Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3696A10/CBB5DFACC38C11F0A2712CBBDAE4EC9C/EbTv4fMc1cj0SqlTE_0Nw1yuJLw.mft
File:                     EbTv4fMc1cj0SqlTE_0Nw1yuJLw.mft (raw, json)
Hash identifier:          o3KxSm4fbDHvP0g6KCHqDwSOz+BYgFE7cFd04vlZkZE=
Subject key identifier:   30:64:22:4F:DB:61:10:81:57:F2:69:7B:48:28:6D:D1:AE:8D:0F:18
Authority key identifier: 11:B4:EF:E1:F3:1C:D5:C8:F4:4A:A9:53:13:FD:0D:C3:5C:AE:24:BC
Certificate issuer:       /CN=F3696A10AF/serialNumber=11B4EFE1F31CD5C8F44AA95313FD0DC35CAE24BC
Certificate serial:       FD
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/EbTv4fMc1cj0SqlTE_0Nw1yuJLw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3696A10/CBB5DFACC38C11F0A2712CBBDAE4EC9C/EbTv4fMc1cj0SqlTE_0Nw1yuJLw.mft
Manifest number:          FD
Signing time:             Fri 24 Jul 2026 05:15:06 +0000
Manifest this update:     Fri 24 Jul 2026 05:15:05 +0000
Manifest next update:     Sun 26 Jul 2026 05:15:05 +0000
Files and hashes:         1: EbTv4fMc1cj0SqlTE_0Nw1yuJLw.crl (hash: sgZ/N0T0/GcayJGhNRw1cAje+dxRrhIpA8Sp5unjmXg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3696A10/CBB5DFACC38C11F0A2712CBBDAE4EC9C/EbTv4fMc1cj0SqlTE_0Nw1yuJLw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3696A10/CBB5DFACC38C11F0A2712CBBDAE4EC9C/EbTv4fMc1cj0SqlTE_0Nw1yuJLw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/EbTv4fMc1cj0SqlTE_0Nw1yuJLw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 26 Jul 2026 00:07:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 253 (0xfd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3696A10AF, serialNumber=11B4EFE1F31CD5C8F44AA95313FD0DC35CAE24BC
        Validity
            Not Before: Jul 24 05:15:05 2026 GMT
            Not After : Jul 26 05:15:05 2026 GMT
        Subject: CN=6a62f4da-8e86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:08:2d:ef:da:b4:5e:c3:28:1a:76:f5:5b:e5:
                    79:08:e9:97:97:e1:53:89:5c:bc:3a:e7:1c:a7:03:
                    90:bd:6c:c5:6b:a5:ef:a4:17:d7:58:e3:3e:df:81:
                    4f:06:6d:cf:0d:9f:8f:31:4b:6b:c8:b5:a2:7a:68:
                    71:a6:54:ee:a5:e6:ad:dc:21:82:7b:c2:67:c4:f9:
                    57:e7:35:73:1c:a2:7b:47:d2:79:6a:58:53:e0:2f:
                    51:ca:0e:5f:3d:aa:c8:d6:e2:67:b8:d8:18:de:9b:
                    18:03:4a:59:28:07:12:6e:1c:34:a3:15:5a:65:ff:
                    2a:37:a4:9d:d7:7a:fc:ec:74:a3:33:2b:79:37:82:
                    a1:38:4f:46:48:37:95:cc:3e:9f:04:a6:0f:d3:b6:
                    93:12:74:80:52:c8:a2:f2:57:8e:07:9f:f4:52:15:
                    d5:b1:0c:59:94:ed:22:f0:28:a8:f3:9b:e6:8e:4d:
                    46:b7:f6:ae:9d:72:cd:fd:5d:03:83:55:f3:ea:c5:
                    70:08:87:62:37:cb:6e:dc:72:0b:58:82:56:b4:47:
                    20:36:31:4d:e4:02:a2:f8:f4:62:8c:c6:31:49:7d:
                    35:ea:83:3b:e7:9b:0c:ea:e8:9d:a8:34:df:e9:c0:
                    64:d1:d1:77:3e:2d:a8:58:6e:62:fe:72:99:c2:6b:
                    71:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:64:22:4F:DB:61:10:81:57:F2:69:7B:48:28:6D:D1:AE:8D:0F:18
            X509v3 Authority Key Identifier:
                keyid:11:B4:EF:E1:F3:1C:D5:C8:F4:4A:A9:53:13:FD:0D:C3:5C:AE:24:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3696A10/CBB5DFACC38C11F0A2712CBBDAE4EC9C/EbTv4fMc1cj0SqlTE_0Nw1yuJLw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/EbTv4fMc1cj0SqlTE_0Nw1yuJLw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3696A10/CBB5DFACC38C11F0A2712CBBDAE4EC9C/EbTv4fMc1cj0SqlTE_0Nw1yuJLw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:50:87:c0:d9:54:c3:86:5e:93:bd:1c:35:af:5a:0e:ed:ce:
         de:c7:3b:68:ad:8b:f0:84:44:34:fa:59:d4:ff:6f:05:06:03:
         7c:37:9a:00:ad:62:49:0e:cf:a4:9b:f1:46:e1:6e:e8:27:2e:
         fa:d6:54:31:c7:7f:7e:75:34:81:70:6e:b6:7e:51:54:e3:3b:
         58:1f:5c:0e:59:c1:44:53:a9:18:f5:4e:91:08:14:54:31:0d:
         2d:01:25:ed:00:a5:e8:0a:9e:ff:9f:f3:71:0d:fa:1e:07:44:
         38:1e:ed:74:42:6f:fc:ff:92:78:e4:9e:7e:3d:89:e2:54:2b:
         4f:9a:72:45:36:0e:23:e0:b2:17:58:8b:68:40:96:8f:6f:80:
         c9:26:35:57:91:cc:65:98:ba:32:63:c3:73:d8:ad:ad:70:ed:
         33:81:48:02:70:fc:3c:e9:9a:10:30:4a:64:ec:67:34:58:4b:
         0d:79:4b:de:15:d2:a0:13:67:4c:4e:21:40:4e:2d:11:c6:2f:
         b4:9d:4e:8c:7e:d0:41:5b:25:c6:6a:63:87:73:13:88:42:33:
         e9:95:c2:55:36:86:74:ee:88:44:a4:ac:31:ab:c2:08:63:1d:
         75:98:84:61:72:d7:86:b1:20:1f:da:a6:ba:d7:2b:82:9c:9f:
         09:79:eb:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:47:02 2026 by rpki-client