Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.mft
File:                     9Iq-0-yjCOsi4bWiQoTP4eAyz9I.mft (raw, json)
Hash identifier:          luB3eFWHXCV+70x7bkHj66BAlSBbBQzUpZaW2qAhp7A=
Subject key identifier:   08:E7:55:03:73:B7:FE:40:71:17:3C:AB:A1:05:B7:A4:E0:0B:55:3A
Authority key identifier: F4:8A:BE:D3:EC:A3:08:EB:22:E1:B5:A2:42:84:CF:E1:E0:32:CF:D2
Certificate issuer:       /CN=F36A991DRI/serialNumber=F48ABED3ECA308EB22E1B5A24284CFE1E032CFD2
Certificate serial:       08AC
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.mft
Manifest number:          08A6
Signing time:             Wed 23 Sep 2026 01:56:39 +0000
Manifest this update:     Wed 23 Sep 2026 01:56:39 +0000
Manifest next update:     Fri 25 Sep 2026 01:56:39 +0000
Files and hashes:         1: 9Iq-0-yjCOsi4bWiQoTP4eAyz9I.crl (hash: 8MWFaYgydttcaFMCON3ethg9QNNvQ3eh2DIjSsyQHTs=)
                          2: B3F3B298BD5D11F08B10CDAADAE4EC9C.roa (hash: jybNV3DuqyII4QJXbnrYt3g+0EtzaVGNvEdcE78t6os=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.mft
                          rsync://rpki.afrinic.net/repository/ripe/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 25 Sep 2026 00:45:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2220 (0x8ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A991DRI, serialNumber=F48ABED3ECA308EB22E1B5A24284CFE1E032CFD2
        Validity
            Not Before: Sep 23 01:56:39 2026 GMT
            Not After : Sep 25 01:56:39 2026 GMT
        Subject: CN=6ab331d7-1049
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:30:f2:95:b5:92:88:78:6b:08:28:17:02:a9:
                    ed:cf:e5:74:b3:be:ee:2e:07:60:82:2d:d8:48:9e:
                    5b:e5:33:6e:8c:48:64:da:64:1b:f0:f0:f2:5c:af:
                    23:be:8a:7d:0b:e9:fd:10:ee:c5:4e:1b:ed:12:75:
                    7b:53:2a:bb:46:e1:76:fe:64:6e:4d:8e:fa:c6:d2:
                    e9:14:ea:4c:c9:64:d0:7f:6b:95:9a:56:2e:11:d1:
                    19:af:07:ae:ba:80:46:e3:15:c3:81:a3:9f:56:1e:
                    c7:07:c4:e0:97:77:29:ff:60:bc:47:66:d1:ee:96:
                    ec:b7:eb:30:23:2e:11:50:73:0b:70:d8:0f:af:22:
                    cb:00:fb:2a:9f:55:37:97:e3:cb:de:b9:fe:3a:c7:
                    77:6d:9a:82:6c:04:3b:c7:3d:1b:3f:83:04:0b:ca:
                    81:95:09:87:ec:97:28:1f:55:48:ce:35:af:a2:fb:
                    19:ea:bc:88:f1:25:5e:14:29:d9:b8:8b:53:ef:00:
                    5d:29:64:1c:a7:37:d0:2f:a1:ad:7f:74:c3:c1:c2:
                    dc:9a:fb:99:2f:b5:22:91:da:ad:fe:1f:c5:f9:8d:
                    b0:3d:c5:e7:f4:02:eb:5b:65:13:8c:1a:13:76:95:
                    41:51:ec:7f:62:fb:90:67:d0:f1:a3:44:dc:32:8d:
                    f1:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:E7:55:03:73:B7:FE:40:71:17:3C:AB:A1:05:B7:A4:E0:0B:55:3A
            X509v3 Authority Key Identifier:
                keyid:F4:8A:BE:D3:EC:A3:08:EB:22:E1:B5:A2:42:84:CF:E1:E0:32:CF:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:63:be:28:53:1d:c5:ed:94:f6:04:17:54:08:79:0a:c2:19:
         b7:7c:54:c7:35:a3:8a:78:8b:4a:0e:9f:bf:75:21:3b:8d:86:
         53:8e:d2:85:fb:7f:be:b7:f2:68:01:18:ea:ed:fa:66:09:f8:
         d7:1d:bf:83:24:63:40:1d:7a:0b:e7:37:35:c1:98:5f:00:d5:
         af:ab:6a:b3:b9:8f:86:67:65:77:bb:f8:18:38:49:df:a7:a2:
         51:bf:a5:4e:29:24:bd:f8:4d:71:12:51:8c:88:0f:95:f2:d3:
         9b:a0:5e:c0:c9:a5:41:cb:73:79:98:e2:a4:44:02:14:d9:9e:
         8b:a5:85:37:6a:d3:df:f7:47:18:f3:61:9c:3c:ed:4d:80:b6:
         18:08:4b:a3:82:28:93:81:89:c1:f2:e2:e2:61:19:5c:8d:42:
         28:5e:84:1c:42:9b:48:de:8c:89:f6:6e:bc:37:33:13:3a:bc:
         b7:cc:a7:ee:96:31:61:87:93:61:d4:9c:99:37:bd:0c:b7:a1:
         bd:e3:39:0d:a7:d7:56:70:cc:91:22:b6:c6:63:be:f6:e2:59:
         d3:dc:74:43:05:32:cb:49:3b:fc:e6:6a:d3:41:b3:1e:23:1d:
         f4:1f:f2:2b:a9:ab:71:d6:3b:f7:fb:c7:8d:fc:b6:ad:80:42:
         81:25:0f:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----