Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367F26D/3F4041FC70B911E9A7F25D3FF8AEA228/nYezEXqhvXgot91GTXMHa66NzJY.mft
File:                     nYezEXqhvXgot91GTXMHa66NzJY.mft (raw, json)
Hash identifier:          g0iNsCeh5jMnFeMO7rxVsbqHjKHwRH03ndjA/ugio7k=
Subject key identifier:   FA:65:04:E5:A1:7F:61:BE:FD:DD:E5:EE:14:D3:05:2E:A7:98:20:6F
Authority key identifier: 9D:87:B3:11:7A:A1:BD:78:28:B7:DD:46:4D:73:07:6B:AE:8D:CC:96
Certificate issuer:       /CN=F367F26DRI/serialNumber=9D87B3117AA1BD7828B7DD464D73076BAE8DCC96
Certificate serial:       0941
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/nYezEXqhvXgot91GTXMHa66NzJY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367F26D/3F4041FC70B911E9A7F25D3FF8AEA228/nYezEXqhvXgot91GTXMHa66NzJY.mft
Manifest number:          093D
Signing time:             Sat 23 Aug 2025 01:22:08 +0000
Manifest this update:     Sat 23 Aug 2025 01:22:08 +0000
Manifest next update:     Mon 25 Aug 2025 01:22:08 +0000
Files and hashes:         1: nYezEXqhvXgot91GTXMHa66NzJY.crl (hash: LbV1U8NLhEScGMDCE6xkp6P4BE0QqEdkipP7G9IiYR4=)
                          2: D327BE38980311EE8CAFD532D25BE465.roa (hash: S6gTdluMy3bxrOQWOaTfSvtXEYSyREhvKUaAZL3cXu4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367F26D/3F4041FC70B911E9A7F25D3FF8AEA228/nYezEXqhvXgot91GTXMHa66NzJY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367F26D/3F4041FC70B911E9A7F25D3FF8AEA228/nYezEXqhvXgot91GTXMHa66NzJY.mft
                          rsync://rpki.afrinic.net/repository/ripe/nYezEXqhvXgot91GTXMHa66NzJY.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Aug 2025 00:45:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2369 (0x941)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367F26DRI, serialNumber=9D87B3117AA1BD7828B7DD464D73076BAE8DCC96
        Validity
            Not Before: Aug 23 01:22:08 2025 GMT
            Not After : Aug 25 01:22:08 2025 GMT
        Subject: CN=68a917c0-249b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:8f:af:b8:c0:b2:8d:6e:fa:4f:4b:3a:67:29:
                    85:95:48:42:0a:e2:6f:b5:05:0e:3f:40:9a:cb:ee:
                    bb:a2:0d:04:ca:30:30:b1:d3:e7:f1:5a:8c:2f:a7:
                    08:12:83:96:83:63:1f:8a:72:01:94:70:fe:d8:c0:
                    75:f7:0c:56:ab:0c:1e:40:6d:e2:67:9c:9c:fb:fd:
                    3c:63:ff:1e:c5:36:4f:1c:7b:8c:44:b2:11:65:9d:
                    cb:97:26:d5:5e:1e:b0:e6:51:5f:13:94:f5:b4:41:
                    bd:25:6a:62:45:12:ea:9c:89:44:c7:a7:be:63:fb:
                    fa:7d:b0:d7:84:50:64:4f:19:ea:f5:dc:0e:8d:ef:
                    6c:98:9c:dd:7d:a3:8e:2e:e5:87:a3:8d:1c:3b:bf:
                    3e:6d:15:2b:0c:39:5b:47:14:a2:5e:90:bb:a7:e4:
                    fb:ad:00:9e:ed:88:71:72:fb:ef:f5:6d:6b:96:93:
                    b5:3e:01:00:5d:f9:04:b7:d9:5f:ee:a2:39:e6:5c:
                    06:26:02:df:6e:17:11:e1:f0:42:4a:d2:85:e8:c8:
                    16:19:30:09:be:1a:96:82:63:dc:f1:21:12:12:2f:
                    28:d8:ed:6b:75:0f:c4:86:08:0b:ee:4b:5e:a8:79:
                    33:f4:59:81:0b:87:83:d7:d4:19:24:ca:0f:7c:89:
                    d5:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:65:04:E5:A1:7F:61:BE:FD:DD:E5:EE:14:D3:05:2E:A7:98:20:6F
            X509v3 Authority Key Identifier:
                keyid:9D:87:B3:11:7A:A1:BD:78:28:B7:DD:46:4D:73:07:6B:AE:8D:CC:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367F26D/3F4041FC70B911E9A7F25D3FF8AEA228/nYezEXqhvXgot91GTXMHa66NzJY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/nYezEXqhvXgot91GTXMHa66NzJY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367F26D/3F4041FC70B911E9A7F25D3FF8AEA228/nYezEXqhvXgot91GTXMHa66NzJY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:c8:0a:1f:6b:34:b3:33:49:62:c1:7d:a2:88:5c:f8:31:00:
         8d:ba:21:aa:07:1a:ed:3e:a3:c8:e1:0d:a5:ed:6f:cf:5a:0c:
         0f:be:ac:6d:99:2b:06:5a:16:1c:96:23:7d:36:15:69:2a:71:
         e7:78:fa:c1:5e:12:5b:56:29:68:69:1b:a3:ba:a8:df:dc:02:
         ef:2a:00:90:6e:93:5b:66:ff:9b:f1:69:d8:a3:a7:98:76:86:
         3a:ef:69:12:80:6b:91:0b:2b:d4:5b:46:3d:06:12:1d:2c:ea:
         f2:9e:11:12:4a:13:fc:f8:18:a1:75:e2:d3:5c:c7:52:3f:74:
         c3:c6:c8:33:01:56:8d:17:a5:07:e9:24:58:2f:6b:2e:f5:7d:
         e9:2a:a8:33:b7:e4:e6:9a:a9:7b:b0:b2:29:e5:9e:24:ea:6f:
         bf:76:16:b3:d7:34:84:cf:67:cd:6a:35:e8:44:ec:f3:cf:b8:
         a5:f8:89:5d:34:c3:7c:a6:cc:59:5a:7c:7c:0f:11:07:cc:ec:
         0e:0c:d2:f7:0e:48:fe:3a:a9:6b:7f:57:3f:62:ab:20:ec:ff:
         94:23:69:47:17:3b:c9:4c:91:85:06:8f:3e:1f:72:21:cd:4d:
         53:5f:66:47:e5:68:91:98:e8:19:3c:9a:8a:24:12:af:fa:2a:
         21:5a:05:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:14:54 2025 by rpki-client