Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3688163/3982A74ECBC911EEA7F5F576775412E6/eRR9PW5TftaH0IV7r4SSgRj9pOU.mft
File:                     eRR9PW5TftaH0IV7r4SSgRj9pOU.mft (raw, json)
Hash identifier:          Nl6D74W1vWZzxtKAJaaQTHjztt9PWOfsKhxYcMsfCYw=
Subject key identifier:   98:1F:F9:89:7F:77:FE:AB:E2:BF:A7:8B:4E:C7:6E:B3:5E:C7:87:E9
Authority key identifier: 79:14:7D:3D:6E:53:7E:D6:87:D0:85:7B:AF:84:92:81:18:FD:A4:E5
Certificate issuer:       /CN=F3688163AF/serialNumber=79147D3D6E537ED687D0857BAF84928118FDA4E5
Certificate serial:       038D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/eRR9PW5TftaH0IV7r4SSgRj9pOU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3688163/3982A74ECBC911EEA7F5F576775412E6/eRR9PW5TftaH0IV7r4SSgRj9pOU.mft
Manifest number:          038C
Signing time:             Fri 24 Jul 2026 04:02:33 +0000
Manifest this update:     Fri 24 Jul 2026 04:02:33 +0000
Manifest next update:     Sun 26 Jul 2026 04:02:33 +0000
Files and hashes:         1: eRR9PW5TftaH0IV7r4SSgRj9pOU.crl (hash: 3jI4QuwzykhLwi4J6gvidXKLxpcmg7RyOGAYAZVM2Ww=)
                          2: E8A5A2BCCBC911EE8E9BEF77775412E6.roa (hash: uW1ZZtqf2li8jzBd7IN42gC/xPbqnD5CcVOfHA/YQtE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3688163/3982A74ECBC911EEA7F5F576775412E6/eRR9PW5TftaH0IV7r4SSgRj9pOU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3688163/3982A74ECBC911EEA7F5F576775412E6/eRR9PW5TftaH0IV7r4SSgRj9pOU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/eRR9PW5TftaH0IV7r4SSgRj9pOU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 26 Jul 2026 00:07:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 909 (0x38d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3688163AF, serialNumber=79147D3D6E537ED687D0857BAF84928118FDA4E5
        Validity
            Not Before: Jul 24 04:02:33 2026 GMT
            Not After : Jul 26 04:02:33 2026 GMT
        Subject: CN=6a62e3d9-f4f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:27:a4:c4:9a:48:52:5f:4b:fd:f5:80:06:0e:
                    28:0f:7a:bd:18:55:cd:3b:59:6c:5a:76:56:4c:63:
                    06:73:f7:55:ef:11:e7:16:8c:75:18:a9:59:9e:7f:
                    59:3c:89:c0:54:46:99:4a:1f:3a:54:b6:a0:28:54:
                    ef:4d:dd:89:b4:e6:53:4c:47:f3:a1:34:d3:01:af:
                    26:3d:ca:b7:07:72:94:75:d9:c5:cf:48:08:5b:da:
                    63:08:6d:15:a5:c7:66:24:7b:a9:7a:1a:1f:93:c6:
                    6c:17:2f:7a:48:d8:7e:97:83:54:06:40:80:ac:96:
                    85:b5:f1:62:e5:8e:7f:32:25:83:80:65:5b:37:9d:
                    0c:23:08:fb:25:58:16:d5:79:ea:af:73:39:31:98:
                    8b:4c:90:aa:2b:3d:3d:cb:d3:ff:27:18:4d:da:5d:
                    60:29:96:1e:8e:3c:5e:42:de:98:bb:f8:aa:17:6f:
                    34:a9:5b:19:8a:4b:8c:ae:9c:cc:5e:ab:18:7b:1b:
                    0f:3f:90:1d:89:52:8b:38:88:eb:00:5f:18:5c:0d:
                    6f:a2:f9:f0:a5:88:9f:14:11:56:35:a5:4d:7a:fb:
                    23:2d:37:e1:16:98:b8:8d:b2:0b:8a:22:41:67:96:
                    ee:77:89:e8:e0:55:2c:b5:7e:79:f5:27:e4:58:fa:
                    9d:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:1F:F9:89:7F:77:FE:AB:E2:BF:A7:8B:4E:C7:6E:B3:5E:C7:87:E9
            X509v3 Authority Key Identifier:
                keyid:79:14:7D:3D:6E:53:7E:D6:87:D0:85:7B:AF:84:92:81:18:FD:A4:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3688163/3982A74ECBC911EEA7F5F576775412E6/eRR9PW5TftaH0IV7r4SSgRj9pOU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/eRR9PW5TftaH0IV7r4SSgRj9pOU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3688163/3982A74ECBC911EEA7F5F576775412E6/eRR9PW5TftaH0IV7r4SSgRj9pOU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:e1:7b:8a:86:7b:3b:00:dc:b4:ef:7c:2e:3c:f9:ba:67:92:
         c1:bf:c1:26:36:d6:89:f3:4e:7a:fa:34:c6:67:16:52:de:6b:
         0f:00:32:41:f8:59:4e:09:b7:3b:50:08:84:56:7f:2d:e5:d3:
         96:15:aa:8e:63:bd:e1:d0:c2:b5:84:c1:bf:33:cc:89:33:53:
         45:a2:e2:33:59:11:1b:f0:1b:dc:5f:76:06:ea:2a:bb:5a:26:
         7c:d1:98:9b:be:a0:66:d9:50:86:7c:81:b8:24:21:4f:70:b1:
         1a:45:22:90:eb:0f:dc:2a:80:fb:9c:93:04:04:e5:1e:50:ed:
         71:89:73:83:f4:bc:6a:61:31:75:d6:57:29:ae:2a:16:a2:d5:
         be:ee:cf:81:3d:3f:39:6e:33:2c:0b:2f:64:cb:33:9b:51:9b:
         45:22:8c:33:13:01:f5:e3:d6:ac:9b:6f:da:93:17:1a:fc:df:
         bb:e3:d3:b5:a5:c7:ff:08:c3:96:ab:d6:e0:e5:d1:55:5b:3a:
         b3:5a:31:f1:0e:ed:76:f5:cb:e1:4a:6e:2c:e6:79:4f:19:39:
         b6:63:37:82:ed:58:e1:89:e9:a4:99:58:d5:a2:5d:61:af:6b:
         45:00:71:91:ba:cb:b1:b0:75:95:c3:b6:4c:82:9d:df:a2:d6:
         24:48:3d:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:17:58 2026 by rpki-client