Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3675053/6984D66E745B11F1B41B61B7CE1D38B0/lY7E7TST-AUYn0loFwDHngiOfrI.mft
File:                     lY7E7TST-AUYn0loFwDHngiOfrI.mft (raw, json)
Hash identifier:          OVVfar1wVJZ+QBu465WQRFcqzcSQ0H7byURW0Blm76U=
Subject key identifier:   D9:0E:32:2C:57:6E:7C:D5:13:03:17:38:EA:E5:AD:90:A0:3F:22:C3
Authority key identifier: 95:8E:C4:ED:34:93:F8:05:18:9F:49:68:17:00:C7:9E:08:8E:7E:B2
Certificate issuer:       /CN=F3675053AF/serialNumber=958EC4ED3493F805189F49681700C79E088E7EB2
Certificate serial:       1D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/lY7E7TST-AUYn0loFwDHngiOfrI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3675053/6984D66E745B11F1B41B61B7CE1D38B0/lY7E7TST-AUYn0loFwDHngiOfrI.mft
Manifest number:          1B
Signing time:             Fri 24 Jul 2026 05:42:53 +0000
Manifest this update:     Fri 24 Jul 2026 05:42:52 +0000
Manifest next update:     Sun 26 Jul 2026 05:42:52 +0000
Files and hashes:         1: lY7E7TST-AUYn0loFwDHngiOfrI.crl (hash: qOwrNxu8QpRb15A/K40u55CSzorR9jJ1u0Q0FzYBREU=)
                          2: 4FE947B8748211F1BEF1D21ACF1D38B0.roa (hash: gMf5DUZWS8LRzzUKIgiaI5m52/YhBJXqXPqfDQ4cQck=)
                          3: 8D2A260C748111F19133C316CF1D38B0.roa (hash: E5OkO0hC2p5sav8EOOxzrRj7hCtcXtLqUMdK/zTMcsQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3675053/6984D66E745B11F1B41B61B7CE1D38B0/lY7E7TST-AUYn0loFwDHngiOfrI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3675053/6984D66E745B11F1B41B61B7CE1D38B0/lY7E7TST-AUYn0loFwDHngiOfrI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/lY7E7TST-AUYn0loFwDHngiOfrI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 26 Jul 2026 00:07:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 29 (0x1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3675053AF, serialNumber=958EC4ED3493F805189F49681700C79E088E7EB2
        Validity
            Not Before: Jul 24 05:42:52 2026 GMT
            Not After : Jul 26 05:42:52 2026 GMT
        Subject: CN=6a62fb5d-dc66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:7b:ca:72:16:20:e5:6a:c2:2f:4f:15:c0:8d:
                    e4:82:84:7a:fb:b0:a8:7e:7f:6d:4f:f7:4b:7c:9a:
                    6b:a6:45:40:44:8b:18:9b:16:f5:20:dc:2c:22:32:
                    d0:82:61:94:e5:f6:47:09:fb:62:71:4b:a9:8a:cc:
                    9c:75:9f:55:f6:bf:89:21:4e:c6:4e:23:f4:2c:8c:
                    57:d6:4e:6e:f9:a9:22:05:45:4f:7e:19:21:6c:1e:
                    a8:8f:3a:e2:e2:49:74:26:1f:a2:6d:56:00:05:f9:
                    56:fb:ee:92:9b:37:0f:d9:8b:b8:50:68:aa:f1:80:
                    40:50:1a:25:99:5a:ab:54:5e:24:39:b4:83:8b:fd:
                    0d:bc:73:cd:ee:db:dd:ed:87:99:5f:9c:8c:fe:2e:
                    38:91:bc:62:b2:9b:31:24:b2:f7:23:14:4c:f6:ae:
                    99:a9:28:f6:f8:11:5b:f5:67:6a:bb:f8:a8:b0:6a:
                    54:09:f9:ba:3d:69:a5:81:1e:ae:a3:13:33:e6:87:
                    fd:31:56:3f:c2:e5:6c:12:d8:9b:53:ad:cd:f8:b9:
                    71:e9:40:61:42:eb:fd:fd:f4:04:6e:b8:ac:7f:50:
                    1e:6e:f8:d7:91:00:26:db:83:30:67:f8:33:0b:db:
                    b5:cf:5f:ab:5a:b8:6d:88:2b:f5:df:46:92:35:09:
                    bd:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:0E:32:2C:57:6E:7C:D5:13:03:17:38:EA:E5:AD:90:A0:3F:22:C3
            X509v3 Authority Key Identifier:
                keyid:95:8E:C4:ED:34:93:F8:05:18:9F:49:68:17:00:C7:9E:08:8E:7E:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3675053/6984D66E745B11F1B41B61B7CE1D38B0/lY7E7TST-AUYn0loFwDHngiOfrI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lY7E7TST-AUYn0loFwDHngiOfrI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3675053/6984D66E745B11F1B41B61B7CE1D38B0/lY7E7TST-AUYn0loFwDHngiOfrI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:ab:b1:37:04:21:47:7a:51:80:b3:96:d2:a3:58:3d:7b:87:
         b2:d6:95:27:26:eb:84:80:36:59:ec:7e:62:49:a7:39:1e:d9:
         d7:b2:e7:b5:44:b6:36:03:4b:81:06:ef:e8:1b:c6:23:fa:ce:
         5d:40:1e:7a:ce:20:d6:a0:45:f5:20:13:86:2e:56:b5:44:1d:
         cf:6f:7a:93:41:f2:ae:a8:60:a8:e0:c2:32:5a:b2:5a:ec:eb:
         40:fc:2c:b4:58:5d:31:90:e6:8c:9f:72:11:b1:97:ac:fc:2e:
         e2:1a:d9:6f:d1:ad:e0:37:50:7c:73:52:99:66:31:64:8b:1e:
         3a:ad:69:be:05:c9:92:8a:d1:44:1f:64:75:4a:ea:b2:45:d0:
         6e:02:09:66:bb:6c:27:64:2b:8e:1d:55:97:95:03:cf:f5:21:
         c9:f1:1a:23:0a:b2:9b:b3:37:0f:f2:9d:83:ce:4c:e0:69:f8:
         cc:1e:c2:8b:b4:b5:d1:54:af:46:49:0a:48:c2:b0:ab:41:dc:
         15:73:69:f4:a9:f5:cc:1d:f4:76:65:b0:a2:57:68:e3:03:72:
         65:29:1b:47:a2:76:12:83:75:a0:fb:19:79:5d:ec:8c:7c:b5:
         2d:a5:54:5e:be:1f:07:63:cd:22:71:32:3a:61:af:2b:23:3a:
         85:3e:60:f9
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIBHTANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY3
NTA1M0FGMTEwLwYDVQQFEyg5NThFQzRFRDM0OTNGODA1MTg5RjQ5NjgxNzAwQzc5
RTA4OEU3RUIyMB4XDTI2MDcyNDA1NDI1MloXDTI2MDcyNjA1NDI1MlowGDEWMBQG
A1UEAxMNNmE2MmZiNWQtZGM2NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAPt7ynIWIOVqwi9PFcCN5IKEevuwqH5/bU/3S3yaa6ZFQESLGJsW9SDcLCIy
0IJhlOX2Rwn7YnFLqYrMnHWfVfa/iSFOxk4j9CyMV9ZObvmpIgVFT34ZIWweqI86
4uJJdCYfom1WAAX5Vvvukps3D9mLuFBoqvGAQFAaJZlaq1ReJDm0g4v9Dbxzze7b
3e2HmV+cjP4uOJG8YrKbMSSy9yMUTPaumako9vgRW/Vnarv4qLBqVAn5uj1ppYEe
rqMTM+aH/TFWP8LlbBLYm1Otzfi5celAYULr/f30BG64rH9QHm7415EAJtuDMGf4
Mwvbtc9fq1q4bYgr9d9GkjUJvbUCAwEAAaOCArgwggK0MB0GA1UdDgQWBBTZDjIs
V2581RMDFzjq5a2QoD8iwzAfBgNVHSMEGDAWgBSVjsTtNJP4BRifSWgXAMeeCI5+
sjAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NzUwNTMvNjk4NEQ2NkU3NDVCMTFGMUI0MUI2MUI3Q0UxRDM4QjAvbFk3RTdU
U1QtQVVZbjBsb0Z3REhuZ2lPZnJJLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvbFk3RTdUU1QtQVVZbjBsb0Z3REhuZ2lPZnJJLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB1QYIKwYBBQUHAQsEgcgwgcUwgYsGCCsGAQUF
BzALhn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY3NTA1My82OTg0RDY2RTc0NUIxMUYxQjQxQjYxQjdDRTFE
MzhCMC9sWTdFN1RTVC1BVVluMGxvRndESG5naU9mckkubWZ0MDUGCCsGAQUFBzAN
hilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwDQYJKoZIhvcNAQELBQADggEBALmrsTcEIUd6UYCzltKjWD17h7LWlScm
64SANlnsfmJJpzke2dey57VEtjYDS4EG7+gbxiP6zl1AHnrOINagRfUgE4YuVrVE
Hc9vepNB8q6oYKjgwjJaslrs60D8LLRYXTGQ5oyfchGxl6z8LuIa2W/RreA3UHxz
UplmMWSLHjqtab4FyZKK0UQfZHVK6rJF0G4CCWa7bCdkK44dVZeVA8/1IcnxGiMK
spuzNw/ynYPOTOBp+Mwewou0tdFUr0ZJCkjCsKtB3BVzafSp9cwd9HZlsKJXaOMD
cmUpG0eidhKDdaD7GXld7Ix8tS2lVF6+HwdjzSJxMjphrysjOoU+YPk=
-----END CERTIFICATE-----
Generated at Fri Jul 24 15:45:18 2026 by rpki-client