Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369C738/896BE78AEEA911EA8FDCFB1BF8AEA228/dP2KmbmPfFmCclePXqFPEhiXqVs.mft
File:                     dP2KmbmPfFmCclePXqFPEhiXqVs.mft (raw, json)
Hash identifier:          rfJWdEScl/8vvtWQizgS7sq0Frd4G7DzbkvLH0z8q4M=
Subject key identifier:   25:BE:BE:5E:C3:01:A4:49:5A:7F:23:19:AE:8C:35:18:57:C9:B8:76
Authority key identifier: 74:FD:8A:99:B9:8F:7C:59:82:72:57:8F:5E:A1:4F:12:18:97:A9:5B
Certificate issuer:       /CN=F369C738RI/serialNumber=74FD8A99B98F7C598272578F5EA14F121897A95B
Certificate serial:       0897
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/dP2KmbmPfFmCclePXqFPEhiXqVs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369C738/896BE78AEEA911EA8FDCFB1BF8AEA228/dP2KmbmPfFmCclePXqFPEhiXqVs.mft
Manifest number:          0896
Signing time:             Fri 24 Jul 2026 01:53:51 +0000
Manifest this update:     Fri 24 Jul 2026 01:53:50 +0000
Manifest next update:     Sun 26 Jul 2026 01:53:50 +0000
Files and hashes:         1: dP2KmbmPfFmCclePXqFPEhiXqVs.crl (hash: JVsrk0QTJ3+HTZyzTXhX332PesLAVGtznSAo6BnKYIc=)
                          2: 315816DECF5F11ECA89077C9F1222468.roa (hash: nXuxmOxMY30f7U13vd8vjgc0lhwJby8Cd+gymuJClmU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369C738/896BE78AEEA911EA8FDCFB1BF8AEA228/dP2KmbmPfFmCclePXqFPEhiXqVs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369C738/896BE78AEEA911EA8FDCFB1BF8AEA228/dP2KmbmPfFmCclePXqFPEhiXqVs.mft
                          rsync://rpki.afrinic.net/repository/ripe/dP2KmbmPfFmCclePXqFPEhiXqVs.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 26 Jul 2026 00:45:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2199 (0x897)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369C738RI, serialNumber=74FD8A99B98F7C598272578F5EA14F121897A95B
        Validity
            Not Before: Jul 24 01:53:50 2026 GMT
            Not After : Jul 26 01:53:50 2026 GMT
        Subject: CN=6a62c5af-3fb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:5a:b9:9a:65:05:a2:2f:d6:82:77:14:df:4d:
                    4a:1c:ad:6a:ce:85:c0:d1:af:33:66:1a:5c:c7:20:
                    2d:5a:03:0f:47:e2:16:e5:7c:72:8a:24:c8:ff:76:
                    25:fc:ed:6d:e7:f6:dd:99:1c:22:69:94:18:a8:6b:
                    78:6c:b5:eb:ab:60:73:72:20:88:de:01:4a:af:0b:
                    a2:58:ac:dc:a0:79:c7:88:66:7c:54:4b:91:bd:2f:
                    f2:7e:60:ce:d3:d0:81:cb:db:d4:14:f2:12:08:87:
                    e3:1b:ef:8c:3f:5b:74:f4:93:be:dd:8a:68:0e:96:
                    c2:44:e7:e7:02:37:60:a0:95:92:77:b4:ab:35:15:
                    ca:a5:97:31:03:55:95:65:16:45:61:d1:bd:5f:4e:
                    a9:23:f8:04:54:88:e5:a0:dd:50:6c:aa:9a:7d:73:
                    e5:77:80:87:b4:2c:69:97:ad:24:cd:b7:3d:26:67:
                    e0:44:a3:1b:fb:e7:26:7d:f0:54:46:1a:d7:55:9f:
                    8e:2b:99:be:44:6f:8e:89:54:87:f1:3e:95:fb:3a:
                    53:da:e1:36:0a:93:aa:33:b0:42:10:45:3c:b7:a3:
                    03:86:e2:da:a5:b9:bf:3b:48:eb:12:cb:24:ab:df:
                    c6:2a:b6:af:25:bf:11:30:db:7f:e5:8a:ad:62:0b:
                    55:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:BE:BE:5E:C3:01:A4:49:5A:7F:23:19:AE:8C:35:18:57:C9:B8:76
            X509v3 Authority Key Identifier:
                keyid:74:FD:8A:99:B9:8F:7C:59:82:72:57:8F:5E:A1:4F:12:18:97:A9:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369C738/896BE78AEEA911EA8FDCFB1BF8AEA228/dP2KmbmPfFmCclePXqFPEhiXqVs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/dP2KmbmPfFmCclePXqFPEhiXqVs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369C738/896BE78AEEA911EA8FDCFB1BF8AEA228/dP2KmbmPfFmCclePXqFPEhiXqVs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:c6:2e:23:53:af:5b:f7:ae:63:b5:01:41:55:e9:92:28:7b:
         b1:c4:0c:2a:e8:b8:af:cf:df:af:c5:c4:02:fb:df:2c:82:52:
         a0:07:94:ad:79:50:8b:36:23:8b:fc:96:33:50:8c:16:49:15:
         f8:8a:fd:2c:e0:53:97:97:04:23:11:81:6c:ef:3d:5e:b1:9d:
         e0:a5:18:1b:54:4c:49:c6:01:b2:53:a8:e4:9f:2c:cf:f5:ff:
         22:fa:90:a6:a4:42:57:e7:ab:01:d8:f6:14:fd:61:3e:fd:78:
         2c:96:10:1a:e0:57:ab:cd:65:82:c7:68:c2:1f:71:15:6c:a6:
         14:d8:b4:42:a4:0a:ba:ba:b7:c0:3d:4e:13:1b:39:61:c3:fb:
         af:e6:58:9e:01:8d:33:8e:7c:06:83:4b:96:ff:1e:19:5c:2e:
         42:c5:8d:85:6d:f6:77:a7:06:bc:db:cb:79:d4:58:fe:f4:31:
         1f:c2:53:2d:e1:7f:13:df:bc:f0:38:7f:b3:a5:ac:4e:28:3f:
         b5:0e:8c:ae:6b:eb:3c:1d:4f:42:ba:62:4c:46:93:5a:e8:68:
         ee:90:5a:eb:c8:4d:11:19:df:b1:5b:53:4b:c3:d1:d7:4a:fe:
         4f:67:7a:bd:3d:69:22:70:b5:82:92:8d:87:6d:75:35:d1:37:
         36:b0:db:23
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICCJcwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OUM3MzhSSTExMC8GA1UEBRMoNzRGRDhBOTlCOThGN0M1OTgyNzI1NzhGNUVBMTRG
MTIxODk3QTk1QjAeFw0yNjA3MjQwMTUzNTBaFw0yNjA3MjYwMTUzNTBaMBgxFjAU
BgNVBAMTDTZhNjJjNWFmLTNmYjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC3WrmaZQWiL9aCdxTfTUocrWrOhcDRrzNmGlzHIC1aAw9H4hblfHKKJMj/
diX87W3n9t2ZHCJplBioa3hsteurYHNyIIjeAUqvC6JYrNygeceIZnxUS5G9L/J+
YM7T0IHL29QU8hIIh+Mb74w/W3T0k77dimgOlsJE5+cCN2CglZJ3tKs1FcqllzED
VZVlFkVh0b1fTqkj+ARUiOWg3VBsqpp9c+V3gIe0LGmXrSTNtz0mZ+BEoxv75yZ9
8FRGGtdVn44rmb5Eb46JVIfxPpX7OlPa4TYKk6ozsEIQRTy3owOG4tqlub87SOsS
yySr38Yqtq8lvxEw23/liq1iC1XFAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUJb6+
XsMBpElafyMZrow1GFfJuHYwHwYDVR0jBBgwFoAUdP2KmbmPfFmCclePXqFPEhiX
qVswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjlDNzM4Lzg5NkJFNzhBRUVBOTExRUE4RkRDRkIxQkY4QUVBMjI4L2RQMktt
Ym1QZkZtQ2NsZVBYcUZQRWhpWHFWcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9yaXBl
L2RQMkttYm1QZkZtQ2NsZVBYcUZQRWhpWHFWcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2OUM3MzgvODk2QkU3OEFFRUE5MTFFQThGRENGQjFCRjhBRUEy
MjgvZFAyS21ibVBmRm1DY2xlUFhxRlBFaGlYcVZzLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCPxi4jU69b965jtQFBVemSKHuxxAwq6Liv
z9+vxcQC+98sglKgB5SteVCLNiOL/JYzUIwWSRX4iv0s4FOXlwQjEYFs7z1esZ3g
pRgbVExJxgGyU6jknyzP9f8i+pCmpEJX56sB2PYU/WE+/XgslhAa4FerzWWCx2jC
H3EVbKYU2LRCpAq6urfAPU4TGzlhw/uv5lieAY0zjnwGg0uW/x4ZXC5CxY2FbfZ3
pwa828t51Fj+9DEfwlMt4X8T37zwOH+zpaxOKD+1Doyua+s8HU9CumJMRpNa6Gju
kFrryE0RGd+xW1NLw9HXSv5PZ3q9PWkicLWCko2HbXU10Tc2sNsj
-----END CERTIFICATE-----
Generated at Fri Jul 24 10:39:50 2026 by rpki-client