Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CC4C5/F0A872C6DE6B11F0986944EADAE4EC9C/oHAxgIgisopRzqJ21BM9cIqlFO0.mft
File:                     oHAxgIgisopRzqJ21BM9cIqlFO0.mft (raw, json)
Hash identifier:          PkluYgmC8wjsqQikuvn2vmSezPYsmSGqB4vl4Cmo3ek=
Subject key identifier:   C2:8E:10:B6:7E:10:A8:B7:73:A1:8A:38:43:EA:41:50:4F:97:8E:FD
Authority key identifier: A0:70:31:80:88:22:B2:8A:51:CE:A2:76:D4:13:3D:70:8A:A5:14:ED
Certificate issuer:       /CN=F36CC4C5RI/serialNumber=A07031808822B28A51CEA276D4133D708AA514ED
Certificate serial:       63
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/oHAxgIgisopRzqJ21BM9cIqlFO0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36CC4C5/F0A872C6DE6B11F0986944EADAE4EC9C/oHAxgIgisopRzqJ21BM9cIqlFO0.mft
Manifest number:          62
Signing time:             Thu 26 Mar 2026 06:25:31 +0000
Manifest this update:     Thu 26 Mar 2026 06:25:30 +0000
Manifest next update:     Sat 28 Mar 2026 06:25:30 +0000
Files and hashes:         1: oHAxgIgisopRzqJ21BM9cIqlFO0.crl (hash: Ntnu1Lozj2l36bs3Rv28wj8hZ6D/DoXoJKW3p1QQCm4=)
                          2: 6BB245F8DE6E11F0A9CDBA7BDAE4EC9C.roa (hash: xOgvdv+bzOxwVoZHfk68mQJwNieIGm7/dHTt7BIs17g=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36CC4C5/F0A872C6DE6B11F0986944EADAE4EC9C/oHAxgIgisopRzqJ21BM9cIqlFO0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36CC4C5/F0A872C6DE6B11F0986944EADAE4EC9C/oHAxgIgisopRzqJ21BM9cIqlFO0.mft
                          rsync://rpki.afrinic.net/repository/ripe/oHAxgIgisopRzqJ21BM9cIqlFO0.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 06:25:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 99 (0x63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36CC4C5RI, serialNumber=A07031808822B28A51CEA276D4133D708AA514ED
        Validity
            Not Before: Mar 26 06:25:30 2026 GMT
            Not After : Mar 28 06:25:30 2026 GMT
        Subject: CN=69c4d15b-d1e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:46:5a:c6:fe:00:d3:5d:9c:b6:4a:da:f3:78:
                    e5:b6:ab:1e:4f:2d:98:c2:d5:09:d0:9d:c3:ac:ee:
                    d8:dc:fb:5f:54:79:e9:8a:12:b0:f0:55:ba:f2:8f:
                    f8:b6:49:52:1f:dc:fe:67:f8:9c:73:26:72:01:f2:
                    9b:5c:08:6f:0a:81:bb:f7:b3:30:a7:6c:b0:a2:c9:
                    ac:8e:37:8a:66:7f:10:0d:f6:58:c5:02:1d:da:75:
                    bf:38:9c:eb:1d:76:2e:4c:38:27:86:6f:f2:61:4f:
                    f4:f3:04:61:a2:77:a0:45:3d:d4:6a:3f:13:1d:01:
                    59:65:e3:08:fc:84:de:97:1f:78:69:00:7e:92:33:
                    22:af:b6:f7:63:85:26:64:ff:56:ce:0c:67:eb:d7:
                    c0:0b:d8:c5:96:89:de:b8:e4:2e:ba:86:4e:99:b3:
                    71:d3:b9:a7:0a:e2:db:34:77:e9:a4:1e:ab:37:ed:
                    df:14:ec:24:7c:05:2f:23:28:a9:4c:4c:05:3f:ab:
                    0b:fb:67:38:98:ec:29:e2:47:77:10:c4:59:04:11:
                    ce:83:04:83:ca:3c:03:04:98:85:f4:ca:f4:3a:f3:
                    b0:86:9a:96:22:48:6b:31:42:4c:d0:02:65:d5:9a:
                    9d:83:63:f0:9a:e7:40:e1:cd:8c:f2:c1:8a:81:d7:
                    51:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:8E:10:B6:7E:10:A8:B7:73:A1:8A:38:43:EA:41:50:4F:97:8E:FD
            X509v3 Authority Key Identifier:
                keyid:A0:70:31:80:88:22:B2:8A:51:CE:A2:76:D4:13:3D:70:8A:A5:14:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36CC4C5/F0A872C6DE6B11F0986944EADAE4EC9C/oHAxgIgisopRzqJ21BM9cIqlFO0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/oHAxgIgisopRzqJ21BM9cIqlFO0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CC4C5/F0A872C6DE6B11F0986944EADAE4EC9C/oHAxgIgisopRzqJ21BM9cIqlFO0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:83:c4:67:87:e8:ec:c4:f6:1e:21:b5:b1:a2:0a:b7:97:9a:
         0f:43:5b:f8:a8:72:64:95:e6:0a:2f:e8:25:ae:8a:a8:b0:54:
         d4:ac:06:57:ef:ba:31:3a:4f:3b:76:50:cc:e6:29:03:98:bc:
         df:8d:dd:35:4f:ef:60:d5:e6:99:03:d7:c7:1e:5a:4d:17:65:
         eb:c0:14:4d:96:bf:6b:76:ea:57:89:a3:43:91:11:5a:4d:df:
         ef:ef:c2:5f:4b:54:0d:75:7a:63:ae:4d:31:a4:2d:2e:24:50:
         08:d2:1a:36:eb:9c:34:0a:8c:61:93:40:4c:60:8d:a8:dd:c3:
         d1:91:2d:38:48:a3:55:43:65:58:9f:91:41:8d:73:af:3d:19:
         cf:d3:33:9f:fd:f7:9b:0e:70:fa:9c:e3:7f:f2:1e:09:3d:32:
         aa:55:c2:d2:b0:07:d6:05:09:de:01:a0:74:16:17:c7:a0:15:
         d0:fd:98:b5:97:28:00:db:2d:8a:5b:0c:d8:23:71:e1:5b:a2:
         df:3d:4a:f3:7c:59:5e:c0:56:bc:2d:70:e2:fa:dd:df:e2:34:
         c7:75:84:76:ea:ed:d9:2d:4a:e7:7e:ce:91:ec:09:e3:d8:18:
         bc:d0:db:3a:32:3b:c4:b2:21:45:8c:44:3f:42:dc:8f:5c:0f:
         10:7a:f0:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 03:09:51 2026 by rpki-client