Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/H025rGtjEIoZvc2-7P9EmELI1qA.mft
File:                     H025rGtjEIoZvc2-7P9EmELI1qA.mft (raw, json)
Hash identifier:          6oa9sMI6AsprW8DZtB4h43z4CYT46srDBZWBI+20wtU=
Subject key identifier:   9A:1C:DE:07:A6:F1:EE:B8:9F:3E:E9:A5:28:9B:06:39:C5:2F:76:BC
Authority key identifier: 1F:4D:B9:AC:6B:63:10:8A:19:BD:CD:BE:EC:FF:44:98:42:C8:D6:A0
Certificate issuer:       /CN=F36960E7AF/serialNumber=1F4DB9AC6B63108A19BDCDBEECFF449842C8D6A0
Certificate serial:       0634
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/H025rGtjEIoZvc2-7P9EmELI1qA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/H025rGtjEIoZvc2-7P9EmELI1qA.mft
Manifest number:          061C
Signing time:             Sat 23 Aug 2025 02:24:43 +0000
Manifest this update:     Sat 23 Aug 2025 02:24:43 +0000
Manifest next update:     Mon 25 Aug 2025 02:24:43 +0000
Files and hashes:         1: H025rGtjEIoZvc2-7P9EmELI1qA.crl (hash: J8PA9O60hNeR34Cud3S6gVQhy2I0PzPZBkk9B/eP9u0=)
                          2: 147022E0FF7811EF8AD31A7F762E951A.roa (hash: qYTfJITsVD5T5eimpEou1GQGKMzGQHZktsprbHqNuAg=)
                          3: 97E5095A63C011EF90B900AC762E951A.roa (hash: CHhNHwLMIMRB1HS45x0TZaQ8HwPIwiq6phsmJWqlNls=)
                          4: A4A1D2764B2511EF8EF8344D762E951A.roa (hash: 1LENRmO0LraUT6L3MliWDe3/LJksiV6Jf6oYUUqLkKg=)
                          5: 37B83E60FFEE11EFABEA6E81762E951A.roa (hash: gsvCvW76OaOtF8689d8WlWC5LaBRhvA+SlkfDprHioM=)
                          6: E631AAE263E211EFB8CD0280762E951A.roa (hash: XSoqhxLLsPMFAUnlaR/flj6HqH5kA2geBpaO4zUAc7M=)
                          7: 78DBB3A8509111EE8C794A224AD9E6FC.roa (hash: SDX6NV8iUbdSzDkDOEULuuCRJop7B8rmcDLu1uSO9fs=)
                          8: DB5852DAF85D11EC930D6BE8F1222468.roa (hash: 24EK8b+p2r7qpQuA2QKiuCsydz+C8t9Qpt7D1suQdos=)
                          9: 0EB33C3E515B11ED8AE4D0AAF1222468.roa (hash: eiq5eNdm8hOD/A+aOoYrfS2hurAaCz5anYykVp73ybM=)
                          10: 873E69A426D411EE808251234AD9E6FC.roa (hash: aoo+0TPZ+18QyH80oIAYV8B61S0zAuLxyHBVzKd8FOQ=)
                          11: 0323315A4EB811F084FC41D3DAE4EC9C.roa (hash: cPuBysMNDw4xZiHYj3lZqWAcLVHha62uoIAKd7pImOg=)
                          12: 455DB88A63C011EF901665A8762E951A.roa (hash: pGHG04rI1V24GpX027/GUmlPC9Q173BRWV0hc0ib0ko=)
                          13: DBFE937C426511EEBE348D774AD9E6FC.roa (hash: QIaZqhKkN8RZ2TMX3IFJAuphOSd06o9Ok298FA+iNs4=)
                          14: BBDB457C50B211ED936AB1EFF1222468.roa (hash: Ic3/YAN//xfDApEXJkLHl3ajCQB8DF7eTF+JzdLiPrw=)
                          15: CBA17CF8509111EEB65831234AD9E6FC.roa (hash: wP6aKsEiYvGLq91LUKac5Hf0WJB6D/C/9SQUe8eJUqs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/H025rGtjEIoZvc2-7P9EmELI1qA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/H025rGtjEIoZvc2-7P9EmELI1qA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/H025rGtjEIoZvc2-7P9EmELI1qA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Aug 2025 00:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1588 (0x634)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36960E7AF, serialNumber=1F4DB9AC6B63108A19BDCDBEECFF449842C8D6A0
        Validity
            Not Before: Aug 23 02:24:43 2025 GMT
            Not After : Aug 25 02:24:43 2025 GMT
        Subject: CN=68a9266b-ea18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:8d:a2:60:4d:a3:02:82:58:aa:41:6a:b7:a7:
                    45:5f:f5:90:86:63:f4:ad:48:7c:21:c4:8e:3d:ca:
                    b6:a8:25:4e:26:b4:9e:5a:a8:3c:fc:3f:ac:92:0b:
                    d5:28:03:06:1e:63:01:72:08:6c:7e:fd:b1:cf:07:
                    ce:39:f0:f6:87:cf:a9:0c:52:29:26:9f:11:10:9b:
                    12:50:50:25:af:87:30:06:36:53:1c:77:71:9b:89:
                    a8:1a:90:3a:f2:f4:8b:81:f6:07:ff:b2:14:ee:d2:
                    8f:0d:67:02:3b:6d:dd:df:d5:55:62:bc:97:57:9b:
                    82:20:85:2c:2e:bd:f7:60:55:b0:33:42:f2:d0:b9:
                    26:4d:19:d7:46:ce:2b:31:95:24:40:4c:3c:1a:16:
                    e8:89:ff:5d:ee:0e:52:4e:8b:c9:7d:33:0c:57:9e:
                    79:69:ba:16:0f:19:d0:cb:66:0f:07:6b:98:15:a7:
                    14:31:64:40:a3:46:2d:30:6e:42:1b:0f:af:c4:16:
                    1b:47:7c:5b:90:08:3f:f4:90:fe:7e:9d:f4:cd:8b:
                    32:aa:49:6d:26:a9:33:73:85:c6:13:6a:07:7b:08:
                    ef:e5:7a:0f:28:1f:9b:60:c9:35:92:db:e3:30:69:
                    89:a4:63:02:e3:ef:40:bc:fe:09:61:46:f4:25:02:
                    4c:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:1C:DE:07:A6:F1:EE:B8:9F:3E:E9:A5:28:9B:06:39:C5:2F:76:BC
            X509v3 Authority Key Identifier:
                keyid:1F:4D:B9:AC:6B:63:10:8A:19:BD:CD:BE:EC:FF:44:98:42:C8:D6:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/H025rGtjEIoZvc2-7P9EmELI1qA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/H025rGtjEIoZvc2-7P9EmELI1qA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/H025rGtjEIoZvc2-7P9EmELI1qA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:e0:bd:db:eb:7a:88:40:22:d8:7c:6e:1c:88:23:f2:93:3f:
         17:a5:5b:a4:fd:38:82:e9:68:24:78:a5:45:81:5a:6d:c5:5c:
         1f:b4:2b:9e:ec:4f:2f:47:fc:d0:27:da:e4:22:bd:85:4c:15:
         36:30:5e:75:25:75:22:ee:4a:0e:18:bb:c9:fa:0b:be:4a:70:
         3c:40:0d:c7:d4:1d:3d:d3:78:8f:19:bf:70:f4:77:98:b9:4a:
         4b:a3:0d:23:04:2a:9e:33:d2:ca:18:d8:1c:e0:c1:3c:67:e1:
         95:27:e0:f5:50:df:83:46:9b:60:68:53:41:07:73:74:8f:fa:
         14:54:95:77:17:35:93:42:b6:9d:41:58:bd:37:66:e7:e7:18:
         2e:d8:a8:34:58:4a:32:00:07:47:75:f6:a7:f7:33:d2:87:68:
         73:22:4d:ed:be:28:b3:57:ea:ee:31:9b:1c:50:8b:f1:56:15:
         6e:f1:c5:87:36:d7:2c:fc:e9:65:71:aa:60:85:60:6c:f1:1e:
         90:61:c4:57:ec:92:a8:dd:f6:ef:b1:bf:54:fc:9c:21:73:21:
         aa:34:47:ae:26:18:d6:13:8c:3e:7f:6f:78:1f:a8:ca:9b:25:
         72:08:57:a9:c2:48:ba:85:90:a6:e2:b9:76:98:91:39:6b:9a:
         c9:a6:78:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:28:37 2025 by rpki-client