Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F369C738/896BE78AEEA911EA8FDCFB1BF8AEA228/dP2KmbmPfFmCclePXqFPEhiXqVs.mft
File:                     dP2KmbmPfFmCclePXqFPEhiXqVs.mft (raw, json)
Hash identifier:          hO80KnSowj94FRjeuSw6SrZR2X6r9pqFrpnL+fzLrcA=
Subject key identifier:   3D:05:4D:92:C9:FB:D5:F3:BC:30:8A:15:D0:F4:AE:11:69:D6:0C:A7
Authority key identifier: 74:FD:8A:99:B9:8F:7C:59:82:72:57:8F:5E:A1:4F:12:18:97:A9:5B
Certificate issuer:       /CN=F369C738RI/serialNumber=74FD8A99B98F7C598272578F5EA14F121897A95B
Certificate serial:       08DB
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/dP2KmbmPfFmCclePXqFPEhiXqVs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369C738/896BE78AEEA911EA8FDCFB1BF8AEA228/dP2KmbmPfFmCclePXqFPEhiXqVs.mft
Manifest number:          08D9
Signing time:             Sun 27 Sep 2026 01:54:10 +0000
Manifest this update:     Sun 27 Sep 2026 01:54:09 +0000
Manifest next update:     Tue 29 Sep 2026 01:54:09 +0000
Files and hashes:         1: dP2KmbmPfFmCclePXqFPEhiXqVs.crl (hash: O1Ts+5tgkW+PElfxCgHolKXtIe2ock1uuFW+xtWOriI=)
                          2: 85C020368F1311F19E39A4EFCE1D38B0.roa (hash: gyC2sm4kc95dRk/7xGd5hTUBMpQrFeDNPVysCG/CwVs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369C738/896BE78AEEA911EA8FDCFB1BF8AEA228/dP2KmbmPfFmCclePXqFPEhiXqVs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369C738/896BE78AEEA911EA8FDCFB1BF8AEA228/dP2KmbmPfFmCclePXqFPEhiXqVs.mft
                          rsync://rpki.afrinic.net/repository/ripe/dP2KmbmPfFmCclePXqFPEhiXqVs.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Sep 2026 00:45:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2267 (0x8db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369C738RI, serialNumber=74FD8A99B98F7C598272578F5EA14F121897A95B
        Validity
            Not Before: Sep 27 01:54:09 2026 GMT
            Not After : Sep 29 01:54:09 2026 GMT
        Subject: CN=6ab87742-fc45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:34:3e:19:92:d5:99:92:c5:4c:71:e5:4c:fe:
                    48:d1:16:f2:29:3c:cb:3d:4c:f9:fb:52:ca:4b:1c:
                    8d:7d:bb:52:bf:79:f6:67:e7:78:41:18:61:5c:fb:
                    db:55:a3:fb:65:b7:a8:de:7b:7b:7c:e9:d1:cb:7d:
                    e3:97:3b:f9:9a:91:a7:f7:07:3a:02:4c:87:9e:e2:
                    40:88:1c:de:ab:1c:b9:1b:44:c9:23:c7:34:f3:79:
                    21:68:45:4a:3d:6e:76:10:42:06:92:46:b1:64:de:
                    48:ab:7e:2d:be:74:a4:dd:0f:39:2b:ec:8d:0d:1c:
                    a2:42:c8:7c:57:7a:69:61:01:e2:b2:0a:8e:82:ee:
                    fd:e9:dd:dc:fb:6e:2c:0d:78:dc:ad:b2:b1:43:78:
                    bc:d9:e9:9b:ab:28:45:cc:10:ca:6b:ec:f7:e3:4c:
                    ea:52:ec:ec:65:e8:7d:b7:af:00:b9:57:a5:72:e7:
                    b0:6e:ca:a0:cb:92:45:2b:cc:73:cb:74:5b:a0:31:
                    88:73:7d:4e:ce:29:45:26:3e:69:eb:21:58:83:35:
                    fe:2b:57:f4:b1:4a:3e:df:7e:02:0e:c3:e4:e4:13:
                    00:24:71:91:ed:fd:bd:8f:46:81:fd:d9:80:cc:66:
                    03:96:8d:74:5f:82:11:45:1b:1a:a9:54:69:34:19:
                    f6:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:05:4D:92:C9:FB:D5:F3:BC:30:8A:15:D0:F4:AE:11:69:D6:0C:A7
            X509v3 Authority Key Identifier:
                keyid:74:FD:8A:99:B9:8F:7C:59:82:72:57:8F:5E:A1:4F:12:18:97:A9:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369C738/896BE78AEEA911EA8FDCFB1BF8AEA228/dP2KmbmPfFmCclePXqFPEhiXqVs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/dP2KmbmPfFmCclePXqFPEhiXqVs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369C738/896BE78AEEA911EA8FDCFB1BF8AEA228/dP2KmbmPfFmCclePXqFPEhiXqVs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:a5:fd:38:b5:4c:69:ee:f6:5e:69:70:22:da:93:cb:b2:8f:
         fb:b9:ff:d7:40:b0:de:90:fc:e3:31:21:17:26:13:f4:2f:88:
         2d:3e:db:e9:83:d2:86:b5:fc:23:6e:89:f7:1f:1a:0d:7e:a0:
         e7:54:7e:b5:6d:0c:f0:4b:5b:6b:e7:b1:a8:24:15:de:33:e7:
         1a:e0:b5:a2:d8:ee:67:ba:46:ab:ea:e2:ca:20:22:30:19:dd:
         f6:2d:70:07:02:30:d6:ec:e5:ef:b1:31:34:b5:f7:73:17:3b:
         a2:0c:24:c4:4d:3f:39:a0:3c:2c:99:31:62:61:a4:3b:b7:08:
         09:b5:b5:29:60:57:0e:61:d2:28:31:92:88:30:92:f7:2e:d8:
         6e:0b:01:0c:2d:c4:17:9f:7b:9d:a5:41:33:f1:4d:4b:3d:35:
         3f:6b:8b:16:f1:81:f4:e7:70:23:5c:c4:13:bb:f4:bd:ea:bc:
         b6:64:ca:a8:d5:fb:06:e0:b5:17:74:d6:fb:55:48:fb:da:a8:
         5e:37:e7:03:36:d4:be:0a:50:cf:b1:22:53:01:cd:1a:7a:58:
         8c:19:cb:2b:90:87:db:f4:bf:0c:f2:8e:00:5a:7c:c8:43:93:
         c3:0a:46:2a:09:98:ff:d5:63:9c:aa:a4:7b:e7:16:c9:4d:83:
         56:90:8f:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----