Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3679680/67101F50E29111EEBC9A7258775412E6/ui_9XON8AcbtlPuVw1jXCimNyXQ.mft
File:                     ui_9XON8AcbtlPuVw1jXCimNyXQ.mft (raw, json)
Hash identifier:          DEXSlmYqvn2znGQxyXPTG5rs41BT9o/LAhHcDkov3r4=
Subject key identifier:   E4:52:98:04:52:1C:0E:AE:5B:B7:9D:C3:FE:81:77:1E:06:D6:42:EB
Authority key identifier: BA:2F:FD:5C:E3:7C:01:C6:ED:94:FB:95:C3:58:D7:0A:29:8D:C9:74
Certificate issuer:       /CN=F3679680AF/serialNumber=BA2FFD5CE37C01C6ED94FB95C358D70A298DC974
Certificate serial:       0373
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ui_9XON8AcbtlPuVw1jXCimNyXQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3679680/67101F50E29111EEBC9A7258775412E6/ui_9XON8AcbtlPuVw1jXCimNyXQ.mft
Manifest number:          0371
Signing time:             Fri 24 Jul 2026 04:05:22 +0000
Manifest this update:     Fri 24 Jul 2026 04:05:21 +0000
Manifest next update:     Sun 26 Jul 2026 04:05:21 +0000
Files and hashes:         1: ui_9XON8AcbtlPuVw1jXCimNyXQ.crl (hash: CcSdEPTS7p45bbGWLE66hQXkzinllJNNUXyKsl2vmEo=)
                          2: 2CB11612097C11F0B1B609AC762E951A.roa (hash: Kwmd09ofIif31S12hSjzL7BsuLgXOAF7knYqTDHIeU8=)
                          3: 2F6023ECE29211EEB2E4FA5C775412E6.roa (hash: q7jNd1y1Y6KLB0N5MRMBr1m0H8I9Vdkf0cqM9mEbDLA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3679680/67101F50E29111EEBC9A7258775412E6/ui_9XON8AcbtlPuVw1jXCimNyXQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3679680/67101F50E29111EEBC9A7258775412E6/ui_9XON8AcbtlPuVw1jXCimNyXQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ui_9XON8AcbtlPuVw1jXCimNyXQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 26 Jul 2026 00:07:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 883 (0x373)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3679680AF, serialNumber=BA2FFD5CE37C01C6ED94FB95C358D70A298DC974
        Validity
            Not Before: Jul 24 04:05:21 2026 GMT
            Not After : Jul 26 04:05:21 2026 GMT
        Subject: CN=6a62e482-21ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:61:e6:ea:e8:dd:68:fd:1a:60:e8:b6:c7:bd:
                    70:10:bf:7b:e5:22:fa:fb:cf:74:66:25:09:6a:23:
                    6f:d3:0f:ac:b2:5c:27:b0:2c:ae:b0:72:76:c0:b1:
                    95:a8:d3:cd:1b:84:6e:04:37:ae:16:85:83:a1:47:
                    cf:9d:75:4d:d9:64:16:5a:14:f0:e3:57:96:3f:85:
                    7f:c0:b2:f1:58:6b:79:5b:24:6e:26:dc:f8:ba:24:
                    aa:e9:bf:89:f1:df:c8:c8:68:e9:75:0e:c8:14:62:
                    f4:67:15:3b:cd:e2:e5:db:04:ca:82:ad:1f:88:f2:
                    ac:3c:81:26:8c:08:47:18:2d:68:c6:84:5b:1d:b2:
                    ba:37:38:b7:1b:aa:ee:5d:44:c1:b3:83:f8:d0:dc:
                    14:07:e9:e2:41:02:83:23:cd:d1:c5:51:88:cc:30:
                    a0:8b:fc:e6:11:12:62:0a:0f:2d:e6:5c:5b:a1:0f:
                    4d:ef:05:23:db:21:14:8c:c4:21:3d:ed:a9:b6:20:
                    d1:e2:10:79:bf:84:98:ad:c9:83:22:59:40:db:ac:
                    5a:1e:79:18:f7:1b:1a:62:0e:33:e1:9f:b4:85:c7:
                    2f:ee:34:21:d9:a3:c1:c9:b0:88:85:ea:87:1d:37:
                    39:d4:4c:5c:21:6c:1d:c9:10:a0:b3:44:9f:19:c4:
                    75:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:52:98:04:52:1C:0E:AE:5B:B7:9D:C3:FE:81:77:1E:06:D6:42:EB
            X509v3 Authority Key Identifier:
                keyid:BA:2F:FD:5C:E3:7C:01:C6:ED:94:FB:95:C3:58:D7:0A:29:8D:C9:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3679680/67101F50E29111EEBC9A7258775412E6/ui_9XON8AcbtlPuVw1jXCimNyXQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ui_9XON8AcbtlPuVw1jXCimNyXQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3679680/67101F50E29111EEBC9A7258775412E6/ui_9XON8AcbtlPuVw1jXCimNyXQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:89:50:3b:68:e6:0a:77:84:b1:f8:e4:20:95:6d:2d:96:f6:
         79:42:51:21:50:42:da:e5:3b:c3:db:85:e3:26:cc:44:a5:b3:
         83:21:9d:f1:8d:01:79:ee:34:7f:bd:24:64:7f:2d:67:7c:1e:
         62:97:5f:e2:bf:74:b4:18:01:e0:a6:19:b6:ac:0b:8c:12:18:
         3a:94:a5:e0:da:4a:69:3a:57:47:25:74:2b:67:f1:5c:9f:c7:
         88:7f:f9:3d:2d:c2:35:d3:c1:e6:0c:e6:ef:3e:e6:31:ee:f9:
         89:c2:56:a9:e1:14:eb:09:69:ed:05:56:39:fc:38:5f:18:ba:
         43:f4:da:ac:76:4b:33:75:37:ae:8d:93:5b:c5:4f:79:df:54:
         a4:6e:85:ad:9a:14:c0:5b:aa:d9:dd:a7:2e:67:90:4b:3f:05:
         0b:6f:12:3f:f1:02:b4:9f:25:24:d8:b2:0a:d7:c9:ce:01:8d:
         38:3c:8f:d8:11:85:71:5a:89:f9:4c:8a:f6:f0:91:27:5a:fa:
         92:88:9b:be:d8:4a:5e:4f:61:69:c4:20:8d:0c:a9:5c:39:ff:
         c7:3f:10:b3:5d:80:2e:ef:cc:66:57:7f:5f:6d:22:72:f3:85:
         88:4e:c1:55:23:6b:03:b8:75:e1:61:93:7e:87:e6:12:da:4b:
         ce:ef:3e:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:52:00 2026 by rpki-client