Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3674DA7/C661EE6E14B311EDA12368F2F1222468/DD2lBSocT7aPxjEmUGBjsCoEIWY.mft
File:                     DD2lBSocT7aPxjEmUGBjsCoEIWY.mft (raw, json)
Hash identifier:          WEERfQb7yo/+L510UXa38Lq8YXXgYsLLpe0Ucy4F/7k=
Subject key identifier:   E9:F6:09:29:D7:5A:4B:40:89:1F:0E:6B:21:7D:8F:C6:BA:9A:4F:BB
Authority key identifier: 0C:3D:A5:05:2A:1C:4F:B6:8F:C6:31:26:50:60:63:B0:2A:04:21:66
Certificate issuer:       /CN=F3674DA7AF/serialNumber=0C3DA5052A1C4FB68FC63126506063B02A042166
Certificate serial:       04BC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/DD2lBSocT7aPxjEmUGBjsCoEIWY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3674DA7/C661EE6E14B311EDA12368F2F1222468/DD2lBSocT7aPxjEmUGBjsCoEIWY.mft
Manifest number:          04BA
Signing time:             Mon 20 Oct 2025 02:57:49 +0000
Manifest this update:     Mon 20 Oct 2025 02:57:48 +0000
Manifest next update:     Wed 22 Oct 2025 02:57:48 +0000
Files and hashes:         1: DD2lBSocT7aPxjEmUGBjsCoEIWY.crl (hash: 2HaiLvGK4kqjuoAW/Zx24cZXnsPLtUbGdBsX5T6yDNs=)
                          2: 85DF150A4A0111EDBC8B019BF1222468.roa (hash: J0Z0C8a+DkOgBeapJ5WKsqyTDXB+uEMzdHyF0iz3ZIY=)
                          3: 89BEE5CE14B411EDB752D0F4F1222468.roa (hash: gxHiaz+MfliBB76QRhqTW1JJeJt0mkLpc0IJlrSjQm0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3674DA7/C661EE6E14B311EDA12368F2F1222468/DD2lBSocT7aPxjEmUGBjsCoEIWY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3674DA7/C661EE6E14B311EDA12368F2F1222468/DD2lBSocT7aPxjEmUGBjsCoEIWY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/DD2lBSocT7aPxjEmUGBjsCoEIWY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 22 Oct 2025 00:06:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1212 (0x4bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3674DA7AF, serialNumber=0C3DA5052A1C4FB68FC63126506063B02A042166
        Validity
            Not Before: Oct 20 02:57:48 2025 GMT
            Not After : Oct 22 02:57:48 2025 GMT
        Subject: CN=68f5a52d-ab1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c1:d0:29:26:83:08:5d:77:3a:93:e1:44:6d:
                    65:30:5e:55:b3:77:68:c9:da:1f:ee:48:bd:1c:00:
                    58:46:ce:09:8e:a7:01:de:60:83:80:ca:7f:11:7c:
                    ce:05:86:c5:2a:6a:c0:14:3c:7d:51:d6:70:d2:68:
                    bc:fa:d0:82:68:36:11:aa:c4:8b:f5:7a:a2:a3:60:
                    7c:3f:80:0f:cb:45:55:91:3b:84:6e:24:4d:73:77:
                    f9:6e:3c:dc:bf:d5:0b:19:dd:c7:16:55:4e:2e:6f:
                    f1:67:37:e0:4b:1f:3c:42:c6:d2:5b:a8:fc:1e:9e:
                    e1:ab:71:67:1c:40:42:a8:8a:74:5b:d0:df:72:60:
                    9e:d5:31:7c:57:ad:1f:ed:16:a8:df:89:e6:04:2f:
                    60:09:11:45:57:b1:32:cf:9e:49:c7:19:50:9f:df:
                    b9:aa:de:c0:4a:48:bb:fe:dc:45:85:9f:b7:5b:91:
                    68:24:9c:78:9b:9d:96:69:ab:f0:aa:56:cf:c4:73:
                    3f:c4:da:45:3c:ba:2b:5a:93:48:29:fc:84:e4:e7:
                    62:63:7a:50:e6:b9:af:4f:d7:42:99:ee:92:f2:fc:
                    a9:9b:8d:ec:9d:78:76:c0:7b:d0:50:64:9c:8f:51:
                    3a:eb:52:e9:13:e3:0d:a6:7c:18:87:62:92:56:11:
                    f2:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:F6:09:29:D7:5A:4B:40:89:1F:0E:6B:21:7D:8F:C6:BA:9A:4F:BB
            X509v3 Authority Key Identifier:
                keyid:0C:3D:A5:05:2A:1C:4F:B6:8F:C6:31:26:50:60:63:B0:2A:04:21:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3674DA7/C661EE6E14B311EDA12368F2F1222468/DD2lBSocT7aPxjEmUGBjsCoEIWY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DD2lBSocT7aPxjEmUGBjsCoEIWY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3674DA7/C661EE6E14B311EDA12368F2F1222468/DD2lBSocT7aPxjEmUGBjsCoEIWY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:fb:44:ee:ab:f9:10:5d:58:2b:c7:bb:80:c0:e1:39:ce:18:
         2b:a5:75:c0:23:50:72:ee:5b:01:8e:94:15:cd:34:89:6a:30:
         ce:79:6c:69:d9:f8:b8:39:88:51:45:a0:f4:4b:a3:b0:76:87:
         a4:62:7a:fc:b0:41:65:d0:c0:d9:be:fd:90:8d:5c:ec:68:61:
         7c:98:7d:21:99:f7:89:f8:3f:72:09:cc:90:10:a1:4d:29:bd:
         8a:7d:17:c1:0a:08:b0:bd:8f:42:f3:b1:3a:5d:fc:5b:01:2c:
         dc:28:bd:48:32:ed:2c:78:50:8d:f8:ff:f9:3f:cc:9a:55:05:
         f2:db:00:0f:67:6b:50:6d:94:1e:cb:76:d4:d0:c1:fd:2b:66:
         4d:a0:01:11:bc:04:70:d2:cf:f4:b9:8d:24:75:0f:92:b9:d9:
         1e:43:01:b5:3a:4f:65:c5:1c:ed:39:fe:be:89:40:99:63:7e:
         6a:06:c4:6e:d5:37:9e:a3:96:89:d3:25:cd:a2:c4:87:87:ca:
         10:f3:e2:d4:aa:b7:2a:3f:7e:0f:88:4d:0a:26:e2:66:59:67:
         6f:5e:8b:4b:2b:80:da:b3:5e:67:0e:93:50:69:c2:2f:3b:5b:
         d9:e0:19:92:c5:d1:28:2b:cc:d6:c8:37:36:92:51:a1:f9:4b:
         bf:0c:c9:21
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBLwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NzREQTdBRjExMC8GA1UEBRMoMEMzREE1MDUyQTFDNEZCNjhGQzYzMTI2NTA2MDYz
QjAyQTA0MjE2NjAeFw0yNTEwMjAwMjU3NDhaFw0yNTEwMjIwMjU3NDhaMBgxFjAU
BgNVBAMTDTY4ZjVhNTJkLWFiMWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC0wdApJoMIXXc6k+FEbWUwXlWzd2jJ2h/uSL0cAFhGzgmOpwHeYIOAyn8R
fM4FhsUqasAUPH1R1nDSaLz60IJoNhGqxIv1eqKjYHw/gA/LRVWRO4RuJE1zd/lu
PNy/1QsZ3ccWVU4ub/FnN+BLHzxCxtJbqPwenuGrcWccQEKoinRb0N9yYJ7VMXxX
rR/tFqjfieYEL2AJEUVXsTLPnknHGVCf37mq3sBKSLv+3EWFn7dbkWgknHibnZZp
q/CqVs/Ecz/E2kU8uitak0gp/ITk52JjelDmua9P10KZ7pLy/KmbjeydeHbAe9BQ
ZJyPUTrrUukT4w2mfBiHYpJWEfJbAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU6fYJ
KddaS0CJHw5rIX2PxrqaT7swHwYDVR0jBBgwFoAUDD2lBSocT7aPxjEmUGBjsCoE
IWYwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjc0REE3L0M2NjFFRTZFMTRCMzExRURBMTIzNjhGMkYxMjIyNDY4L0REMmxC
U29jVDdhUHhqRW1VR0Jqc0NvRUlXWS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0REMmxCU29jVDdhUHhqRW1VR0Jqc0NvRUlXWS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NzREQTcvQzY2MUVFNkUxNEIzMTFFREExMjM2OEYyRjEy
MjI0NjgvREQybEJTb2NUN2FQeGpFbVVHQmpzQ29FSVdZLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAE+0Tuq/kQXVgrx7uAwOE5zhgrpXXA
I1By7lsBjpQVzTSJajDOeWxp2fi4OYhRRaD0S6OwdoekYnr8sEFl0MDZvv2QjVzs
aGF8mH0hmfeJ+D9yCcyQEKFNKb2KfRfBCgiwvY9C87E6XfxbASzcKL1IMu0seFCN
+P/5P8yaVQXy2wAPZ2tQbZQey3bU0MH9K2ZNoAERvARw0s/0uY0kdQ+SudkeQwG1
Ok9lxRztOf6+iUCZY35qBsRu1Teeo5aJ0yXNosSHh8oQ8+LUqrcqP34PiE0KJuJm
WWdvXotLK4Das15nDpNQacIvO1vZ4BmSxdEoK8zWyDc2klGh+Uu/DMkh
-----END CERTIFICATE-----
Generated at Mon Oct 20 10:46:29 2025 by rpki-client