Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3699B8E/0E47380CB12311E59144614AF8AEA228/ip-GBQtKTk6SXeb_2SrDSDM-BxI.mft
File:                     ip-GBQtKTk6SXeb_2SrDSDM-BxI.mft (raw, json)
Hash identifier:          rXBWkgkRbEzyuCcnyH34NKWIdFNk/4on6nt601vJHUE=
Subject key identifier:   DB:96:42:7D:EC:9F:87:1D:F8:E6:5B:1A:75:D2:39:4A:DC:5F:14:4C
Authority key identifier: 8A:9F:86:05:0B:4A:4E:4E:92:5D:E6:FF:D9:2A:C3:48:33:3E:07:12
Certificate issuer:       /CN=F3699B8EAR/serialNumber=8A9F86050B4A4E4E925DE6FFD92AC348333E0712
Certificate serial:       0E1B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/ip-GBQtKTk6SXeb_2SrDSDM-BxI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/0E47380CB12311E59144614AF8AEA228/ip-GBQtKTk6SXeb_2SrDSDM-BxI.mft
Manifest number:          0E11
Signing time:             Sat 23 Aug 2025 01:01:14 +0000
Manifest this update:     Sat 23 Aug 2025 01:01:13 +0000
Manifest next update:     Mon 25 Aug 2025 01:01:13 +0000
Files and hashes:         1: ip-GBQtKTk6SXeb_2SrDSDM-BxI.crl (hash: O5+rUp8hfPoQX80ek7To4ox3Nj7eIujmbP9kteMtHWs=)
                          2: 8378B942986E11EBA9B2860AF8AEA228.roa (hash: DCXxXlW0spouErSs20DWzGFXGGBNaPXmr93oX+0glto=)
                          3: 90FDB810980F11EBAB14840FF8AEA228.roa (hash: ds3qrAkDtscjN+f/zFO0WydLzwA1BWtOcz3cojiECQw=)
                          4: 256DF7EC042E11EB8295AC11F8AEA228.roa (hash: oTPzm4i8uNZ00YlCZDea9uUazbu6kMoUCNcJkTTMdGU=)
                          5: B13DE26C980F11EBBA26A90FF8AEA228.roa (hash: yCbUwKaqaW0f/0Vl+tcwN9G6XJ8wrDKMmp+woAIv4Rg=)
                          6: 86F1AB563B6911EEA5032D7A4AD9E6FC.roa (hash: tXTkl36K5XLn7WgTr9rni780MBAg7Xu71NqmtnAIntU=)
                          7: 3FEDB4D43B6911EEA1EC28794AD9E6FC.roa (hash: Urr1+RPeSWBQ633dZAK+HE5qMEPCK2i7hu69WdCyFmE=)
                          8: 54554C04042E11EB814EE311F8AEA228.roa (hash: onUIXvOiTLaHtKeCxm3b6uqCM95dsnBo0FQxUaZDWI4=)
                          9: 159996B2082511ED8BA38C86F1222468.roa (hash: EKcGWQb8zxFfpKmxxPcqFEC27AcHuQOygLKxgR7xr7c=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/0E47380CB12311E59144614AF8AEA228/ip-GBQtKTk6SXeb_2SrDSDM-BxI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/0E47380CB12311E59144614AF8AEA228/ip-GBQtKTk6SXeb_2SrDSDM-BxI.mft
                          rsync://rpki.afrinic.net/repository/arin/ip-GBQtKTk6SXeb_2SrDSDM-BxI.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Aug 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3611 (0xe1b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3699B8EAR, serialNumber=8A9F86050B4A4E4E925DE6FFD92AC348333E0712
        Validity
            Not Before: Aug 23 01:01:13 2025 GMT
            Not After : Aug 25 01:01:13 2025 GMT
        Subject: CN=68a912da-32de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:3f:ae:47:da:9b:97:b4:e6:c0:da:e4:be:f1:
                    74:07:5e:89:f6:64:86:75:ff:3d:94:84:1b:35:a6:
                    4a:8e:1e:5f:6b:bd:ae:0e:dd:f0:dd:67:88:a0:5d:
                    ac:7b:4f:47:1c:64:d2:6c:fd:d2:0d:ce:91:25:d2:
                    80:7a:94:61:61:fa:c5:e7:47:e6:0a:52:b4:e0:36:
                    4c:de:0c:f9:3a:a6:94:1e:39:a3:e1:eb:72:1a:1d:
                    20:f2:d4:9d:41:49:81:f8:7b:5a:b8:8e:6a:82:59:
                    e3:3e:ef:67:8a:6d:28:16:d9:11:b2:91:c1:22:9d:
                    45:20:bb:96:79:05:f9:73:7c:a3:52:34:d4:1f:02:
                    83:39:a1:60:17:e4:b3:73:56:e8:29:20:ed:8b:6e:
                    99:07:cc:1d:e2:b6:ac:59:f5:00:96:b6:5e:52:4c:
                    d7:92:44:dd:78:0e:97:8e:ad:76:cf:94:01:63:b2:
                    03:c4:87:3b:9c:af:f8:e2:de:90:7e:d8:f1:3d:ae:
                    51:d3:58:7f:15:9e:cd:b0:cb:a7:c9:11:4b:38:d9:
                    76:d8:ef:a0:11:a5:08:62:1d:01:3a:86:ed:57:4b:
                    40:40:fa:12:39:ce:4d:5a:aa:8a:d1:fc:ab:e0:6d:
                    c4:c7:74:be:14:b4:41:a9:2d:8c:cd:ab:21:bc:ce:
                    3a:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:96:42:7D:EC:9F:87:1D:F8:E6:5B:1A:75:D2:39:4A:DC:5F:14:4C
            X509v3 Authority Key Identifier:
                keyid:8A:9F:86:05:0B:4A:4E:4E:92:5D:E6:FF:D9:2A:C3:48:33:3E:07:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/0E47380CB12311E59144614AF8AEA228/ip-GBQtKTk6SXeb_2SrDSDM-BxI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/ip-GBQtKTk6SXeb_2SrDSDM-BxI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/0E47380CB12311E59144614AF8AEA228/ip-GBQtKTk6SXeb_2SrDSDM-BxI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:b5:0f:1b:df:ee:37:48:48:01:8b:45:41:3c:bb:57:63:e3:
         72:8f:af:6b:f8:e0:ec:d4:0c:98:a4:a5:84:65:8d:42:1d:4e:
         69:0b:a6:de:e2:0a:e1:18:40:5d:e9:34:00:28:92:e8:4d:22:
         23:84:d9:7c:5c:f7:fe:75:e2:76:bc:ba:3e:5a:35:0b:3e:39:
         10:81:b7:dd:20:de:56:c6:17:1a:f3:31:fb:4c:57:f5:02:fd:
         e5:74:ae:eb:5a:7a:a3:86:82:6b:01:fb:5c:90:b5:cd:f9:11:
         6b:77:a9:c2:8a:73:0e:42:99:05:de:20:f3:d2:48:56:d5:31:
         66:19:a8:ba:89:96:67:92:d6:98:95:61:bb:e8:f6:20:51:c9:
         d6:65:0b:a8:d9:f6:e4:d9:e8:df:fb:b6:39:37:21:6d:31:b9:
         ee:e5:9d:e0:60:cf:8b:88:fc:9d:0e:a7:07:b0:49:d3:3a:f4:
         a9:4f:ce:5d:3a:46:60:1f:e7:13:4a:a9:fe:a6:83:f7:67:d1:
         d7:d7:6a:64:57:36:cb:18:ec:42:62:d8:77:03:ff:ee:47:4c:
         33:e5:2d:47:63:fa:3e:bf:73:9f:34:5c:7a:82:3d:c1:6b:1d:
         1f:15:1d:78:fe:ec:fa:cf:05:78:20:60:b8:d1:5a:b6:6f:c9:
         c9:e2:ee:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:07:08 2025 by rpki-client