Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3658AF9/5C52F2F4783611F09A24A0E3DAE4EC9C/1X3hPvIcIQ_suBv_eMQUm-o6fDI.mft
File:                     1X3hPvIcIQ_suBv_eMQUm-o6fDI.mft (raw, json)
Hash identifier:          IZwrnwoSnX9uX6M/C1/7zm0r/APWpMJnA6Vfw5mq/Tc=
Subject key identifier:   05:0C:1C:4A:23:10:4B:A8:5C:41:47:65:31:56:17:E4:F0:D1:AD:0F
Authority key identifier: D5:7D:E1:3E:F2:1C:21:0F:EC:B8:1B:FF:78:C4:14:9B:EA:3A:7C:32
Certificate issuer:       /CN=F3658AF9RI/serialNumber=D57DE13EF21C210FECB81BFF78C4149BEA3A7C32
Certificate serial:       01CF
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/1X3hPvIcIQ_suBv_eMQUm-o6fDI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3658AF9/5C52F2F4783611F09A24A0E3DAE4EC9C/1X3hPvIcIQ_suBv_eMQUm-o6fDI.mft
Manifest number:          01CF
Signing time:             Sun 15 Nov 2026 05:03:18 +0000
Manifest this update:     Sun 15 Nov 2026 05:03:18 +0000
Manifest next update:     Tue 17 Nov 2026 05:03:18 +0000
Files and hashes:         1: 1X3hPvIcIQ_suBv_eMQUm-o6fDI.crl (hash: PjyfUYr/ij9jq53SdbkqJ6UZGszsLnOf2RVR1+imAks=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3658AF9/5C52F2F4783611F09A24A0E3DAE4EC9C/1X3hPvIcIQ_suBv_eMQUm-o6fDI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3658AF9/5C52F2F4783611F09A24A0E3DAE4EC9C/1X3hPvIcIQ_suBv_eMQUm-o6fDI.mft
                          rsync://rpki.afrinic.net/repository/ripe/1X3hPvIcIQ_suBv_eMQUm-o6fDI.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 17 Nov 2026 00:45:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 463 (0x1cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3658AF9RI, serialNumber=D57DE13EF21C210FECB81BFF78C4149BEA3A7C32
        Validity
            Not Before: Nov 15 05:03:18 2026 GMT
            Not After : Nov 17 05:03:18 2026 GMT
        Subject: CN=6af93d16-cdcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:85:3a:f3:c5:b5:3b:ab:0c:0d:35:d9:89:5c:
                    cb:33:27:18:09:0b:8c:2c:5f:c1:e4:1d:d6:46:a6:
                    59:46:7e:15:35:c5:a2:e3:c7:67:61:27:c8:bf:45:
                    e7:6d:2a:f3:2c:a9:63:af:f6:f1:42:d0:83:98:a4:
                    39:fd:17:03:86:a1:3f:f4:67:3c:f9:eb:25:30:78:
                    98:13:fe:6a:81:85:0c:2a:6d:30:f3:71:36:59:02:
                    dd:5f:fa:c5:09:25:86:c3:8a:96:cb:6d:6f:6d:0a:
                    b4:fc:99:b4:0d:a6:bb:58:c5:f6:25:5a:a9:26:8b:
                    30:0c:69:20:35:88:a1:17:ec:e3:ac:5b:3d:0b:12:
                    b1:ee:da:9e:4b:07:ef:a5:10:64:42:97:82:97:b9:
                    a7:de:be:b7:0f:f9:56:ac:d9:7f:99:16:29:7c:86:
                    63:60:6a:0b:dc:d6:65:0b:a4:46:cc:61:d8:11:e3:
                    f7:8c:3a:0c:4e:91:f8:b5:d6:3a:b2:c5:09:3d:19:
                    5d:5f:ae:9c:01:d7:f8:a5:7c:66:6d:02:9d:85:8c:
                    09:22:54:3f:a5:1e:dd:c1:a8:02:fd:c0:aa:7e:1d:
                    bb:61:f6:0f:f8:8e:0b:15:e6:aa:8c:db:14:57:71:
                    f5:96:b6:f0:b0:2f:cc:90:17:6e:8a:c6:9a:07:62:
                    2c:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:0C:1C:4A:23:10:4B:A8:5C:41:47:65:31:56:17:E4:F0:D1:AD:0F
            X509v3 Authority Key Identifier:
                keyid:D5:7D:E1:3E:F2:1C:21:0F:EC:B8:1B:FF:78:C4:14:9B:EA:3A:7C:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3658AF9/5C52F2F4783611F09A24A0E3DAE4EC9C/1X3hPvIcIQ_suBv_eMQUm-o6fDI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/1X3hPvIcIQ_suBv_eMQUm-o6fDI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3658AF9/5C52F2F4783611F09A24A0E3DAE4EC9C/1X3hPvIcIQ_suBv_eMQUm-o6fDI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:3f:8c:4b:b0:4c:62:71:65:12:16:85:b4:b4:27:23:33:ed:
         2d:17:b3:59:b7:ca:ac:3c:79:ff:ef:f4:a3:1a:4f:3a:0a:a6:
         60:e4:1c:1c:36:ce:75:0f:18:26:cd:02:0b:49:0c:b6:65:bc:
         ba:f8:4b:08:a5:57:9b:6f:eb:86:3b:d2:c9:13:f8:39:57:17:
         6d:78:bd:cf:a3:4f:3b:37:ee:05:84:91:24:cb:10:56:f6:55:
         96:bd:44:7a:72:27:c3:1b:bc:23:55:9c:72:00:f6:49:50:fb:
         b8:0e:e3:98:19:1f:77:9c:eb:42:b9:b8:1e:cf:8c:c8:86:3c:
         5f:8b:01:ab:55:51:82:fc:11:22:62:2b:5c:ce:16:12:8e:d3:
         51:04:d1:62:26:66:0f:e2:60:ce:7f:11:03:c8:7b:1b:41:ad:
         43:3e:2b:e6:24:1f:85:b6:ed:a2:49:ea:7c:77:75:fc:ae:d3:
         07:95:62:8c:1e:11:a4:ea:82:30:ef:de:bd:25:c7:20:cb:06:
         ee:d9:9e:99:d7:e4:25:bc:dd:23:7f:4b:16:db:14:07:62:31:
         50:57:6a:9b:11:76:a5:f9:c8:73:6f:99:a7:9f:36:e4:18:fb:
         c9:f8:fb:64:69:8c:a5:85:d7:51:2a:a0:4a:61:b2:64:5a:06:
         aa:06:6b:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----