Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3664815/F675B6D0F1D711F0B0265CB1DAE4EC9C/NoqlwYM32LEA43kHcgA1BOIR25U.mft
File:                     NoqlwYM32LEA43kHcgA1BOIR25U.mft (raw, json)
Hash identifier:          V4yOOdnkFq53VpQfD4CukWrMW24fbqNm52nAG6/YUUA=
Subject key identifier:   8D:12:DA:CD:33:49:C0:F8:8E:16:B9:5C:6C:CE:88:1F:08:2E:F9:81
Authority key identifier: 36:8A:A5:C1:83:37:D8:B1:00:E3:79:07:72:00:35:04:E2:11:DB:95
Certificate issuer:       /CN=F3664815AF/serialNumber=368AA5C18337D8B100E3790772003504E211DB95
Certificate serial:       C0
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/NoqlwYM32LEA43kHcgA1BOIR25U.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3664815/F675B6D0F1D711F0B0265CB1DAE4EC9C/NoqlwYM32LEA43kHcgA1BOIR25U.mft
Manifest number:          BF
Signing time:             Thu 23 Jul 2026 05:23:06 +0000
Manifest this update:     Thu 23 Jul 2026 05:23:05 +0000
Manifest next update:     Sat 25 Jul 2026 05:23:05 +0000
Files and hashes:         1: NoqlwYM32LEA43kHcgA1BOIR25U.crl (hash: Jf2u0Cj9qSPRTrbu3KCcivGiuXAI5noHxfi97SkBuOw=)
                          2: 728FCC2EF1D811F0A90A06B4DAE4EC9C.roa (hash: 6RL/4V6ZWEbg7BN3QUTvLxt/VnmJ1eoKO54see9w44I=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3664815/F675B6D0F1D711F0B0265CB1DAE4EC9C/NoqlwYM32LEA43kHcgA1BOIR25U.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3664815/F675B6D0F1D711F0B0265CB1DAE4EC9C/NoqlwYM32LEA43kHcgA1BOIR25U.mft
                          rsync://rpki.afrinic.net/repository/afrinic/NoqlwYM32LEA43kHcgA1BOIR25U.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 25 Jul 2026 05:23:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 192 (0xc0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3664815AF, serialNumber=368AA5C18337D8B100E3790772003504E211DB95
        Validity
            Not Before: Jul 23 05:23:05 2026 GMT
            Not After : Jul 25 05:23:05 2026 GMT
        Subject: CN=6a61a53a-9130
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:74:97:40:e4:19:8f:9a:3a:ec:76:19:05:b4:
                    f5:5c:71:96:27:0d:d9:b0:a9:49:2f:45:8b:54:7c:
                    cc:f9:e0:8c:7f:63:be:c1:62:03:97:87:e5:b2:8e:
                    86:7f:8a:7f:24:e6:a7:8d:e4:f9:51:25:ce:31:bd:
                    62:c9:81:ce:5e:0d:2b:54:3d:dc:2b:48:c4:96:48:
                    52:5a:30:ce:5d:cd:57:07:c6:6f:72:d5:b7:d9:d0:
                    41:dc:ba:24:3d:da:af:d2:74:32:27:78:28:33:71:
                    b8:55:25:7a:c7:96:e8:d3:33:11:86:46:2c:db:9b:
                    81:c7:89:eb:86:d1:2c:19:a7:4b:ee:22:a4:78:c2:
                    d4:23:2c:bd:35:6b:96:14:c3:4f:89:5b:23:e5:b6:
                    e0:de:a9:a2:b3:e9:24:64:0b:71:d0:50:f6:8e:22:
                    52:b8:77:e7:14:63:2d:f6:7a:24:3f:bb:e1:df:9e:
                    6a:81:1c:be:ee:66:ca:fe:4b:3f:7a:6f:39:a3:47:
                    02:ee:47:5e:63:be:f6:1d:91:b2:53:d0:d2:d5:32:
                    44:c8:ff:0e:97:a7:e7:95:a1:3a:bd:ff:8f:63:44:
                    4f:52:00:0b:8a:82:8b:51:1a:ad:1b:f2:b3:62:93:
                    30:e3:e4:0c:b9:72:50:74:55:1f:fd:c5:fa:b7:47:
                    5b:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:12:DA:CD:33:49:C0:F8:8E:16:B9:5C:6C:CE:88:1F:08:2E:F9:81
            X509v3 Authority Key Identifier:
                keyid:36:8A:A5:C1:83:37:D8:B1:00:E3:79:07:72:00:35:04:E2:11:DB:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3664815/F675B6D0F1D711F0B0265CB1DAE4EC9C/NoqlwYM32LEA43kHcgA1BOIR25U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/NoqlwYM32LEA43kHcgA1BOIR25U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3664815/F675B6D0F1D711F0B0265CB1DAE4EC9C/NoqlwYM32LEA43kHcgA1BOIR25U.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:c6:7e:c8:8b:00:66:af:9e:11:5b:a6:6b:5c:13:0a:44:41:
         e6:a8:9c:48:30:25:50:a4:46:ab:29:fa:34:55:e8:3d:7c:c8:
         db:4b:38:75:74:df:1d:0e:3c:06:d6:83:58:88:d1:c6:2f:05:
         a7:e5:6e:06:3f:a0:d3:b7:17:e0:8f:27:3c:e0:96:fd:0e:ff:
         c2:a1:67:40:bf:fd:51:af:5b:f8:25:ef:f7:7a:fc:7a:b3:a0:
         1a:04:49:07:b6:65:37:12:a5:db:1a:16:26:3f:b3:29:17:bf:
         02:ab:95:4a:34:aa:53:41:05:4e:5f:7f:88:50:30:41:ed:a3:
         17:ce:e7:4f:b6:84:f5:51:d2:81:a4:13:74:f9:0f:ff:f3:a7:
         5d:77:b2:7f:eb:11:7f:cd:34:2c:bd:8a:f2:5a:0d:cb:f7:19:
         cb:dd:62:d2:00:ad:5a:9d:7b:5a:9b:ab:fe:fc:d4:dd:43:ca:
         12:27:09:7d:64:0c:12:78:16:d7:ca:f5:d6:7a:d1:47:59:3e:
         0b:14:c0:6d:c5:11:cb:26:ec:66:c1:da:16:c9:64:ae:55:4d:
         57:6a:e1:f1:b3:f9:c8:a4:76:2d:c8:bf:ce:c2:40:4c:c4:bd:
         57:68:64:80:5e:f9:e3:75:b5:12:be:17:30:30:ac:9b:48:58:
         37:b0:70:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:38:01 2026 by rpki-client