Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3688321/9CE7374E0DFC11EFBBC58B5B017001B1/4ugF6J3fkHsrUo9CZBtP92ImmxY.mft
File:                     4ugF6J3fkHsrUo9CZBtP92ImmxY.mft (raw, json)
Hash identifier:          H7CYBFmDmidG0sVfE00ws35D7HXawYeNi7u7Me9KBd4=
Subject key identifier:   75:12:0A:C9:40:D8:27:73:B6:6C:3D:87:AA:80:58:8F:98:89:16:CD
Authority key identifier: E2:E8:05:E8:9D:DF:90:7B:2B:52:8F:42:64:1B:4F:F7:62:26:9B:16
Certificate issuer:       /CN=F3688321AR/serialNumber=E2E805E89DDF907B2B528F42641B4FF762269B16
Certificate serial:       01E6
Authority info access:    rsync://rpki.afrinic.net/repository/arin/4ugF6J3fkHsrUo9CZBtP92ImmxY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3688321/9CE7374E0DFC11EFBBC58B5B017001B1/4ugF6J3fkHsrUo9CZBtP92ImmxY.mft
Manifest number:          01E5
Signing time:             Sat 23 Aug 2025 04:30:33 +0000
Manifest this update:     Sat 23 Aug 2025 04:30:32 +0000
Manifest next update:     Mon 25 Aug 2025 04:30:32 +0000
Files and hashes:         1: 4ugF6J3fkHsrUo9CZBtP92ImmxY.crl (hash: Er5ogAq/KFJpdcsRt7ilqUMG8Fw6hgGrtP9lZXr5Uus=)
                          2: 7E32B2260DFF11EF971154F4007001B1.roa (hash: mMlz9+L3Eog8WKMUxfqqOF5aG0LcyYUooSiKu/ea8uI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3688321/9CE7374E0DFC11EFBBC58B5B017001B1/4ugF6J3fkHsrUo9CZBtP92ImmxY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3688321/9CE7374E0DFC11EFBBC58B5B017001B1/4ugF6J3fkHsrUo9CZBtP92ImmxY.mft
                          rsync://rpki.afrinic.net/repository/arin/4ugF6J3fkHsrUo9CZBtP92ImmxY.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Aug 2025 04:30:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 486 (0x1e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3688321AR, serialNumber=E2E805E89DDF907B2B528F42641B4FF762269B16
        Validity
            Not Before: Aug 23 04:30:32 2025 GMT
            Not After : Aug 25 04:30:32 2025 GMT
        Subject: CN=68a943e9-eac9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:03:3f:d0:49:b1:5c:b1:8d:ad:1d:ff:e5:27:
                    1f:6b:3c:cf:63:29:b9:3d:e2:3a:c0:85:11:f2:ab:
                    e8:02:f5:d5:d3:c9:cc:8e:f7:f7:45:e3:b4:6f:71:
                    eb:d5:1d:81:ca:ad:e1:8f:eb:11:13:8a:a8:78:70:
                    ba:9c:b6:15:30:3f:2f:18:32:ab:23:46:09:8f:a7:
                    40:a3:98:f9:66:a8:c6:c2:a2:fe:04:8a:6d:2d:ff:
                    41:e0:42:3e:96:65:8f:f2:1a:15:ab:bb:2f:5e:8c:
                    0b:76:aa:49:81:c1:91:ed:b6:10:2e:db:62:5a:f7:
                    88:fe:e6:53:8e:a1:ca:b9:2a:53:61:34:bc:b2:19:
                    1c:ac:1b:16:67:21:d1:bc:2a:3c:f3:d2:22:7c:cc:
                    9f:30:5a:1a:04:02:3b:7f:bd:2c:38:a7:66:d5:d2:
                    e4:23:d4:f4:2a:23:b0:5c:b9:c6:43:f0:f2:26:b0:
                    f3:c3:6e:6c:36:04:17:c8:00:b3:76:3d:6d:c0:c1:
                    40:67:63:40:45:2b:38:d7:12:f3:fd:63:bb:99:8c:
                    57:cd:95:81:08:ed:13:cf:bd:17:f8:3a:90:bf:02:
                    59:e7:ff:af:d2:68:29:66:08:e8:77:0a:c1:6a:d4:
                    ce:0e:10:22:15:e5:91:57:0a:af:c4:5c:5d:32:82:
                    cf:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:12:0A:C9:40:D8:27:73:B6:6C:3D:87:AA:80:58:8F:98:89:16:CD
            X509v3 Authority Key Identifier:
                keyid:E2:E8:05:E8:9D:DF:90:7B:2B:52:8F:42:64:1B:4F:F7:62:26:9B:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3688321/9CE7374E0DFC11EFBBC58B5B017001B1/4ugF6J3fkHsrUo9CZBtP92ImmxY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/4ugF6J3fkHsrUo9CZBtP92ImmxY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3688321/9CE7374E0DFC11EFBBC58B5B017001B1/4ugF6J3fkHsrUo9CZBtP92ImmxY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:0d:a2:e6:42:1b:2c:71:ff:ba:a5:6b:48:3a:26:00:8a:ff:
         85:11:ce:9c:5f:ad:79:a5:49:75:6c:51:7d:35:4f:f6:9f:77:
         75:5d:a5:ce:fb:a1:9f:f4:58:73:71:0f:81:f1:14:72:b6:02:
         cb:bc:f8:24:d1:f2:55:bb:de:16:7b:ec:6d:95:26:32:66:1b:
         9f:ae:03:66:63:1f:09:23:1d:96:54:37:9a:a1:44:e4:89:8e:
         3b:66:51:1b:8b:63:32:bf:c0:6b:7e:a3:25:67:c1:e6:8c:ad:
         7f:5a:0d:e6:9c:a4:14:0b:6c:a7:25:d0:6b:ad:dd:27:20:37:
         81:63:54:e9:a9:bb:c5:a8:30:e4:28:7e:d1:0a:5a:ee:6f:87:
         57:95:6d:87:84:80:53:3f:9a:cf:0d:a3:69:e2:fc:3e:92:61:
         79:a9:d5:b9:ba:28:c5:95:32:13:2b:13:a2:a6:a3:fd:2e:d1:
         e9:9d:c2:61:56:7f:e2:b7:c3:66:2d:d9:8f:12:34:5e:74:91:
         fd:b0:2b:75:b7:a8:38:1a:48:64:ce:ac:00:d5:72:e5:6d:0c:
         3e:e1:95:3a:b1:23:23:36:ab:17:9e:c2:38:4d:08:0e:95:27:
         6c:c2:99:34:a4:eb:36:70:31:39:25:91:14:1e:30:96:f2:35:
         34:76:7e:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:09:50 2025 by rpki-client