Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C684F/C401133ED48311E98A92991CF8AEA228/qq2zeUNQh6CU8n12Cd-4YvxcxGU.mft
File:                     qq2zeUNQh6CU8n12Cd-4YvxcxGU.mft (raw, json)
Hash identifier:          HUKTA7VoxqGzcehQ7guoazTIj3XaP5HdEOBduNZS7pI=
Subject key identifier:   35:B8:67:20:DC:8D:7A:84:28:79:F0:E4:E8:C4:C6:FE:E7:AC:1E:65
Authority key identifier: AA:AD:B3:79:43:50:87:A0:94:F2:7D:76:09:DF:B8:62:FC:5C:C4:65
Certificate issuer:       /CN=F36C684FRI/serialNumber=AAADB379435087A094F27D7609DFB862FC5CC465
Certificate serial:       08EB
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/qq2zeUNQh6CU8n12Cd-4YvxcxGU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C684F/C401133ED48311E98A92991CF8AEA228/qq2zeUNQh6CU8n12Cd-4YvxcxGU.mft
Manifest number:          08EB
Signing time:             Mon 20 Oct 2025 01:36:33 +0000
Manifest this update:     Mon 20 Oct 2025 01:36:32 +0000
Manifest next update:     Wed 22 Oct 2025 01:36:32 +0000
Files and hashes:         1: qq2zeUNQh6CU8n12Cd-4YvxcxGU.crl (hash: NXPPylGQacmXo4G7DYuQKZi8XrAN9+PGDzAWfcD5U3Y=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C684F/C401133ED48311E98A92991CF8AEA228/qq2zeUNQh6CU8n12Cd-4YvxcxGU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C684F/C401133ED48311E98A92991CF8AEA228/qq2zeUNQh6CU8n12Cd-4YvxcxGU.mft
                          rsync://rpki.afrinic.net/repository/ripe/qq2zeUNQh6CU8n12Cd-4YvxcxGU.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 22 Oct 2025 00:45:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2283 (0x8eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C684FRI, serialNumber=AAADB379435087A094F27D7609DFB862FC5CC465
        Validity
            Not Before: Oct 20 01:36:32 2025 GMT
            Not After : Oct 22 01:36:32 2025 GMT
        Subject: CN=68f59221-a496
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:17:33:95:96:16:ac:a3:9e:25:74:dc:ee:80:
                    82:e9:ea:9f:63:3d:04:9e:5e:32:d2:a2:10:42:34:
                    dc:52:46:e4:17:19:6d:5c:96:53:c5:dc:05:ea:b0:
                    a7:e6:49:55:d8:ab:06:cd:57:b9:b1:52:33:2d:47:
                    60:9e:fd:2a:b8:3a:04:de:2d:b2:34:8f:b3:7a:53:
                    56:b7:eb:66:e1:22:31:fa:d1:2d:71:ad:53:90:cf:
                    80:44:43:1e:3f:8d:84:c6:01:69:8c:8f:fd:f1:fe:
                    99:34:3c:7a:e8:3d:2e:be:79:28:ff:05:6a:b7:59:
                    f7:2f:28:45:0b:89:b7:bd:f3:61:78:95:45:0e:57:
                    5d:3a:4e:c1:9c:ff:d4:8e:36:6b:b6:89:19:d8:64:
                    78:a8:89:70:8b:8a:31:3a:f5:fe:a7:75:3d:ee:84:
                    75:08:f8:89:93:2c:bc:89:be:0c:88:10:30:91:5c:
                    6a:00:25:d2:d8:c5:a9:74:ba:d0:0e:b1:a8:f7:af:
                    2d:78:48:4f:e6:d0:80:1d:64:b3:53:6c:be:70:b0:
                    4c:0f:d6:2c:fd:21:0a:b4:bf:0e:da:af:19:3e:b8:
                    0f:92:80:db:84:42:38:43:55:36:f4:8d:89:64:33:
                    ac:bc:0a:73:61:5a:81:0d:b1:1c:d7:ad:fb:de:4b:
                    db:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:B8:67:20:DC:8D:7A:84:28:79:F0:E4:E8:C4:C6:FE:E7:AC:1E:65
            X509v3 Authority Key Identifier:
                keyid:AA:AD:B3:79:43:50:87:A0:94:F2:7D:76:09:DF:B8:62:FC:5C:C4:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C684F/C401133ED48311E98A92991CF8AEA228/qq2zeUNQh6CU8n12Cd-4YvxcxGU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/qq2zeUNQh6CU8n12Cd-4YvxcxGU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C684F/C401133ED48311E98A92991CF8AEA228/qq2zeUNQh6CU8n12Cd-4YvxcxGU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:a2:af:fd:2c:83:6f:27:ad:a9:e0:cb:f8:f2:04:a3:0a:75:
         62:5a:bf:80:eb:92:49:b9:a2:99:1a:cf:d7:f8:5c:3b:17:7b:
         d7:36:c1:c2:c1:c3:15:22:5a:2c:25:9f:37:a3:a8:d2:c1:ea:
         09:f5:69:90:a8:ad:ab:15:bd:32:c8:ec:4a:86:7d:33:cc:af:
         33:44:11:e4:d8:d5:36:62:e5:a4:b5:87:31:ff:f9:ee:e3:c5:
         b6:84:df:43:6e:d2:34:cc:6e:e9:f6:54:46:6b:d1:e8:53:4f:
         52:31:eb:f1:24:5e:86:27:aa:f7:7c:1b:26:f2:ca:53:53:97:
         6d:3f:27:1d:a2:a1:66:9e:6b:36:df:5e:8c:a0:e5:36:2e:61:
         4a:93:de:d0:fe:bf:47:94:ff:a7:8c:ee:d8:21:e2:e8:b6:34:
         23:05:44:7a:e1:21:06:9c:83:d4:14:c2:05:76:08:75:9b:5c:
         d5:24:9a:21:aa:f5:3f:7d:54:ed:03:b7:9f:07:e9:89:fc:de:
         86:ce:22:01:c0:21:e3:cc:52:4a:64:b4:a6:be:8e:c0:f3:2b:
         fe:15:9c:ec:e5:01:7d:05:60:70:fc:5a:42:92:2c:5c:80:45:
         bc:bb:77:c3:b4:f8:58:c1:da:f8:05:9e:f3:fc:4d:d2:4b:a2:
         5a:c4:5f:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:24:47 2025 by rpki-client