Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft
File:                     l8kOJSEtiHz54d5v3fVRuoEvoTk.mft (raw, json)
Hash identifier:          IPp5XO1aKaDHcr5jk/odxlqAS7eQGPPrf9GXl5sGiZI=
Subject key identifier:   8E:A8:FF:8D:F1:E5:67:B6:03:DA:80:27:52:13:44:48:F7:E3:AD:4B
Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
Certificate issuer:       /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Certificate serial:       09E5
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft
Manifest number:          08D9
Signing time:             Fri 24 Jul 2026 02:04:00 +0000
Manifest this update:     Fri 24 Jul 2026 02:03:59 +0000
Manifest next update:     Sun 26 Jul 2026 02:03:59 +0000
Files and hashes:         1: l8kOJSEtiHz54d5v3fVRuoEvoTk.crl (hash: jZyjGeWU8LXo39ZJF6IZ1cZT6r6X7No05ANqu70kcuQ=)
                          2: 04FB45606B5611F1A83D0B03CF1D38B0.roa (hash: d1PRoXtN1fAKEcHcs168YQU2HSkHLOxSasfRHV/jKKk=)
                          3: D555ACF47ED111F08EE5E58BDAE4EC9C.roa (hash: 47vFvhPfYF8MRZPiu19cy9fhXJPFVZu9WXQ1eMHjtak=)
                          4: 31AC1B067F2B11F0A2FC2DE1DAE4EC9C.roa (hash: pJmfeAp3o89ojiARZABIHNF+5KqQANGXnVyfWK3JWAo=)
                          5: BE32DE466DBB11F1AA247ADCCE1D38B0.roa (hash: 5b3c7vYqR7atS3vzaJ2Y4FQf08blNX5S5A3+UjWWiR0=)
                          6: EE4BCA50C51611F0882C7A79DAE4EC9C.roa (hash: QORpqLPUnemyJVfwyKiR9rBTSjXXBwPxprwBhq4ORos=)
                          7: DE2FE726163011F1829CE9EADAE4EC9C.roa (hash: TMIMgwsogkJNyAx0X77xxGocwvE2m5HEfSTcrhrwoyI=)
                          8: E5FC56AE7A4B11F1BC8C2CB9CE1D38B0.roa (hash: jmNdoCzHH4N8uxZsV5Tvcp3NjH/UbPjaffDXeuKhMzI=)
                          9: 37683106C51711F0831FC779DAE4EC9C.roa (hash: X7+3tEI76PBXlAAcgP4WQPX2ONBme8iwLb9ftSScgDo=)
                          10: 4B0FAD8C2AB711F1A5261CD8DAE4EC9C.roa (hash: iDwntjXc0TkUcKq7YPpoYX8y6uqRkFD/EWhYMmqZVT4=)
                          11: FC053F5CAF7A11F09C68E3B1DAE4EC9C.roa (hash: ovkEHwqKLlju8yGU3yNPqm9jMYWfqRxIBEHgStiUby0=)
                          12: CEA072D8776A11EEA49F007D4AD9E6FC.roa (hash: oG1ErKkSbYpP5X6eq2VOONQIy8u5lFGEO9d6IZTGw04=)
                          13: 1BF4F8CC187E11F1BA032D93DAE4EC9C.roa (hash: zXtWle/yOTpKwLGIe5XmsNFjkXiS/vvqgdWG5YsQ/bE=)
                          14: 14DBDD40397F11F18F7D251BCF1D38B0.roa (hash: 7JorfiIlTDbNmduHmYrQZFBXPxFlQKaOmXJt1ogKFiw=)
                          15: B02C377E6B5511F19A208202CF1D38B0.roa (hash: F2uhB6NmUItfbApVcL3nMXYX+kYCGBRMdAMG9hk05zs=)
                          16: E8B4523C187D11F1A5DD0B93DAE4EC9C.roa (hash: N/GBo7sJ9sVz40T3E38ntjv4vl5jXnFQj2Tw1+btscU=)
                          17: 087B5DDA187F11F1B908269BDAE4EC9C.roa (hash: +iSgYQye2OWt8JVvNd+soAvL1h8eN44KQQOxfGUmU6o=)
                          18: 991B77F8CE8811F08B0D7DCBDAE4EC9C.roa (hash: 4NDnlsPwnLQ0bvJwiU4jMN98KtaytJXKCjFbhCuymzw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 26 Jul 2026 00:07:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2533 (0x9e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367DFA4AF, serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
        Validity
            Not Before: Jul 24 02:03:59 2026 GMT
            Not After : Jul 26 02:03:59 2026 GMT
        Subject: CN=6a62c810-1778
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:75:6c:67:ac:7f:a4:74:48:32:a0:f4:ed:dc:
                    4c:0a:50:31:69:8f:5b:ba:96:cc:96:58:e9:fa:b0:
                    b1:77:99:8a:ee:d8:9c:fc:da:20:41:d0:24:f4:ca:
                    f2:de:da:48:89:ce:7e:37:0c:50:c7:be:30:26:15:
                    47:0a:43:df:fd:74:db:4c:57:62:b3:c2:20:bd:52:
                    8c:b1:bc:ce:db:94:0c:90:41:65:d0:36:a6:e3:0d:
                    0c:76:d2:19:b5:f1:88:a6:1e:fa:92:4e:dc:f2:07:
                    d7:9c:13:6c:24:33:69:28:63:fb:eb:86:e5:cb:4c:
                    64:7a:ef:15:13:0a:98:d5:28:c3:69:02:75:56:a5:
                    7b:61:73:c8:18:06:39:17:aa:ff:86:d7:75:eb:1c:
                    08:35:20:cf:be:e5:65:cd:e4:10:e5:f1:70:88:77:
                    7b:61:b0:77:bd:33:71:6b:c7:73:ae:e5:3c:a9:69:
                    88:94:f8:1a:16:0f:09:1f:80:65:65:f2:4a:9f:44:
                    a6:cc:38:9c:63:cc:e0:95:4f:8a:4c:ed:be:91:2a:
                    8c:97:47:38:37:82:6f:3f:dc:bb:6c:45:85:61:8e:
                    0f:51:83:a8:98:f9:f7:3b:3f:41:85:f9:40:52:99:
                    b5:fd:3a:1b:ea:53:a5:4d:0e:ba:37:3b:6a:fe:6e:
                    98:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:A8:FF:8D:F1:E5:67:B6:03:DA:80:27:52:13:44:48:F7:E3:AD:4B
            X509v3 Authority Key Identifier:
                keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:c9:f6:bb:f7:31:10:a7:5f:ee:16:48:0f:81:bf:a7:66:9a:
         35:52:e9:d1:5c:b5:37:d5:14:2e:98:25:70:7a:9d:8e:8c:89:
         e1:ba:7e:60:d4:74:99:c7:96:56:b3:14:fd:88:1d:2f:54:88:
         e9:a1:5a:29:d9:97:11:a8:3d:c9:2a:01:94:24:ca:3f:df:33:
         c5:07:57:ab:b4:2f:ed:2f:37:7c:5d:be:d1:03:c3:e0:d2:50:
         8d:38:1e:b0:d1:bf:63:4c:54:7f:3c:17:ff:43:e1:2e:cf:a6:
         4f:c5:9d:5a:59:25:3e:03:db:34:f9:72:9f:77:0b:0d:44:e5:
         da:84:25:37:30:1b:64:ac:cd:2a:ba:1d:5f:6c:48:9d:18:a1:
         db:ec:6a:77:7b:3c:19:7a:1b:47:29:7e:3d:a3:88:b0:06:4b:
         68:5b:68:0c:24:df:3b:b0:60:66:26:67:f1:82:e6:c2:da:b3:
         9d:4a:b7:19:6f:df:b1:23:5e:12:31:eb:99:15:0a:c1:e7:0d:
         7c:d7:0a:fa:ea:c7:4f:05:fd:1a:07:8c:66:8e:4e:17:82:09:
         0d:4d:05:03:4f:ef:92:b2:99:d0:21:ac:20:0d:65:7d:10:6e:
         eb:8f:bb:7a:5f:bf:02:2c:00:e1:37:d9:b7:3c:69:58:40:c6:
         92:d5:e9:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:08:57 2026 by rpki-client