Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F369C738/896BE78AEEA911EA8FDCFB1BF8AEA228/dP2KmbmPfFmCclePXqFPEhiXqVs.mft
File:                     dP2KmbmPfFmCclePXqFPEhiXqVs.mft (raw, json)
Hash identifier:          N7EqCUHYK5heoxlWy4FiT/OTwCn9hdN3OLtoVDh/2Zw=
Subject key identifier:   5D:0F:62:84:1C:87:DB:E3:40:2C:77:13:A3:99:2A:D0:AE:A0:7B:1A
Authority key identifier: 74:FD:8A:99:B9:8F:7C:59:82:72:57:8F:5E:A1:4F:12:18:97:A9:5B
Certificate issuer:       /CN=F369C738RI/serialNumber=74FD8A99B98F7C598272578F5EA14F121897A95B
Certificate serial:       090C
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/dP2KmbmPfFmCclePXqFPEhiXqVs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369C738/896BE78AEEA911EA8FDCFB1BF8AEA228/dP2KmbmPfFmCclePXqFPEhiXqVs.mft
Manifest number:          090A
Signing time:             Sun 15 Nov 2026 01:53:38 +0000
Manifest this update:     Sun 15 Nov 2026 01:53:37 +0000
Manifest next update:     Tue 17 Nov 2026 01:53:37 +0000
Files and hashes:         1: dP2KmbmPfFmCclePXqFPEhiXqVs.crl (hash: Ce5Ew4znySaOoS3TiL5eOTzMqikhz+Buk/pEtjTjwRw=)
                          2: 85C020368F1311F19E39A4EFCE1D38B0.roa (hash: gyC2sm4kc95dRk/7xGd5hTUBMpQrFeDNPVysCG/CwVs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369C738/896BE78AEEA911EA8FDCFB1BF8AEA228/dP2KmbmPfFmCclePXqFPEhiXqVs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369C738/896BE78AEEA911EA8FDCFB1BF8AEA228/dP2KmbmPfFmCclePXqFPEhiXqVs.mft
                          rsync://rpki.afrinic.net/repository/ripe/dP2KmbmPfFmCclePXqFPEhiXqVs.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 17 Nov 2026 00:45:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2316 (0x90c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369C738RI, serialNumber=74FD8A99B98F7C598272578F5EA14F121897A95B
        Validity
            Not Before: Nov 15 01:53:37 2026 GMT
            Not After : Nov 17 01:53:37 2026 GMT
        Subject: CN=6af910a2-b090
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:7a:38:72:ed:84:10:11:17:ce:ac:ed:70:68:
                    10:51:cb:47:43:1d:e9:6f:7b:25:8b:e0:b4:67:de:
                    c2:cc:22:31:dd:a8:96:68:0d:26:11:d2:0f:84:f0:
                    1e:f7:22:9f:84:c2:17:16:97:51:c1:e3:99:06:6d:
                    b3:a6:95:df:f7:bc:21:8f:27:95:03:7f:48:d6:ee:
                    c7:b5:4e:a9:5a:8c:59:27:39:c2:52:bf:58:1b:ae:
                    07:b9:37:61:85:ba:bb:70:5c:f1:61:b3:3a:e6:c4:
                    35:5c:c4:b3:07:2b:f5:d3:ef:f4:1a:50:10:73:fb:
                    8e:3f:d6:44:8d:8b:a8:bb:9f:67:b8:a2:f0:81:b7:
                    3a:32:19:ac:14:fb:42:60:8a:e9:76:e9:bc:7f:66:
                    1c:ae:cc:6e:4a:d7:75:78:91:1a:00:51:ab:83:ba:
                    bb:79:a3:52:13:ea:9b:b7:3d:2d:62:48:81:c9:6a:
                    92:e5:8e:2b:61:ff:4b:38:17:28:8a:22:9e:5b:2f:
                    bb:13:4e:e6:04:9d:3f:39:ed:14:aa:a9:e0:10:e9:
                    32:83:df:8a:1d:1b:6d:48:c3:49:a3:10:d0:19:86:
                    e0:21:16:3d:89:d8:8f:85:67:a4:37:c7:cb:4a:5f:
                    41:87:42:fc:b7:ca:68:43:87:33:81:49:b0:56:62:
                    34:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:0F:62:84:1C:87:DB:E3:40:2C:77:13:A3:99:2A:D0:AE:A0:7B:1A
            X509v3 Authority Key Identifier:
                keyid:74:FD:8A:99:B9:8F:7C:59:82:72:57:8F:5E:A1:4F:12:18:97:A9:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369C738/896BE78AEEA911EA8FDCFB1BF8AEA228/dP2KmbmPfFmCclePXqFPEhiXqVs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/dP2KmbmPfFmCclePXqFPEhiXqVs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369C738/896BE78AEEA911EA8FDCFB1BF8AEA228/dP2KmbmPfFmCclePXqFPEhiXqVs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:3a:88:4a:68:3a:7c:f2:0b:b5:a3:88:41:22:fc:d1:98:99:
         a1:4a:7f:2a:ea:95:ff:a4:54:de:72:03:21:6b:8f:67:65:78:
         0c:c1:a7:8f:0f:79:9f:2b:5d:3b:e5:19:53:74:ea:3d:5e:0d:
         35:ca:2a:f0:1d:5d:81:72:01:33:47:50:48:f3:67:5c:df:b4:
         71:61:74:e4:e8:d0:57:7c:ff:c1:bf:db:8a:86:b3:25:f1:79:
         23:0a:31:8c:2b:5c:05:a1:9a:2e:78:92:36:50:68:d9:f2:05:
         49:9c:f2:cf:0b:13:0a:8e:3f:65:6a:8a:e0:a4:7c:85:74:6d:
         36:49:5b:66:3a:b8:44:6d:12:a0:e8:14:ad:4d:30:b1:31:7f:
         20:8f:56:62:24:21:cc:34:9e:ae:d1:23:c5:f4:ae:83:27:6e:
         92:ac:57:22:f4:cf:1c:91:59:b3:00:8d:05:86:bc:97:e9:10:
         b6:05:44:2c:e9:35:94:65:51:d0:00:01:0a:0d:8f:98:fb:12:
         b7:72:09:15:ec:1f:d9:30:5a:b6:dc:aa:34:16:96:5f:25:b0:
         9f:5a:89:4a:94:0a:10:98:d3:c1:b4:1c:d8:24:52:bc:b4:57:
         b5:fe:1c:e3:d6:38:36:49:ef:5c:cf:30:b4:02:fb:07:c1:89:
         f8:15:88:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----