Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3679680/67101F50E29111EEBC9A7258775412E6/ui_9XON8AcbtlPuVw1jXCimNyXQ.mft
File:                     ui_9XON8AcbtlPuVw1jXCimNyXQ.mft (raw, json)
Hash identifier:          gN5kOvwgEWU+AHGXiCTgNUt7l8nHFJjWqf0XRNAy0lE=
Subject key identifier:   28:13:68:BC:49:CF:96:57:5F:EC:50:B4:96:C0:E1:4D:9C:AE:05:97
Authority key identifier: BA:2F:FD:5C:E3:7C:01:C6:ED:94:FB:95:C3:58:D7:0A:29:8D:C9:74
Certificate issuer:       /CN=F3679680AF/serialNumber=BA2FFD5CE37C01C6ED94FB95C358D70A298DC974
Certificate serial:       03B4
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ui_9XON8AcbtlPuVw1jXCimNyXQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3679680/67101F50E29111EEBC9A7258775412E6/ui_9XON8AcbtlPuVw1jXCimNyXQ.mft
Manifest number:          03B2
Signing time:             Sun 27 Sep 2026 04:06:16 +0000
Manifest this update:     Sun 27 Sep 2026 04:06:15 +0000
Manifest next update:     Tue 29 Sep 2026 04:06:15 +0000
Files and hashes:         1: ui_9XON8AcbtlPuVw1jXCimNyXQ.crl (hash: TbTerZmb87Jm8JOGStpHpMdiC9WPBzAjoMHDsAO6rFs=)
                          2: 2CB11612097C11F0B1B609AC762E951A.roa (hash: Kwmd09ofIif31S12hSjzL7BsuLgXOAF7knYqTDHIeU8=)
                          3: 2F6023ECE29211EEB2E4FA5C775412E6.roa (hash: q7jNd1y1Y6KLB0N5MRMBr1m0H8I9Vdkf0cqM9mEbDLA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3679680/67101F50E29111EEBC9A7258775412E6/ui_9XON8AcbtlPuVw1jXCimNyXQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3679680/67101F50E29111EEBC9A7258775412E6/ui_9XON8AcbtlPuVw1jXCimNyXQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ui_9XON8AcbtlPuVw1jXCimNyXQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Sep 2026 00:07:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 948 (0x3b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3679680AF, serialNumber=BA2FFD5CE37C01C6ED94FB95C358D70A298DC974
        Validity
            Not Before: Sep 27 04:06:15 2026 GMT
            Not After : Sep 29 04:06:15 2026 GMT
        Subject: CN=6ab89638-d9c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:5d:b8:ae:54:20:7c:fa:d2:b7:c1:d2:b3:4e:
                    6c:2a:60:26:3c:21:7e:e4:ec:e0:f0:3a:8f:9f:04:
                    30:1b:75:db:14:6e:bc:93:82:a3:de:1e:44:1e:df:
                    11:aa:20:87:6b:c6:b6:8a:2e:70:39:d6:86:05:c6:
                    f8:00:9c:a6:72:14:41:5d:95:01:70:2d:4e:0e:93:
                    fa:87:c4:bf:56:25:8f:7d:7f:b5:29:3b:0c:ae:d6:
                    3b:b8:7a:af:9b:d2:18:04:10:31:7a:27:9a:79:99:
                    2a:c2:ae:42:ce:96:04:15:e9:d5:ef:10:7a:99:34:
                    17:87:c1:fe:65:bf:b5:73:44:b5:a8:39:e5:3d:ab:
                    82:fb:69:93:25:e3:24:7a:f9:5e:a0:74:cf:7b:a5:
                    48:64:79:1b:7c:99:a1:39:0c:09:61:65:47:8f:a4:
                    72:11:d4:cd:74:47:38:a5:a0:09:df:0e:74:1d:c3:
                    6d:3a:ba:79:28:2b:41:81:b0:ab:8a:a8:60:38:55:
                    94:a6:9b:39:4f:87:45:ca:9b:2e:63:90:ff:44:2a:
                    2f:73:38:a0:24:9d:1a:7d:49:e6:29:b3:1e:8b:cc:
                    20:5f:25:52:35:bb:3b:8f:41:c5:94:5b:2f:3e:3e:
                    d2:56:70:b0:29:fc:95:be:cc:42:33:d5:cf:d3:e9:
                    82:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:13:68:BC:49:CF:96:57:5F:EC:50:B4:96:C0:E1:4D:9C:AE:05:97
            X509v3 Authority Key Identifier:
                keyid:BA:2F:FD:5C:E3:7C:01:C6:ED:94:FB:95:C3:58:D7:0A:29:8D:C9:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3679680/67101F50E29111EEBC9A7258775412E6/ui_9XON8AcbtlPuVw1jXCimNyXQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ui_9XON8AcbtlPuVw1jXCimNyXQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3679680/67101F50E29111EEBC9A7258775412E6/ui_9XON8AcbtlPuVw1jXCimNyXQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:0e:a1:c6:dd:b5:6b:55:04:64:ba:e1:ce:5b:86:b5:a7:b4:
         8d:d6:24:96:60:b4:22:92:fe:4f:19:e0:16:23:21:65:a6:c7:
         e3:8d:a4:3f:9c:37:c7:82:db:86:57:21:17:a2:9a:9f:4c:ce:
         71:99:a6:5b:bb:72:3f:c8:d9:a7:02:3a:5d:cf:5c:72:80:3f:
         88:85:99:eb:b9:03:16:18:7e:b9:f8:86:35:e2:5d:cc:cd:20:
         57:72:68:81:61:fe:4d:68:64:e7:45:b0:64:ce:49:81:9b:38:
         2a:e2:bd:03:03:f6:00:49:63:f7:34:4d:87:19:af:41:69:5e:
         ec:13:3d:57:0e:f0:30:02:49:1f:6f:0b:47:1d:7a:af:f7:eb:
         6c:a4:6f:3a:38:10:55:bf:a4:04:84:1a:cb:ea:2e:21:b0:11:
         31:58:f1:92:fd:a1:fb:a9:da:2f:4f:9a:08:fe:b0:12:61:63:
         1e:04:d9:32:cf:f9:7b:2a:97:84:8c:10:5c:3a:6d:12:f5:58:
         3c:e5:45:96:ee:6d:be:91:4b:91:09:8a:41:c6:26:c7:e1:97:
         14:e6:ad:07:81:8c:a9:5c:57:f6:f0:58:77:32:de:c8:c4:0a:
         96:1d:30:81:9a:a6:e4:53:44:ee:51:aa:68:78:66:78:83:54:
         06:27:f4:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----