Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B5EE7/ED7066526B9011F0819CC681DAE4EC9C/sOuFTcDYmjIzySVR0W0U1DjPVR8.mft
File:                     sOuFTcDYmjIzySVR0W0U1DjPVR8.mft (raw, json)
Hash identifier:          4GeOERabgWXQo8iQFiZGSgZBddap5JH+Aeovf+R7kEM=
Subject key identifier:   B8:1B:9E:C4:C3:8E:19:08:4C:2B:8D:0A:75:16:63:72:B3:02:51:18
Authority key identifier: B0:EB:85:4D:C0:D8:9A:32:33:C9:25:51:D1:6D:14:D4:38:CF:55:1F
Certificate issuer:       /CN=F36B5EE7RI/serialNumber=B0EB854DC0D89A3233C92551D16D14D438CF551F
Certificate serial:       F8
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/sOuFTcDYmjIzySVR0W0U1DjPVR8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B5EE7/ED7066526B9011F0819CC681DAE4EC9C/sOuFTcDYmjIzySVR0W0U1DjPVR8.mft
Manifest number:          F7
Signing time:             Thu 26 Mar 2026 06:03:53 +0000
Manifest this update:     Thu 26 Mar 2026 06:03:52 +0000
Manifest next update:     Sat 28 Mar 2026 06:03:52 +0000
Files and hashes:         1: sOuFTcDYmjIzySVR0W0U1DjPVR8.crl (hash: NBuJWRssn5hxjAJsruQRZN2Skj+9h6huqIFBYoNJQWo=)
                          2: 2CED30A26B9211F0B55B648ADAE4EC9C.roa (hash: 8FK7+AonagW3DFNpcFJhHjfYGIQ/QIt42K+ERVsqWds=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B5EE7/ED7066526B9011F0819CC681DAE4EC9C/sOuFTcDYmjIzySVR0W0U1DjPVR8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B5EE7/ED7066526B9011F0819CC681DAE4EC9C/sOuFTcDYmjIzySVR0W0U1DjPVR8.mft
                          rsync://rpki.afrinic.net/repository/ripe/sOuFTcDYmjIzySVR0W0U1DjPVR8.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:45:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 248 (0xf8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B5EE7RI, serialNumber=B0EB854DC0D89A3233C92551D16D14D438CF551F
        Validity
            Not Before: Mar 26 06:03:52 2026 GMT
            Not After : Mar 28 06:03:52 2026 GMT
        Subject: CN=69c4cc49-fd1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:36:39:c0:ef:d2:a1:cf:97:4b:6f:6b:d7:9c:
                    b1:8b:04:0c:31:a2:9d:4f:3c:c5:3d:05:53:00:bf:
                    d4:8c:22:6d:67:13:c2:21:f3:09:c4:dc:92:6e:89:
                    69:06:cd:84:35:f9:1c:35:39:56:9e:48:67:66:71:
                    05:e9:2e:b1:5f:8c:9f:13:0e:9a:7b:94:e9:3e:13:
                    d7:cf:cb:1e:ea:3b:80:88:f8:1f:b4:a7:fe:5c:1d:
                    6b:27:26:30:f1:76:a1:32:43:75:c1:15:01:b0:72:
                    25:91:e7:11:32:60:e8:81:ef:ec:61:17:2c:6a:22:
                    58:20:52:a8:1f:82:00:c2:c7:de:61:42:80:af:e7:
                    1e:5a:ae:e3:c4:23:fc:e6:25:bb:3c:b5:58:50:3c:
                    5f:bc:80:7e:79:f7:04:6d:5b:b1:99:5d:8a:5a:ba:
                    b0:15:10:3c:8d:da:5b:cf:dd:ff:50:33:d2:bc:96:
                    aa:60:ef:8c:58:c0:a6:fb:6f:f2:6b:08:2c:8e:7d:
                    93:c6:0e:60:7b:d6:31:9a:59:d4:15:8a:1a:71:2d:
                    d5:d7:1d:71:26:f5:fb:e0:60:4a:18:47:bf:da:73:
                    a4:c2:b7:ce:a3:83:d3:95:27:10:53:d6:8f:cf:ae:
                    a1:c4:97:1d:41:ed:83:38:93:f7:71:b7:97:8e:76:
                    08:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:1B:9E:C4:C3:8E:19:08:4C:2B:8D:0A:75:16:63:72:B3:02:51:18
            X509v3 Authority Key Identifier:
                keyid:B0:EB:85:4D:C0:D8:9A:32:33:C9:25:51:D1:6D:14:D4:38:CF:55:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B5EE7/ED7066526B9011F0819CC681DAE4EC9C/sOuFTcDYmjIzySVR0W0U1DjPVR8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/sOuFTcDYmjIzySVR0W0U1DjPVR8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B5EE7/ED7066526B9011F0819CC681DAE4EC9C/sOuFTcDYmjIzySVR0W0U1DjPVR8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:17:06:b8:e4:3e:71:1e:88:0a:f7:c9:b1:22:ec:e4:3e:b6:
         d4:99:33:28:65:e7:83:f6:7d:6c:66:97:bc:db:1f:9a:bd:53:
         f6:a3:89:98:5e:c9:81:1e:88:2c:11:58:2c:38:2a:b2:df:f3:
         38:93:7e:5e:61:c5:40:fa:cb:6d:04:54:4b:1c:e8:10:4d:d2:
         42:2a:1b:e3:c6:f9:ae:20:ff:5c:34:b1:ab:91:e7:52:b8:d6:
         9f:51:ce:1d:a2:b7:c7:3e:68:0b:d3:b1:69:fe:ce:59:51:aa:
         d5:68:23:41:ad:44:b4:fd:22:4b:50:e6:36:e5:00:c6:b7:67:
         00:1f:30:69:d5:c4:63:92:4e:6e:70:0c:ce:e3:27:89:68:8f:
         80:36:cc:12:bf:9b:89:ae:ba:3e:a3:71:8f:98:d0:98:2c:56:
         b6:26:c4:31:35:98:d8:2d:17:88:f0:35:d3:be:05:ef:a2:2b:
         a1:73:1c:8a:a0:7b:fd:f7:64:45:fe:6d:79:42:48:b9:d4:f1:
         c8:8a:a3:05:16:09:00:f2:51:db:6b:49:03:8e:de:d9:ec:ba:
         26:2d:ae:88:35:50:a2:ab:b1:ca:3c:e7:19:27:69:2d:fc:99:
         4c:fb:fc:0a:54:25:ab:74:91:33:63:b8:e5:33:c6:07:84:bd:
         8f:97:21:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:53:13 2026 by rpki-client