Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3668037/3B24CCAC6DC711E68C5C442DF8AEA228/mwftdzFoum4LC-Pl3LLPeB96yCo.mft
File:                     mwftdzFoum4LC-Pl3LLPeB96yCo.mft (raw, json)
Hash identifier:          ISoDxoqDhqHpU9s13MiR75njduYm+povs34KQKPsD9Q=
Subject key identifier:   56:65:54:31:5A:89:66:A7:FA:AE:35:A6:BC:11:DC:8E:F4:A4:FD:43
Authority key identifier: 9B:07:ED:77:31:68:BA:6E:0B:0B:E3:E5:DC:B2:CF:78:1F:7A:C8:2A
Certificate issuer:       /CN=F3668037RI/serialNumber=9B07ED773168BA6E0B0BE3E5DCB2CF781F7AC82A
Certificate serial:       0EE3
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/mwftdzFoum4LC-Pl3LLPeB96yCo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3668037/3B24CCAC6DC711E68C5C442DF8AEA228/mwftdzFoum4LC-Pl3LLPeB96yCo.mft
Manifest number:          0EE1
Signing time:             Sun 15 Nov 2026 01:03:13 +0000
Manifest this update:     Sun 15 Nov 2026 01:03:12 +0000
Manifest next update:     Tue 17 Nov 2026 01:03:12 +0000
Files and hashes:         1: mwftdzFoum4LC-Pl3LLPeB96yCo.crl (hash: J/C45JrL+dXZG4iVU/mxvIMFA0J5qDSyBv6/s5FI+G0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3668037/3B24CCAC6DC711E68C5C442DF8AEA228/mwftdzFoum4LC-Pl3LLPeB96yCo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3668037/3B24CCAC6DC711E68C5C442DF8AEA228/mwftdzFoum4LC-Pl3LLPeB96yCo.mft
                          rsync://rpki.afrinic.net/repository/ripe/mwftdzFoum4LC-Pl3LLPeB96yCo.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 17 Nov 2026 00:45:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3811 (0xee3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3668037RI, serialNumber=9B07ED773168BA6E0B0BE3E5DCB2CF781F7AC82A
        Validity
            Not Before: Nov 15 01:03:12 2026 GMT
            Not After : Nov 17 01:03:12 2026 GMT
        Subject: CN=6af904d1-9eff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:24:ab:85:58:41:f6:30:fe:7c:96:9d:01:a1:
                    fd:46:c5:1d:7b:d8:c3:ab:b2:b3:8e:d1:4c:0e:e1:
                    d2:4d:35:03:86:eb:b8:cc:50:cb:ff:ef:26:c5:31:
                    c9:f3:dd:c4:6a:67:de:81:37:5e:dd:f9:02:27:4c:
                    7f:b7:ca:24:0f:db:16:87:b8:93:b0:2f:f5:d7:b0:
                    f4:92:71:93:09:fe:2e:08:6d:f6:f6:63:b6:1d:7d:
                    3e:5e:11:8c:c7:25:c4:6d:84:20:db:09:0b:cc:ca:
                    b9:3f:4d:c9:06:8e:6b:67:02:fa:29:e2:5e:ff:0c:
                    40:ce:a9:dd:14:72:6c:80:c2:9e:04:e1:6d:70:de:
                    d5:a6:84:36:41:66:45:12:8e:54:2d:a8:22:2e:03:
                    b4:85:33:a3:99:73:0b:40:42:8a:68:f0:40:6f:50:
                    6f:97:0e:e8:e1:bc:97:d2:d2:6a:cb:f0:fa:47:e1:
                    5d:29:a9:0d:47:7f:06:b6:ff:c9:ad:27:44:64:71:
                    31:1c:02:05:36:0e:68:ea:04:73:26:8e:da:7c:98:
                    5f:d3:34:d1:92:df:65:a1:fe:3c:e2:03:47:01:03:
                    99:ee:13:92:0e:8c:e5:ae:21:88:92:9d:6b:3f:d0:
                    82:a3:3e:d1:c2:68:28:b7:f6:30:70:4e:99:82:8a:
                    01:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:65:54:31:5A:89:66:A7:FA:AE:35:A6:BC:11:DC:8E:F4:A4:FD:43
            X509v3 Authority Key Identifier:
                keyid:9B:07:ED:77:31:68:BA:6E:0B:0B:E3:E5:DC:B2:CF:78:1F:7A:C8:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3668037/3B24CCAC6DC711E68C5C442DF8AEA228/mwftdzFoum4LC-Pl3LLPeB96yCo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/mwftdzFoum4LC-Pl3LLPeB96yCo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668037/3B24CCAC6DC711E68C5C442DF8AEA228/mwftdzFoum4LC-Pl3LLPeB96yCo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:80:4b:c9:eb:53:29:ca:ce:b6:e8:a3:72:d5:d3:25:95:f7:
         4a:86:7b:73:ec:ef:87:f9:dd:ff:70:2b:14:a2:5e:23:f6:25:
         79:42:d6:f8:4e:96:4e:36:5b:b7:8a:a8:d8:4c:96:f4:85:89:
         3e:77:fd:40:de:85:36:e5:f5:42:af:57:5b:05:6c:c5:e6:1e:
         9c:37:fe:09:70:f8:90:b7:3b:e6:b6:56:d9:21:cc:d9:2d:bd:
         a5:48:9a:f7:8b:d6:55:64:3d:c9:6d:e1:34:7a:35:10:3a:1b:
         ef:51:80:1f:74:c9:1c:79:84:42:a4:22:80:68:71:48:a0:50:
         6c:66:84:0a:ca:6a:f3:7b:b2:07:d0:45:6c:c8:ca:d0:d0:8b:
         47:cc:38:8e:02:71:8a:16:87:dd:0b:1b:b6:ef:59:db:2e:5a:
         c4:bb:39:5a:97:f8:e8:c9:38:b2:af:1a:58:f7:f6:a2:b0:c1:
         fa:3e:71:c0:b7:80:f2:d8:9d:8e:63:93:c5:eb:e5:bb:38:6d:
         91:28:25:e6:31:21:85:47:d0:32:2a:e1:4e:1b:77:87:1e:52:
         2d:f7:39:8f:60:59:ff:93:59:9b:5c:26:57:70:b6:e9:18:cc:
         40:b7:e1:cd:90:90:c6:69:80:0f:b4:43:72:1c:f8:5b:ea:94:
         18:23:67:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----