Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3696E5F/3DA3D320189711ED8C936BD2F1222468/U3XPTKFkOwjDQb2nnYvhBb3DxIs.mft
File:                     U3XPTKFkOwjDQb2nnYvhBb3DxIs.mft (raw, json)
Hash identifier:          PKj3/HArGI3ObEXTBSEG+5deWTXOh7O2uRjrsfmTNLc=
Subject key identifier:   D8:23:9F:DE:58:89:BA:57:29:6F:70:A1:0F:6E:E5:0D:56:07:E0:0A
Authority key identifier: 53:75:CF:4C:A1:64:3B:08:C3:41:BD:A7:9D:8B:E1:05:BD:C3:C4:8B
Certificate issuer:       /CN=F3696E5FAF/serialNumber=5375CF4CA1643B08C341BDA79D8BE105BDC3C48B
Certificate serial:       049B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/U3XPTKFkOwjDQb2nnYvhBb3DxIs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/3DA3D320189711ED8C936BD2F1222468/U3XPTKFkOwjDQb2nnYvhBb3DxIs.mft
Manifest number:          0474
Signing time:             Fri 04 Jul 2025 03:08:57 +0000
Manifest this update:     Fri 04 Jul 2025 03:08:56 +0000
Manifest next update:     Sun 06 Jul 2025 03:08:56 +0000
Files and hashes:         1: U3XPTKFkOwjDQb2nnYvhBb3DxIs.crl (hash: Lx1M8lgCS34CtSsUCHFGshZtF6jcJxr8HWN/gqMI4Z8=)
                          2: 78866038732811EEA03F81784AD9E6FC.roa (hash: O0OZfBN76S8f3hTfdG+0rk9lnBRwZ9klNP8Bx/GC6so=)
                          3: 813EC5F0695311EE900FB3784AD9E6FC.roa (hash: rYBEnWZCTOIvjNGLGQGfrPSdlM64KIqO/WOBlKJR1ws=)
                          4: C21B651267DF11EE943796654AD9E6FC.roa (hash: JoM2f/YVd2Hwzfl86NLf3bbIUBYiG9ZjBtv9OLitU2w=)
                          5: 7B35EBBA695411EEB224927B4AD9E6FC.roa (hash: r8cnTi4WD1GjOQcOwVoRpZjnoq0bPsLPzmynrFSOpPo=)
                          6: C6BBB49ABFC411EE97321BB8775412E6.roa (hash: wyvaynJwkSLv01hae/RpXrp4rCpEhEK2mxTmM3AnUTs=)
                          7: 4EF8CD7C732911EE8290F77A4AD9E6FC.roa (hash: Ab5LW5eZEWzDRhloF/Vfs8/Pj/xw53grKIBtL6INQeg=)
                          8: 854B5332695511EEBE8EB37E4AD9E6FC.roa (hash: qMpIZlL1JG7Cxt6AalljPSNuG/WpcR3cp/px8PtSZDw=)
                          9: 972FAAC0695611EE9ED10D824AD9E6FC.roa (hash: 7QDMQnna185RUd3VbS6kFQRmBH7dnJ7b1efyAdSvaTk=)
                          10: BBD7FCD2732511EE8177F96F4AD9E6FC.roa (hash: ETbkRfWBiQKQIv/HBotMdHRy2JjPbPpo2ZGYcvIRbHg=)
                          11: 3450E8747BC511EF861CA6A9762E951A.roa (hash: S8B80PbkOpew+sJ621u11GoErvJntZrGDtgsuOUu6FA=)
                          12: C8047534695311EE9A1867794AD9E6FC.roa (hash: 3Lf+PtwSVLbtRykdAjgoQEOCQEsNIbgoj+2JSnVr1pk=)
                          13: 4D8233AC695611EEA9A654814AD9E6FC.roa (hash: 5shbJVP+OJddMqwr7ZqQz943Swt127SKDu+xzt2IixM=)
                          14: B91DC424695511EEB0AD5F7F4AD9E6FC.roa (hash: xF9Bk5Mz40aREsF1B2crStPFc7HilkjnEG2UlUsQDKU=)
                          15: 014A3A3E732911EE8FCD3A7A4AD9E6FC.roa (hash: DuUgtMruRVjqyq3tPl9TltQGJha6DDJdmFRtcJbyf+0=)
                          16: 170B3782695211EEA18D28734AD9E6FC.roa (hash: SAlr6R26INjndGn3mYtHQ4fynlkYM6sWpDli6VJl/0c=)
                          17: EA41EC7093D411EE8FEF2613D25BE465.roa (hash: mgAUVvuqZ9BEj+xQEUbj7eA9ZXfOP6eHELa4G3Wf8pg=)
                          18: 03F77036732811EEB870F2764AD9E6FC.roa (hash: dpDcr6I3CyS+CZ5oduKBVVacg+OZWXhwHi+rlcWvB+k=)
                          19: 18FDE308695411EEA213537A4AD9E6FC.roa (hash: V8odt/rDJ3OY5lY//c3mo3wITWeSjVt8toR6RRQBTto=)
                          20: 55C5598E732611EEB932E0714AD9E6FC.roa (hash: UYbbzhlk9KgbwGKtzI9mBTFfbCZIlddNCw7o5BaYOTw=)
                          21: 1B3E5BD6BFC411EEB815F6B6775412E6.roa (hash: /vMD2qyC5dIRjTseOPjuPT3UDFh3JnMal4OEIVBXwNA=)
                          22: FA863D0C695411EEB38C227D4AD9E6FC.roa (hash: KWNdkRrOLJM0mFFXSv0+LOkZ0cLjkGQ0cmkV6KDH3Fg=)
                          23: AEA509EA695411EEB0052B7C4AD9E6FC.roa (hash: XScV3QWAzuM2DYSCzJ4FRDjSF03CmS13+qopxF3W36M=)
                          24: F553722E695311EEA258F7794AD9E6FC.roa (hash: UIZx8a7F87YQDG8kMwP4V1uCvXx959AYMWy9I2LGPT4=)
                          25: 1D7A7458BFC311EE87E957B5775412E6.roa (hash: J6x3YduO7NoRYCnR3Wx+jPh/ZgFTIi54OWjHk1rIktE=)
                          26: CAADEE44732811EE8F7D4C794AD9E6FC.roa (hash: n+gRBiM7ZIC2gV0nUjF3LshJXh3uqCbjGwvZ0X8j1XA=)
                          27: 19101AA867DF11EE812DA3634AD9E6FC.roa (hash: 4JOsUwrnmGuB0KN0k80QhIMQJpbGvmUfXPMXU6YnDiE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/3DA3D320189711ED8C936BD2F1222468/U3XPTKFkOwjDQb2nnYvhBb3DxIs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/3DA3D320189711ED8C936BD2F1222468/U3XPTKFkOwjDQb2nnYvhBb3DxIs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/U3XPTKFkOwjDQb2nnYvhBb3DxIs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 06 Jul 2025 03:08:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1179 (0x49b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3696E5FAF, serialNumber=5375CF4CA1643B08C341BDA79D8BE105BDC3C48B
        Validity
            Not Before: Jul  4 03:08:56 2025 GMT
            Not After : Jul  6 03:08:56 2025 GMT
        Subject: CN=686745c9-f10a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:dd:f9:b6:ca:6b:05:64:ab:14:4b:34:30:21:
                    c7:15:08:55:27:a2:12:e6:12:2d:f1:6d:68:5c:c6:
                    c6:9a:2d:8f:37:20:93:08:e9:cb:c7:62:da:28:4f:
                    da:62:8a:c0:01:29:bc:52:85:e2:3d:65:04:80:4f:
                    52:96:5b:c9:27:1c:47:9b:19:6f:2c:41:6b:93:d7:
                    a7:0b:6e:72:17:48:c9:a9:9d:c1:6a:ec:1c:36:1a:
                    7b:e4:e0:19:42:91:93:a2:a1:02:48:32:73:57:07:
                    8b:52:6d:8a:19:02:31:29:15:26:49:b8:e7:58:97:
                    27:04:cd:2e:3d:28:ff:96:80:69:4d:4b:6c:37:59:
                    36:82:cc:48:18:7d:ba:dc:64:88:98:c0:74:44:08:
                    19:bd:91:99:5d:2e:7e:f4:56:05:01:ae:15:c2:1c:
                    78:2f:de:c3:d4:68:e7:bb:8a:96:0b:10:bc:8a:c5:
                    b0:6b:36:9f:98:e4:8e:ff:71:86:a9:c4:13:ec:58:
                    d3:d3:07:0a:ad:79:ba:24:29:33:43:7d:db:18:73:
                    81:74:91:15:83:58:cf:53:a1:a9:b0:13:23:64:b5:
                    ba:16:e8:89:9a:e6:94:e5:ac:52:c6:8e:8e:d7:8f:
                    e9:3f:34:45:b8:53:8e:87:7c:10:b9:07:3e:f7:b5:
                    ce:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:23:9F:DE:58:89:BA:57:29:6F:70:A1:0F:6E:E5:0D:56:07:E0:0A
            X509v3 Authority Key Identifier:
                keyid:53:75:CF:4C:A1:64:3B:08:C3:41:BD:A7:9D:8B:E1:05:BD:C3:C4:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/3DA3D320189711ED8C936BD2F1222468/U3XPTKFkOwjDQb2nnYvhBb3DxIs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/U3XPTKFkOwjDQb2nnYvhBb3DxIs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/3DA3D320189711ED8C936BD2F1222468/U3XPTKFkOwjDQb2nnYvhBb3DxIs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:e8:eb:de:a5:54:71:6d:98:ce:6d:f7:84:ec:e2:20:33:58:
         a5:ff:2d:d5:c9:a1:1b:01:72:b3:0f:23:4d:74:24:f1:9d:bf:
         7b:ad:42:85:18:bb:fb:be:cc:66:98:94:dd:a3:4e:24:5b:cc:
         a0:7d:12:d6:9b:6d:34:ca:b6:f7:64:fd:4f:9f:89:a0:51:45:
         10:e7:c7:b1:47:86:b9:77:ac:08:3b:07:d1:05:fd:0b:e6:e3:
         88:03:7f:0d:0b:75:68:77:46:fb:43:b8:4d:3c:4f:5d:12:9e:
         c3:27:17:33:f7:6e:9b:75:fc:b2:e9:0a:c6:fa:f5:25:b2:51:
         2f:3a:77:66:5c:4b:c3:04:1a:d8:3b:d0:d5:56:55:2a:4c:d7:
         6e:ee:52:2a:c6:cd:2d:20:a3:43:7b:f9:f3:d7:da:1f:a4:5b:
         61:aa:b3:fe:ca:63:72:12:dc:94:f0:c6:f9:fb:dc:76:e9:d6:
         89:24:f6:6a:a6:ac:5b:7d:57:11:82:fc:f4:19:3b:e6:aa:82:
         49:6a:17:4f:d1:d3:a8:a3:47:99:45:83:e6:91:aa:ab:cd:de:
         ff:2b:ed:f4:6f:84:48:0b:ce:99:5b:3e:4b:3e:43:f3:62:1d:
         b4:00:91:2b:2e:bd:33:51:22:01:dd:20:5a:cb:3d:c6:3a:7f:
         5a:92:24:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 17:38:46 2025 by rpki-client