Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36CE430/C1C65EFE115711F1BAFD10ABDAE4EC9C/IrHCTE_knGjBdmKP2mTmgXP2Hg8.mft
File:                     IrHCTE_knGjBdmKP2mTmgXP2Hg8.mft (raw, json)
Hash identifier:          PqcRZupCLg7wMF0pBt1GBgeLb7qequ13CzhizhUyqhM=
Subject key identifier:   45:6C:F3:34:55:37:D0:CE:BE:5A:D2:4B:90:60:1D:FF:DC:29:16:3A
Authority key identifier: 22:B1:C2:4C:4F:E4:9C:68:C1:76:62:8F:DA:64:E6:81:73:F6:1E:0F
Certificate issuer:       /CN=F36CE430AF/serialNumber=22B1C24C4FE49C68C176628FDA64E68173F61E0F
Certificate serial:       D9
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/IrHCTE_knGjBdmKP2mTmgXP2Hg8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36CE430/C1C65EFE115711F1BAFD10ABDAE4EC9C/IrHCTE_knGjBdmKP2mTmgXP2Hg8.mft
Manifest number:          D7
Signing time:             Wed 23 Sep 2026 05:29:01 +0000
Manifest this update:     Wed 23 Sep 2026 05:29:00 +0000
Manifest next update:     Fri 25 Sep 2026 05:29:00 +0000
Files and hashes:         1: IrHCTE_knGjBdmKP2mTmgXP2Hg8.crl (hash: yS6+fvfSCE7arxlDxOYBYvrcWCdGIIx89unfNF0k50c=)
                          2: B26406B2115E11F1A6022FD5DAE4EC9C.roa (hash: 7PV+1FdMOwzL2sEcSdwc46KEV9LTzKnwF2E0RpdtuUA=)
                          3: 61252ABC115C11F195A7B0C6DAE4EC9C.roa (hash: +97KNf3zcICVtSO8hAKNcT79qEYenewn2RIftrsHFA8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36CE430/C1C65EFE115711F1BAFD10ABDAE4EC9C/IrHCTE_knGjBdmKP2mTmgXP2Hg8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36CE430/C1C65EFE115711F1BAFD10ABDAE4EC9C/IrHCTE_knGjBdmKP2mTmgXP2Hg8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/IrHCTE_knGjBdmKP2mTmgXP2Hg8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 25 Sep 2026 05:28:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 217 (0xd9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36CE430AF, serialNumber=22B1C24C4FE49C68C176628FDA64E68173F61E0F
        Validity
            Not Before: Sep 23 05:29:00 2026 GMT
            Not After : Sep 25 05:29:00 2026 GMT
        Subject: CN=6ab3639d-e56c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:38:00:7c:c0:8b:d8:0a:7b:a6:a1:e4:d3:54:
                    fb:81:8a:c1:5a:50:5b:e8:c0:74:7c:e9:72:73:97:
                    7c:ae:00:7b:a5:46:df:a8:1e:dc:00:58:86:07:ae:
                    fa:5d:60:7b:1d:ae:c3:9f:c0:ba:de:2f:72:7f:25:
                    2c:9b:fa:72:cc:19:5d:21:f2:43:91:67:e5:e0:a2:
                    5f:e2:fe:b9:6b:09:fb:a5:e6:1c:a2:6a:75:b4:c6:
                    be:2e:2f:bb:14:0d:82:16:57:bd:0e:b5:d7:3a:d5:
                    db:40:8e:a9:31:85:36:68:1d:ca:62:51:4b:6c:b1:
                    7f:03:a2:0b:da:51:7f:78:29:27:8d:a9:93:a8:89:
                    71:ce:da:1b:37:03:74:c3:0b:85:08:a1:d5:1c:36:
                    bc:1d:a9:8d:2f:f0:d8:d3:b7:32:64:21:36:18:ce:
                    7d:65:7c:29:67:e8:32:f0:0d:8e:2e:93:de:3a:fe:
                    a8:f4:1d:76:b6:df:63:0e:41:d9:f7:ab:ee:24:b8:
                    73:be:a7:fa:09:e4:f7:15:7f:22:b4:21:5e:5e:d2:
                    7a:cb:8b:fc:c6:30:e9:e9:2c:c2:9b:a2:6a:2a:e5:
                    63:19:12:44:77:35:95:39:3c:29:5d:c3:cb:2b:ec:
                    9f:6c:21:39:30:20:c5:aa:ff:92:35:55:a2:f7:26:
                    ed:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:6C:F3:34:55:37:D0:CE:BE:5A:D2:4B:90:60:1D:FF:DC:29:16:3A
            X509v3 Authority Key Identifier:
                keyid:22:B1:C2:4C:4F:E4:9C:68:C1:76:62:8F:DA:64:E6:81:73:F6:1E:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36CE430/C1C65EFE115711F1BAFD10ABDAE4EC9C/IrHCTE_knGjBdmKP2mTmgXP2Hg8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/IrHCTE_knGjBdmKP2mTmgXP2Hg8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CE430/C1C65EFE115711F1BAFD10ABDAE4EC9C/IrHCTE_knGjBdmKP2mTmgXP2Hg8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:36:54:e6:26:05:ce:59:ed:14:74:f5:81:0b:df:4b:a6:01:
         28:84:ba:8c:70:e0:30:ca:a2:25:17:c2:b7:d2:20:f3:17:97:
         0d:74:e8:6d:91:eb:8a:3a:2d:c3:89:fe:2f:49:1a:97:db:5d:
         21:ca:b0:a0:f7:e7:59:21:12:03:87:c8:0c:9d:80:91:f1:7b:
         d6:92:17:70:5b:07:54:39:79:ea:b6:f3:e8:35:c6:d6:15:d3:
         5c:38:62:08:eb:51:88:5b:c3:b7:40:61:7c:35:0f:c7:fe:54:
         73:77:42:59:38:de:f1:d2:df:a3:37:29:41:e1:67:72:d5:17:
         4d:1a:4d:e8:0e:af:db:bb:89:8b:b3:b3:28:85:48:16:16:46:
         d8:bc:c9:da:23:fc:7f:4d:fd:d4:1e:79:31:5a:6c:f0:73:a2:
         eb:33:3e:92:04:da:3a:82:02:19:2c:74:39:ad:90:ed:ce:75:
         ff:65:3c:8f:0b:54:81:c0:60:e6:8f:fc:42:52:89:53:10:58:
         51:ca:2c:55:cf:e1:d7:9c:a3:25:3d:f2:d0:8e:17:64:b1:50:
         6d:96:93:62:3c:80:db:81:2c:55:22:d7:3c:6f:17:59:58:2c:
         c8:cd:16:4c:db:5c:6a:1e:15:94:64:32:9e:c2:44:bd:ef:c3:
         12:e0:d2:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----