Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft
File:                     l8kOJSEtiHz54d5v3fVRuoEvoTk.mft (raw, json)
Hash identifier:          H9TxBFOIIm8B4SVrbMk5VIXzpl4hRG4VDQpAa4jQFRQ=
Subject key identifier:   94:3E:7A:D2:50:FA:F1:E4:33:EE:8D:26:E5:26:F1:5E:AF:FC:47:2A
Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
Certificate issuer:       /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Certificate serial:       07E2
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft
Manifest number:          0748
Signing time:             Sun 19 Oct 2025 18:09:51 +0000
Manifest this update:     Sun 19 Oct 2025 18:09:50 +0000
Manifest next update:     Tue 21 Oct 2025 18:09:50 +0000
Files and hashes:         1: l8kOJSEtiHz54d5v3fVRuoEvoTk.crl (hash: TvdK5f9/tgQAKxCzrqW1CvgF2Mdk76C4Fol5hXY0n/c=)
                          2: 64797A88AD1611F0992966BDDAE4EC9C.roa (hash: dN0yO8xGL+mUbU8wW7KJehC831uJIY80Koc8ErS6ffU=)
                          3: DBA98D145B2211F0A20E2EA0DAE4EC9C.roa (hash: baX/jyqbDDRWJ52IpaUoPLaTxEVM5KXNaJC/ks++xuQ=)
                          4: EEB5856C7F6B11F0B0B6DF82DAE4EC9C.roa (hash: UIG7Jif5IiOqj4KGvbim+sNDE4xOkewikzs6NTdR8Fc=)
                          5: 746A98109AAA11F0A3C7FCA3DAE4EC9C.roa (hash: niMXAvU7fHh+5EdmWVl0mMysSktYu9xrcwOc5R3B42o=)
                          6: 31AC1B067F2B11F0A2FC2DE1DAE4EC9C.roa (hash: pJmfeAp3o89ojiARZABIHNF+5KqQANGXnVyfWK3JWAo=)
                          7: 6643EED69AA911F08149169FDAE4EC9C.roa (hash: nD/BFXfthY2J+wM0mgxXRU1qzVpsG1Kjd7lO67sgUh8=)
                          8: 5A8C7874784411F0BE639EBDDAE4EC9C.roa (hash: Tso2x+6Cusvv7XHczF8aF240Wh6DYRs6taSZ6HxpTbM=)
                          9: 9469C1789AA911F0836F2E9FDAE4EC9C.roa (hash: MBa44nXOq7T1Yr0WGgFCsRyKU4TpU6xLrWd8rjkCA6A=)
                          10: 8F66F9F2625011F093EF34AEDAE4EC9C.roa (hash: azeXExxPadQBtZQAbA3QmCVU3GUpPn3GgN81W/kzNws=)
                          11: 14A07164952F11F0ADEC64A3DAE4EC9C.roa (hash: QI/ulBnHBuS3dRtLpTM6p4UrwXheqwhQAXcs85bhLNM=)
                          12: B03C5936136B11EF9CB7442D017001B1.roa (hash: 8cn480ct0RO7vc/yrd/vQq31HhnmkbbbxOW5UAR4BoE=)
                          13: 9307AC26864211F0B10DDAA0DAE4EC9C.roa (hash: asyiiPpBOEH3XPd0A+rm4Mn5TAQ1pyZZcQW8jLn0FfU=)
                          14: 951B9DB2781711F0AAD136A0DAE4EC9C.roa (hash: rxo13RQJNN4g4AsDSu+eErcokD2GEDR1Waq9IZ5O/Qw=)
                          15: CBA3C1846B7011EFAF3FE084762E951A.roa (hash: pFDrtn8wEhtxFNlu2wmcpGpG41xK4cr84A6LU6JiqYg=)
                          16: CEA072D8776A11EEA49F007D4AD9E6FC.roa (hash: oG1ErKkSbYpP5X6eq2VOONQIy8u5lFGEO9d6IZTGw04=)
                          17: 9FB53966AD1611F0AF4F80BDDAE4EC9C.roa (hash: fvI+134xQpLs9jK1l0zcAgubM5j7hPLEZKr6qnKJoKQ=)
                          18: 8771237E7EC211F099678AA8DAE4EC9C.roa (hash: zffaPiL1Y8lSkQQ6ScEJK71SQvlLK9x+FiM4WbmwqxA=)
                          19: 44B107BE0BBA11F0B7AF8852762E951A.roa (hash: 2lsgDetOxz2tEA/haKTe5N+JmsqBvMbXnhGs3La4Rys=)
                          20: 8EC0956E70A411F094929688DAE4EC9C.roa (hash: Dmc5XqbplUaGfABGKpPzYUPx32YybXd085DRK5wjFm4=)
                          21: D3233AFC9AA911F0B28D9B9FDAE4EC9C.roa (hash: /AcnxuzNTosQCZAUuKmzEaEbGn9pqXV7DzlTfeQ9uZg=)
                          22: 06EA9146625111F082ED08AFDAE4EC9C.roa (hash: DlQwSvTDJt//sym2C2UVKdfDULxPx2s6Ok+gJg27kxk=)
                          23: CAD01CCEAD1611F0B7FFDDBDDAE4EC9C.roa (hash: 6X242C8gRpLwRDdAl5XW16dhxRi6QqN8otye+wZDhVk=)
                          24: D555ACF47ED111F08EE5E58BDAE4EC9C.roa (hash: 47vFvhPfYF8MRZPiu19cy9fhXJPFVZu9WXQ1eMHjtak=)
                          25: A3D2B7049AAA11F0B0117BA4DAE4EC9C.roa (hash: UVrwEGG8WIp9xnKuBnz7H6Xm6CR/H6UePyB8ksY3Vyc=)
                          26: FC1758EE9AA911F0AE71D7A1DAE4EC9C.roa (hash: p/wfawO4neZnr2GieDAQqFFqk793W4O10ZeBofiAz3I=)
                          27: 9ADD2568A35011F09D13FEB7DAE4EC9C.roa (hash: X5iP03usg/QEneRQuMvi+RKF4KU76rAutULa0XBNugY=)
                          28: C36E5120609611F0AB6F15F2DAE4EC9C.roa (hash: Fk+IfFMpvi36aQyLQYlmv26xnAUJjv0obfvmLZs4rLU=)
                          29: 712F322AA28211F0B6B56D81DAE4EC9C.roa (hash: QBWFXHW+Go5rg0Xj7p9zOmxqK64h+qwzrGrj4iK7u2c=)
                          30: 1DA0B1A4502C11F08AB1C8C2DAE4EC9C.roa (hash: O39HvXcGM8vCDm9DfWvAXNTa9fV5PX5xkVsjsSq21p8=)
                          31: 64879FF4952F11F095F6C4A5DAE4EC9C.roa (hash: X6SUIt9mDKXhbZgGOSMBqAFD9GzqobcGIeeKANDWNp4=)
                          32: BB1D368A952F11F08414C6A7DAE4EC9C.roa (hash: TPJQZkj3HZaHbePzorSLkJXJUIjVtsNnfbGcfaToUso=)
                          33: 27EA6F2E9AAA11F09FCFB6A3DAE4EC9C.roa (hash: NcdTQCXD5mfTJdeb+3+wrwaMNibr4cT0Crtu6pLpunE=)
                          34: 985B73F86B7011EFBCFBD082762E951A.roa (hash: rvpp6Kns5e/Pwe/rzVTNBx4KVxZUF1C0Dh+LLpfr9DM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 21 Oct 2025 00:06:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2018 (0x7e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367DFA4AF, serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
        Validity
            Not Before: Oct 19 18:09:50 2025 GMT
            Not After : Oct 21 18:09:50 2025 GMT
        Subject: CN=68f5296f-c45f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:5f:23:6e:b6:c1:41:ce:23:78:d4:08:16:c3:
                    d5:80:94:43:52:90:0e:c3:b8:20:59:0d:b6:45:09:
                    eb:6f:49:4c:c9:89:17:94:07:25:f8:0c:8a:d2:21:
                    17:3d:1d:e2:36:69:80:cb:5c:ba:91:2e:f8:d6:b9:
                    ec:83:6f:05:c0:71:25:07:8c:4c:98:ef:18:06:76:
                    4d:99:93:f5:76:44:90:26:dd:35:cf:7a:30:d4:ac:
                    31:52:11:ab:9d:65:81:49:8a:ed:79:dc:21:84:63:
                    e6:94:b9:58:c2:12:f1:01:c1:e3:d1:af:35:bc:9c:
                    e2:67:0d:f3:26:f9:b5:af:60:89:e5:26:08:61:a8:
                    8d:9d:8f:d7:dd:54:ae:a8:5c:b8:c8:ea:4f:0e:41:
                    a0:17:cf:02:d2:23:fc:ca:b5:6f:23:a9:28:96:98:
                    ef:ae:ba:de:42:24:83:2c:11:78:31:1c:c4:1f:3f:
                    7c:d4:10:19:18:51:ea:3a:09:9e:08:ce:22:41:5b:
                    e3:cd:a9:17:64:de:bd:71:2f:f1:39:57:df:a5:a6:
                    89:37:3a:ac:c3:aa:f0:57:1f:98:dd:5e:5f:fe:7c:
                    b6:38:49:c4:84:f8:28:d2:dd:fa:48:61:84:34:2e:
                    e9:77:fd:6d:f2:9c:78:33:45:9d:14:53:95:c4:88:
                    a9:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:3E:7A:D2:50:FA:F1:E4:33:EE:8D:26:E5:26:F1:5E:AF:FC:47:2A
            X509v3 Authority Key Identifier:
                keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         dd:c1:85:20:36:c6:0f:cd:20:03:54:5e:61:a5:c2:f8:9d:9d:
         9a:1f:c5:61:28:df:f9:0f:cd:00:bb:98:9a:89:08:73:2a:7a:
         81:2c:66:8c:aa:ee:74:43:90:0e:a0:9c:ab:dd:bd:08:7c:17:
         88:47:b6:f8:b7:cc:29:26:36:88:61:bf:24:0b:b6:f8:c6:59:
         0b:81:10:74:e6:11:1b:74:3e:a4:24:c7:90:c9:74:74:36:da:
         ef:04:96:f9:4a:24:71:e7:68:6e:8e:02:63:12:eb:ad:81:94:
         58:e3:98:04:f6:99:d7:38:6a:05:04:e9:32:2f:d1:84:6c:b6:
         d3:fa:ef:0f:9c:37:e6:9c:6e:3a:85:3c:42:b5:37:e2:83:5f:
         fb:83:3c:4c:f0:aa:90:1a:a5:a0:83:ab:4e:68:88:7c:82:81:
         2a:ac:56:cf:23:14:df:b2:57:5f:d6:91:fd:2c:d6:2f:d3:95:
         d3:18:49:ab:6c:3d:0e:3e:9c:5c:2b:26:07:db:b1:42:b5:07:
         69:86:30:b0:1d:3b:36:e6:1c:f0:4a:d4:7c:fb:90:d2:16:3f:
         73:45:9a:fd:67:9f:02:cb:97:1f:31:86:02:65:d1:8d:8b:15:
         93:e8:7f:fd:ba:9d:ec:eb:cc:54:9e:cf:80:cf:26:bd:7e:f5:
         c5:e5:49:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:26:16 2025 by rpki-client