Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CC4C5/F0A872C6DE6B11F0986944EADAE4EC9C/oHAxgIgisopRzqJ21BM9cIqlFO0.mft
File:                     oHAxgIgisopRzqJ21BM9cIqlFO0.mft (raw, json)
Hash identifier:          T0mkGw3V1JTETgIahWw53tEmIOaXWXIpAIZyLV3UXDI=
Subject key identifier:   1D:86:72:1B:79:B0:63:F3:B9:E9:4B:1E:EE:84:AB:C0:27:EF:DB:34
Authority key identifier: A0:70:31:80:88:22:B2:8A:51:CE:A2:76:D4:13:3D:70:8A:A5:14:ED
Certificate issuer:       /CN=F36CC4C5RI/serialNumber=A07031808822B28A51CEA276D4133D708AA514ED
Certificate serial:       94
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/oHAxgIgisopRzqJ21BM9cIqlFO0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36CC4C5/F0A872C6DE6B11F0986944EADAE4EC9C/oHAxgIgisopRzqJ21BM9cIqlFO0.mft
Manifest number:          93
Signing time:             Wed 13 May 2026 05:21:53 +0000
Manifest this update:     Wed 13 May 2026 05:21:52 +0000
Manifest next update:     Fri 15 May 2026 05:21:52 +0000
Files and hashes:         1: oHAxgIgisopRzqJ21BM9cIqlFO0.crl (hash: 5hFnGOQER8IzhE2giR8SUQoV7QsGkEiflZEDEJ/Gdmc=)
                          2: 6BB245F8DE6E11F0A9CDBA7BDAE4EC9C.roa (hash: xOgvdv+bzOxwVoZHfk68mQJwNieIGm7/dHTt7BIs17g=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36CC4C5/F0A872C6DE6B11F0986944EADAE4EC9C/oHAxgIgisopRzqJ21BM9cIqlFO0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36CC4C5/F0A872C6DE6B11F0986944EADAE4EC9C/oHAxgIgisopRzqJ21BM9cIqlFO0.mft
                          rsync://rpki.afrinic.net/repository/ripe/oHAxgIgisopRzqJ21BM9cIqlFO0.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 15 May 2026 00:45:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 148 (0x94)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36CC4C5RI, serialNumber=A07031808822B28A51CEA276D4133D708AA514ED
        Validity
            Not Before: May 13 05:21:52 2026 GMT
            Not After : May 15 05:21:52 2026 GMT
        Subject: CN=6a040a71-2bdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:79:09:26:11:73:a0:f8:c6:43:17:fe:2f:27:
                    11:1f:e1:63:ec:83:55:dd:68:9d:dc:01:c0:e8:bb:
                    ef:d3:cb:4e:15:f1:78:ee:1c:9e:5b:58:b0:ee:a1:
                    dd:08:1d:a3:ba:21:06:8c:3b:95:b6:a6:aa:a4:b4:
                    26:88:07:96:fb:90:66:ab:1e:75:8b:b7:3c:4b:4a:
                    55:db:e1:09:fa:51:ba:bf:6d:0f:7a:7a:1c:51:5e:
                    76:ff:5c:17:69:e1:50:18:e0:98:b7:95:64:d7:85:
                    17:4f:3f:57:af:cf:67:e6:bd:28:80:70:c3:c5:b0:
                    2f:24:1a:19:99:e3:19:47:78:0a:9d:e3:e3:19:ca:
                    5e:99:4e:36:14:cb:50:fd:b2:5d:14:70:09:bd:47:
                    f0:d1:bb:8c:a3:cc:4f:d9:4b:d3:52:c2:d1:86:38:
                    91:17:a2:b3:28:27:94:9c:e9:28:b6:83:c0:68:fb:
                    9e:16:7d:f3:fc:6b:1d:7e:60:ac:7e:52:5c:9e:d9:
                    5f:1a:56:43:f9:52:b9:a6:6d:fe:bb:1e:bf:30:a9:
                    71:23:40:5e:7a:f7:79:8d:f1:c0:69:3a:62:65:9d:
                    77:42:4e:7f:8b:dc:8d:c1:48:49:19:f8:e5:c3:ca:
                    a2:ac:b7:2f:ac:c3:91:b2:0c:68:60:89:cb:9f:6c:
                    6f:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:86:72:1B:79:B0:63:F3:B9:E9:4B:1E:EE:84:AB:C0:27:EF:DB:34
            X509v3 Authority Key Identifier:
                keyid:A0:70:31:80:88:22:B2:8A:51:CE:A2:76:D4:13:3D:70:8A:A5:14:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36CC4C5/F0A872C6DE6B11F0986944EADAE4EC9C/oHAxgIgisopRzqJ21BM9cIqlFO0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/oHAxgIgisopRzqJ21BM9cIqlFO0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CC4C5/F0A872C6DE6B11F0986944EADAE4EC9C/oHAxgIgisopRzqJ21BM9cIqlFO0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:75:2e:29:cc:11:ee:0f:fd:98:1c:13:6d:f9:34:b0:5b:d5:
         bf:18:7b:b1:ca:1c:c0:24:41:7d:52:c6:28:25:9e:23:e4:3a:
         d3:05:ba:69:55:25:ba:dc:24:4d:a1:75:57:24:5e:8e:6f:a4:
         21:d8:43:12:48:54:4b:ff:9f:8c:a3:37:b7:d6:c7:53:49:5d:
         91:a7:b9:14:d5:84:64:ad:c8:28:bb:03:fc:1a:2e:22:59:2c:
         f5:48:d7:07:74:d9:ca:c6:b7:06:fe:e8:74:9a:15:4f:97:bc:
         ca:03:7c:98:9f:92:d5:e2:38:54:5b:c3:b6:79:93:6c:20:68:
         be:a7:3f:db:f9:71:fa:6f:aa:16:dd:1d:9e:5c:80:18:04:8d:
         f4:f2:87:8b:d8:9d:f2:b7:4d:ec:ac:9c:cf:ed:a5:1a:d1:fe:
         c8:0d:00:62:af:06:26:1b:3f:ab:a4:ef:1f:e9:ba:2d:ef:c5:
         61:81:ba:6c:3b:05:da:39:94:a8:1b:ef:85:b4:e9:16:17:46:
         a8:76:1c:e8:be:1d:90:58:1e:d9:3f:64:e9:5e:8f:31:02:23:
         eb:2d:c3:be:47:82:d3:a0:6c:a4:d1:ea:be:75:73:a0:f3:9d:
         23:9c:0f:c3:10:e0:80:37:b8:e2:7c:dc:b4:f1:fb:da:46:2b:
         8e:7f:69:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:37:30 2026 by rpki-client