Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367972F/4C758F6A901011EDBC3E0F9BF1222468/SGm5dfSdmA_lFc7dSaDEDruBrKI.mft
File:                     SGm5dfSdmA_lFc7dSaDEDruBrKI.mft (raw, json)
Hash identifier:          LdNA0SwgLaFCpioUqGYZQMHE/IoFjS/s0j99UpakkR4=
Subject key identifier:   8A:4E:9D:2A:F6:73:1F:DC:15:6D:FC:C5:CD:5E:8D:1D:1C:1A:E0:02
Authority key identifier: 48:69:B9:75:F4:9D:98:0F:E5:15:CE:DD:49:A0:C4:0E:BB:81:AC:A2
Certificate issuer:       /CN=F367972FRI/serialNumber=4869B975F49D980FE515CEDD49A0C40EBB81ACA2
Certificate serial:       03E5
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/SGm5dfSdmA_lFc7dSaDEDruBrKI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367972F/4C758F6A901011EDBC3E0F9BF1222468/SGm5dfSdmA_lFc7dSaDEDruBrKI.mft
Manifest number:          03E3
Signing time:             Sat 23 Aug 2025 03:20:39 +0000
Manifest this update:     Sat 23 Aug 2025 03:20:38 +0000
Manifest next update:     Mon 25 Aug 2025 03:20:38 +0000
Files and hashes:         1: SGm5dfSdmA_lFc7dSaDEDruBrKI.crl (hash: Xf2ClabM48R/1NUYQEyA9PS7HPWXOlAkRpiB9B8meLg=)
                          2: D17F6EEC902411ED9E7767D2F1222468.roa (hash: JO/7laMxt+UsHBnYsLId8OjP3XjZJzj6vEh7zTGEoAg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367972F/4C758F6A901011EDBC3E0F9BF1222468/SGm5dfSdmA_lFc7dSaDEDruBrKI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367972F/4C758F6A901011EDBC3E0F9BF1222468/SGm5dfSdmA_lFc7dSaDEDruBrKI.mft
                          rsync://rpki.afrinic.net/repository/ripe/SGm5dfSdmA_lFc7dSaDEDruBrKI.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Aug 2025 00:45:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 997 (0x3e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367972FRI, serialNumber=4869B975F49D980FE515CEDD49A0C40EBB81ACA2
        Validity
            Not Before: Aug 23 03:20:38 2025 GMT
            Not After : Aug 25 03:20:38 2025 GMT
        Subject: CN=68a93387-4a0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:09:5e:de:37:af:8c:c9:81:d6:ad:c6:e0:57:
                    0a:6b:49:18:d1:77:a1:c8:d3:00:db:85:05:7c:8a:
                    67:20:ec:65:47:ef:e3:1f:57:89:ec:50:3e:8f:da:
                    4e:cb:63:8b:40:5a:97:0f:6a:ce:c8:49:9a:55:d3:
                    72:49:ec:31:00:47:0c:b4:af:41:1c:76:0d:06:fc:
                    a1:d6:c4:96:48:8e:a8:cb:c4:7c:16:90:d3:22:44:
                    0a:31:e5:ad:ff:f4:59:d3:4d:f4:1f:93:03:9c:c4:
                    31:1c:cf:55:73:35:08:41:eb:bb:5d:35:03:d9:28:
                    5f:92:83:86:28:90:f5:e0:09:14:fc:1e:59:e1:bf:
                    99:15:7c:c3:80:7b:de:b0:bd:49:0a:f7:85:21:d3:
                    4a:3c:c8:6c:e1:91:c7:b3:df:89:e3:6c:bf:a2:07:
                    54:95:6d:97:21:49:b0:81:68:94:9c:24:9d:c8:f2:
                    f4:01:f3:18:4b:0f:9f:95:c6:97:0e:41:16:ed:52:
                    12:50:e4:2b:9e:1d:86:4b:43:eb:39:60:46:4d:ca:
                    f2:e3:b7:40:0b:d6:f9:64:c6:da:8f:b8:24:a2:ce:
                    1a:5f:cf:9e:aa:43:47:da:32:fb:99:d7:bf:bd:55:
                    91:15:fe:11:b2:68:cc:59:f5:eb:88:5c:a3:e4:e6:
                    d9:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:4E:9D:2A:F6:73:1F:DC:15:6D:FC:C5:CD:5E:8D:1D:1C:1A:E0:02
            X509v3 Authority Key Identifier:
                keyid:48:69:B9:75:F4:9D:98:0F:E5:15:CE:DD:49:A0:C4:0E:BB:81:AC:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367972F/4C758F6A901011EDBC3E0F9BF1222468/SGm5dfSdmA_lFc7dSaDEDruBrKI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/SGm5dfSdmA_lFc7dSaDEDruBrKI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367972F/4C758F6A901011EDBC3E0F9BF1222468/SGm5dfSdmA_lFc7dSaDEDruBrKI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:a3:e7:46:fc:46:10:1a:03:d2:08:65:1f:be:59:1a:47:ac:
         97:19:6c:41:a5:27:7b:78:70:03:e8:e4:a8:64:aa:50:8d:7e:
         ca:a7:fc:48:d5:d2:82:f2:e4:75:ef:7b:19:00:2c:24:6b:1e:
         0e:b2:f6:cd:92:8f:37:5a:73:1b:eb:fa:a6:e9:90:15:b3:20:
         6e:3d:54:c9:a0:f7:11:3b:47:89:c9:20:f2:eb:c6:f7:3d:ff:
         fb:09:55:95:10:a4:99:fd:c4:58:38:e8:7b:26:1d:c3:71:70:
         cd:98:10:de:f0:0f:7f:b9:b4:47:58:70:5e:38:16:f8:0c:92:
         d9:66:67:a1:e4:13:3a:45:f0:a8:e3:72:98:e2:5e:8c:1d:ff:
         28:88:cd:0e:36:fc:6b:27:37:33:bc:b8:77:10:15:69:9d:a3:
         00:bb:52:4c:7e:06:22:31:41:c9:0c:99:d4:6d:93:9a:5f:9c:
         69:8c:de:f0:27:c4:5a:3f:1d:20:30:82:86:4c:c4:71:dc:51:
         b7:bd:5c:7b:16:92:e8:75:b8:46:26:2b:13:54:55:0c:4c:0c:
         14:51:ad:0d:2e:cc:5a:29:d4:f7:89:4a:e8:a4:69:13:3d:70:
         95:6d:ec:af:df:b1:fd:57:7d:e6:4f:93:c6:3c:95:e8:e9:47:
         67:94:f3:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:40:26 2025 by rpki-client