Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft
File:                     l8kOJSEtiHz54d5v3fVRuoEvoTk.mft (raw, json)
Hash identifier:          lUtrYwYzpMCZcYRhWnzdGAv38GuD9ZVeVnms5Nnpza4=
Subject key identifier:   02:47:C9:3F:88:58:28:6D:FC:40:BF:0B:CD:53:B3:53:5B:1D:CA:2C
Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
Certificate issuer:       /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Certificate serial:       0770
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft
Manifest number:          06F2
Signing time:             Sat 23 Aug 2025 02:11:20 +0000
Manifest this update:     Sat 23 Aug 2025 02:11:19 +0000
Manifest next update:     Mon 25 Aug 2025 02:11:19 +0000
Files and hashes:         1: l8kOJSEtiHz54d5v3fVRuoEvoTk.crl (hash: GXreMvl7ydstqXD38GAGN58BHto9vsklXgweHf62b/A=)
                          2: DBA98D145B2211F0A20E2EA0DAE4EC9C.roa (hash: baX/jyqbDDRWJ52IpaUoPLaTxEVM5KXNaJC/ks++xuQ=)
                          3: EEB5856C7F6B11F0B0B6DF82DAE4EC9C.roa (hash: UIG7Jif5IiOqj4KGvbim+sNDE4xOkewikzs6NTdR8Fc=)
                          4: D555ACF47ED111F08EE5E58BDAE4EC9C.roa (hash: 47vFvhPfYF8MRZPiu19cy9fhXJPFVZu9WXQ1eMHjtak=)
                          5: F4BCC95070A411F0BBDB9A8CDAE4EC9C.roa (hash: 83F8y3L0D+zHhgnFhLiisgnDmRUE03Z7p+znIjRXZf4=)
                          6: 31AC1B067F2B11F0A2FC2DE1DAE4EC9C.roa (hash: pJmfeAp3o89ojiARZABIHNF+5KqQANGXnVyfWK3JWAo=)
                          7: 5A8C7874784411F0BE639EBDDAE4EC9C.roa (hash: Tso2x+6Cusvv7XHczF8aF240Wh6DYRs6taSZ6HxpTbM=)
                          8: 8F66F9F2625011F093EF34AEDAE4EC9C.roa (hash: azeXExxPadQBtZQAbA3QmCVU3GUpPn3GgN81W/kzNws=)
                          9: 0CA767AC70A811F0896F719EDAE4EC9C.roa (hash: SP0RSUZ6bVUNGUKHrurAD/wGVrwxMlkmsVFklO79tfM=)
                          10: C36E5120609611F0AB6F15F2DAE4EC9C.roa (hash: Fk+IfFMpvi36aQyLQYlmv26xnAUJjv0obfvmLZs4rLU=)
                          11: F97058B6742A11F0810B2A8DDAE4EC9C.roa (hash: MJ5nCx+xhx6AqVPExidsnCJBFtUNetW5aMJNhawGs2Y=)
                          12: 40BD1AEA710811F0BBFCC79FDAE4EC9C.roa (hash: 0kr/kH4+wxBld2vJuwRH1Iwyn6s6iUt+vPvZo3OMSa4=)
                          13: B03C5936136B11EF9CB7442D017001B1.roa (hash: 8cn480ct0RO7vc/yrd/vQq31HhnmkbbbxOW5UAR4BoE=)
                          14: 951B9DB2781711F0AAD136A0DAE4EC9C.roa (hash: rxo13RQJNN4g4AsDSu+eErcokD2GEDR1Waq9IZ5O/Qw=)
                          15: DBDA3FB470A711F0B88B119EDAE4EC9C.roa (hash: axiTfA/diVYZQy4/dHV87nWcafawVELUdWWjzoPj6fs=)
                          16: CBA3C1846B7011EFAF3FE084762E951A.roa (hash: pFDrtn8wEhtxFNlu2wmcpGpG41xK4cr84A6LU6JiqYg=)
                          17: CEA072D8776A11EEA49F007D4AD9E6FC.roa (hash: oG1ErKkSbYpP5X6eq2VOONQIy8u5lFGEO9d6IZTGw04=)
                          18: 1DA0B1A4502C11F08AB1C8C2DAE4EC9C.roa (hash: O39HvXcGM8vCDm9DfWvAXNTa9fV5PX5xkVsjsSq21p8=)
                          19: 8771237E7EC211F099678AA8DAE4EC9C.roa (hash: zffaPiL1Y8lSkQQ6ScEJK71SQvlLK9x+FiM4WbmwqxA=)
                          20: E4D6EBE870A811F09D8BE6A2DAE4EC9C.roa (hash: KhPzOb5Q/r1I/qMg4YpHuENyqA7i6YjES8U96N77LE4=)
                          21: 44B107BE0BBA11F0B7AF8852762E951A.roa (hash: 2lsgDetOxz2tEA/haKTe5N+JmsqBvMbXnhGs3La4Rys=)
                          22: 8EC0956E70A411F094929688DAE4EC9C.roa (hash: Dmc5XqbplUaGfABGKpPzYUPx32YybXd085DRK5wjFm4=)
                          23: F5E0077470A511F0A28E6091DAE4EC9C.roa (hash: olkTbE4QbxbPkWlsZsWQVx1rik/z1UUUs7RwAguoeD8=)
                          24: 43B0C19E70A811F0BD8ABE9EDAE4EC9C.roa (hash: kpNIWqGT4YJ8C+vpdAQD9jq8+Ez+Gm5AkhIfWGQ3IsA=)
                          25: 985B73F86B7011EFBCFBD082762E951A.roa (hash: rvpp6Kns5e/Pwe/rzVTNBx4KVxZUF1C0Dh+LLpfr9DM=)
                          26: 06EA9146625111F082ED08AFDAE4EC9C.roa (hash: DlQwSvTDJt//sym2C2UVKdfDULxPx2s6Ok+gJg27kxk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Aug 2025 00:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1904 (0x770)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367DFA4AF, serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
        Validity
            Not Before: Aug 23 02:11:19 2025 GMT
            Not After : Aug 25 02:11:19 2025 GMT
        Subject: CN=68a92347-dacb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:fa:f9:d1:07:1e:00:9d:3b:ad:40:95:fb:44:
                    a9:a5:92:3c:90:56:b7:fa:e4:4a:f5:1f:73:66:8c:
                    02:10:71:09:d3:78:45:fa:fb:64:82:6c:85:fe:89:
                    eb:ae:40:ab:f9:14:b3:b4:97:88:82:4e:09:68:ae:
                    1c:ea:7b:b8:b7:8f:7e:18:70:55:44:1e:bc:f6:9c:
                    f4:d0:6d:2b:79:4c:19:37:39:a1:4c:ee:33:d2:5f:
                    60:e2:35:c4:e5:fc:55:af:4c:af:bc:06:76:46:fb:
                    cf:54:a0:99:37:80:4f:2e:7a:51:7b:7c:01:03:e0:
                    33:f6:76:7b:bf:af:9c:8d:9e:e2:ed:f4:35:d4:92:
                    54:85:17:67:a5:50:92:1a:75:e3:9e:5b:fd:4a:1e:
                    f6:80:86:ee:62:63:f1:80:e1:99:7a:02:d4:46:81:
                    ac:c0:18:a8:d0:6b:fa:7e:c1:99:93:f8:7d:e9:49:
                    1c:6d:03:5e:2a:0c:fd:19:31:0c:2a:bf:6f:93:7b:
                    74:27:df:e8:e9:82:83:34:69:53:51:4e:47:a5:87:
                    a1:38:d3:c7:78:07:3f:0b:ae:23:ed:36:a4:a4:89:
                    f4:7d:7c:b0:28:8f:8e:f5:aa:b5:a8:6e:6d:5d:88:
                    95:c5:0c:75:8f:b3:b4:6d:f8:03:57:32:a9:17:7b:
                    40:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:47:C9:3F:88:58:28:6D:FC:40:BF:0B:CD:53:B3:53:5B:1D:CA:2C
            X509v3 Authority Key Identifier:
                keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:86:71:98:a2:ed:8f:f3:c6:c1:f2:c4:0d:ec:78:14:63:02:
         6f:72:56:77:6c:b4:f9:08:82:e5:7f:d5:52:b2:73:bd:ba:3f:
         d7:d5:b8:48:04:fa:26:a8:b2:56:c9:87:ba:f5:3f:73:a1:7c:
         a6:5b:63:0c:76:93:ed:55:52:4a:dd:8f:f0:54:db:26:e6:a4:
         bb:31:c1:ac:95:7d:f6:85:f1:89:64:6b:b0:0a:a2:7f:36:df:
         c9:fc:9e:5a:18:9a:a4:a6:d4:5d:31:ed:7c:9d:0e:e3:c8:d9:
         c0:8f:7b:83:3e:c8:7f:82:60:6f:cf:bd:40:81:13:0c:6e:4e:
         16:ce:0b:a6:53:0b:88:e4:4a:e1:82:c3:75:47:f5:10:0d:7b:
         9a:89:00:94:af:b2:5e:e8:8c:56:8e:4a:96:c0:dc:a2:19:ba:
         8f:1a:48:bd:bd:ce:c0:8e:e5:93:b7:a8:5c:7a:ee:7c:4f:84:
         ed:94:81:51:72:30:43:01:79:7e:d4:12:83:48:95:a3:00:df:
         12:cc:1f:ee:66:1d:e6:56:17:a3:d0:6f:b9:de:87:77:67:5c:
         44:ac:34:fe:5c:52:d2:db:90:ce:e0:52:79:eb:e6:f1:e3:29:
         7e:66:4b:71:c4:e7:9f:c0:6f:fd:45:71:0b:06:0f:ce:9f:e0:
         3e:e8:b3:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:18:59 2025 by rpki-client