Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3687682/DB80ADB8009211EF9BC14D0D017001B1/7heW4OxZE9jIj7q68fgKRZzuOTk.mft
File:                     7heW4OxZE9jIj7q68fgKRZzuOTk.mft (raw, json)
Hash identifier:          bqGY7G6UYTrKbWwJm37ngDkEgYdYbFNClIohgZ03Elo=
Subject key identifier:   05:78:CC:33:50:F4:06:76:7A:35:6B:10:F1:72:F2:CA:E8:FD:11:2C
Authority key identifier: EE:17:96:E0:EC:59:13:D8:C8:8F:BA:BA:F1:F8:0A:45:9C:EE:39:39
Certificate issuer:       /CN=F3687682AF/serialNumber=EE1796E0EC5913D8C88FBABAF1F80A459CEE3939
Certificate serial:       0350
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/7heW4OxZE9jIj7q68fgKRZzuOTk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3687682/DB80ADB8009211EF9BC14D0D017001B1/7heW4OxZE9jIj7q68fgKRZzuOTk.mft
Manifest number:          034D
Signing time:             Fri 24 Jul 2026 04:08:36 +0000
Manifest this update:     Fri 24 Jul 2026 04:08:35 +0000
Manifest next update:     Sun 26 Jul 2026 04:08:35 +0000
Files and hashes:         1: 7heW4OxZE9jIj7q68fgKRZzuOTk.crl (hash: 0e/3v6wJEpN3S7fVGA9UoxFCOrKIp3VT/EgFF3CNx4M=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3687682/DB80ADB8009211EF9BC14D0D017001B1/7heW4OxZE9jIj7q68fgKRZzuOTk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3687682/DB80ADB8009211EF9BC14D0D017001B1/7heW4OxZE9jIj7q68fgKRZzuOTk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/7heW4OxZE9jIj7q68fgKRZzuOTk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 26 Jul 2026 00:07:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 848 (0x350)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3687682AF, serialNumber=EE1796E0EC5913D8C88FBABAF1F80A459CEE3939
        Validity
            Not Before: Jul 24 04:08:35 2026 GMT
            Not After : Jul 26 04:08:35 2026 GMT
        Subject: CN=6a62e544-21e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:20:05:9e:9d:e1:51:5b:3e:5c:0a:54:cf:c3:
                    68:a8:02:0d:42:7d:82:55:12:70:f7:21:5f:ec:ed:
                    56:95:46:cd:c7:1d:13:76:d2:06:08:66:6f:5c:00:
                    2e:3d:a3:c9:2c:c1:78:09:5a:f8:09:23:75:5a:a6:
                    08:6b:59:d0:54:8c:f2:d5:cb:fa:f7:93:7b:7a:78:
                    c8:1a:71:14:bd:0d:32:d9:44:86:92:fd:4d:3c:3a:
                    f8:12:b2:69:ed:33:fb:18:25:61:82:f1:de:c0:8a:
                    c9:10:79:e1:cb:b3:75:5c:4b:66:68:af:78:2c:bf:
                    dd:6a:a4:58:b3:76:f9:5d:50:33:9a:ac:16:c7:05:
                    da:ba:35:80:84:45:bc:a7:a2:ba:4a:aa:b2:a0:b2:
                    10:35:b5:24:af:a8:10:66:8b:6a:9c:dc:59:ab:f5:
                    00:e2:17:a6:77:9f:49:42:87:4f:6f:43:bb:01:ed:
                    23:17:47:bb:8b:f4:29:bc:92:0a:98:b7:ce:f7:1e:
                    f5:74:cd:e9:e9:67:f2:e7:3e:d5:7b:80:20:8a:9b:
                    51:55:0d:73:1b:38:9e:69:83:e5:8b:39:f2:7f:ab:
                    e4:9e:e9:4a:ba:3b:e7:1d:1a:f9:ce:89:d6:d5:a2:
                    b8:72:20:ae:31:12:b7:e9:3e:a2:84:24:56:59:82:
                    f8:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:78:CC:33:50:F4:06:76:7A:35:6B:10:F1:72:F2:CA:E8:FD:11:2C
            X509v3 Authority Key Identifier:
                keyid:EE:17:96:E0:EC:59:13:D8:C8:8F:BA:BA:F1:F8:0A:45:9C:EE:39:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3687682/DB80ADB8009211EF9BC14D0D017001B1/7heW4OxZE9jIj7q68fgKRZzuOTk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/7heW4OxZE9jIj7q68fgKRZzuOTk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3687682/DB80ADB8009211EF9BC14D0D017001B1/7heW4OxZE9jIj7q68fgKRZzuOTk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:48:34:c0:0f:8a:b7:fa:bf:7b:13:fd:c4:9a:e8:d1:7d:ab:
         0c:54:ca:55:17:90:88:c0:d9:7a:27:9e:81:1b:cd:1b:37:e0:
         40:b1:5f:1c:e3:ad:61:41:b7:1c:b0:bc:88:34:7b:dd:c3:46:
         f9:4d:f7:4e:70:82:44:cb:7d:51:0e:cb:2a:24:54:80:1d:f2:
         6a:3b:e6:39:b6:c6:96:dd:35:13:b6:45:9e:6b:53:7d:2d:b7:
         29:f8:20:60:aa:65:13:e9:9f:72:96:98:90:55:26:3d:3e:3c:
         f2:12:c3:2f:37:2e:c2:99:49:f6:f2:02:b0:3e:ff:9e:b1:96:
         ff:8d:11:cf:73:3b:83:ce:5d:8d:42:7f:32:5b:5e:3d:12:44:
         87:80:a2:1f:88:a7:9d:0c:6a:7a:fa:1b:e3:20:61:d5:8d:ac:
         06:a9:3d:58:60:81:f5:26:07:73:62:16:84:28:44:47:86:dc:
         a0:4c:de:55:22:10:f1:86:15:e9:84:fc:a5:b0:f9:57:cc:10:
         18:c8:32:96:0b:32:74:a9:97:23:86:12:ca:dc:25:30:69:a0:
         2a:a0:f0:ce:09:4d:65:f5:df:e9:bf:2f:c0:7c:c6:b1:0c:8f:
         bf:bf:2f:d3:0d:b5:09:5d:a6:6b:94:08:bf:1d:68:ad:bf:e9:
         ec:8e:6d:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:17:40 2026 by rpki-client