b:d3:68:28:fd:c5:c3:9e:96:a8:f5:
                    58:80:f3:cd:96:a0:09:8e:2f:f4:3c:15:74:15:d7:
                    22:dd:73:8e:98:e5:30:80:29:98:ec:27:df:15:5f:
                    85:d5:a1:9b:c3:70:b4:9a:ee:8d:57:26:97:4d:77:
                    5e:5a:19:77:80:54:e7:92:9b:82:dd:e4:89:93:a7:
                    ad:90:84:d4:f7:47:09:35:1b:e5:6e:0f:7e:f8:73:
                    71:79:65:db:9b:73:07:cd:c9:c6:0e:7b:8d:98:0a:
                    d0:c7:67:be:34:16:6e:4e:25:c8:2c:80:83:f2:82:
                    24:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:12:11:02:05:54:BE:7D:A0:3C:EA:33:92:55:51:DE:BC:2E:FC:A4
            X509v3 Authority Key Identifier:
                keyid:D5:7D:E1:3E:F2:1C:21:0F:EC:B8:1B:FF:78:C4:14:9B:EA:3A:7C:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3658AF9/5C52F2F4783611F09A24A0E3DAE4EC9C/1X3hPvIcIQ_suBv_eMQUm-o6fDI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/1X3hPvIcIQ_suBv_eMQUm-o6fDI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3658AF9/5C52F2F4783611F09A24A0E3DAE4EC9C/1X3hPvIcIQ_suBv_eMQUm-o6fDI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:a3:38:6a:e0:8f:f0:fb:ad:8d:23:79:80:ac:11:5b:8c:99:
         89:22:92:03:13:d0:ea:8f:16:75:55:26:d3:df:9d:d3:50:72:
         0f:7a:a8:e0:a1:af:50:4f:ed:73:5f:bb:d4:f1:58:b6:8b:48:
         19:70:d5:c1:a3:4d:68:af:19:6c:e7:6b:e2:99:4d:fc:ef:23:
         73:f2:ad:76:2c:f0:aa:eb:e9:3d:70:eb:81:db:17:1e:20:46:
         7b:1b:16:3e:c2:b9:cd:64:5d:1d:9d:c9:20:38:b1:ad:21:01:
         fd:07:e0:66:29:04:7d:89:3c:42:a0:00:e5:09:da:b1:15:30:
         ac:0b:48:4c:7a:d7:25:6e:94:52:22:0b:76:12:a7:1f:58:58:
         ef:8b:d9:81:86:27:e2:65:9e:5a:81:42:8b:a5:e8:b9:4b:50:
         a9:dd:84:bf:d1:54:fa:75:19:47:8f:19:fc:b3:95:13:4e:6a:
         02:37:30:f9:21:df:54:3c:5a:83:d4:8b:e4:28:03:84:ae:25:
         2e:f6:fc:5c:21:42:3a:0c:ea:7c:eb:ab:27:c7:9f:98:61:f4:
         bc:00:93:73:90:0c:5d:85:09:a5:09:93:ed:5e:3d:1f:ec:19:
         fa:5c:34:ec:67:e8:77:5d:e3:79:50:c3:da:6e:60:3d:90:08:
         f1:97:86:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:47:26 2026 by rpki-client