Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D3DBF/E8D924C2361A11F086475D79DAE4EC9C/iXuXO6A-uTTexeB2EobT3XyBo7c.mft
File:                     iXuXO6A-uTTexeB2EobT3XyBo7c.mft (raw, json)
Hash identifier:          1KA2SPao5lZR2UJ/k2/73VcGocVmKt3MfXtpxl0o9E4=
Subject key identifier:   1A:B2:F2:1E:F0:A6:65:84:42:D2:6E:E9:E4:97:D1:A3:FA:4B:04:69
Authority key identifier: 89:7B:97:3B:A0:3E:B9:34:DE:C5:E0:76:12:86:D3:DD:7C:81:A3:B7
Certificate issuer:       /CN=F36D3DBFAR/serialNumber=897B973BA03EB934DEC5E0761286D3DD7C81A3B7
Certificate serial:       01BB
Authority info access:    rsync://rpki.afrinic.net/repository/arin/iXuXO6A-uTTexeB2EobT3XyBo7c.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D3DBF/E8D924C2361A11F086475D79DAE4EC9C/iXuXO6A-uTTexeB2EobT3XyBo7c.mft
Manifest number:          01B8
Signing time:             Fri 24 Jul 2026 04:53:30 +0000
Manifest this update:     Fri 24 Jul 2026 04:53:29 +0000
Manifest next update:     Sun 26 Jul 2026 04:53:29 +0000
Files and hashes:         1: iXuXO6A-uTTexeB2EobT3XyBo7c.crl (hash: lddCBw2t+p1eki9GvYtTBHgzSLa75eeB958QmiL6OHI=)
                          2: 754FDAB02D8F11F193C4B7B5DAE4EC9C.roa (hash: fct50P7fbketjS3C+7ySeYCZCzp4FKWcw+jHMqXh/7g=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D3DBF/E8D924C2361A11F086475D79DAE4EC9C/iXuXO6A-uTTexeB2EobT3XyBo7c.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D3DBF/E8D924C2361A11F086475D79DAE4EC9C/iXuXO6A-uTTexeB2EobT3XyBo7c.mft
                          rsync://rpki.afrinic.net/repository/arin/iXuXO6A-uTTexeB2EobT3XyBo7c.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 26 Jul 2026 00:26:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 443 (0x1bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D3DBFAR, serialNumber=897B973BA03EB934DEC5E0761286D3DD7C81A3B7
        Validity
            Not Before: Jul 24 04:53:29 2026 GMT
            Not After : Jul 26 04:53:29 2026 GMT
        Subject: CN=6a62efca-1b22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:61:a1:25:a2:80:bb:64:9f:c1:31:31:44:c6:
                    8f:9d:21:46:00:b9:4e:fd:46:ac:9f:23:2b:35:72:
                    2d:ac:09:68:fe:bc:8c:25:ae:ed:9e:23:a9:d2:52:
                    8b:31:bf:56:25:16:4e:77:07:a8:43:2d:1b:7c:c0:
                    a5:d4:6a:d5:49:66:73:60:f4:bf:d2:c2:35:f4:9e:
                    38:04:6b:69:43:13:09:b4:f2:34:9f:66:f1:b5:2b:
                    34:72:29:6c:97:cf:0b:3a:1c:a4:25:e8:0c:ea:0f:
                    4c:e2:38:63:1a:11:80:24:03:4e:d2:95:94:9b:f4:
                    41:28:b5:d5:7e:82:cd:2d:8a:40:e6:7a:17:b2:c0:
                    95:ba:a0:54:3a:2a:29:7b:db:94:76:17:c4:4b:93:
                    99:bf:c1:cd:89:33:77:21:c1:0c:85:b9:61:fb:f4:
                    d4:2b:17:3e:41:b6:85:76:bb:e4:01:13:cd:3d:ba:
                    4f:b9:70:95:65:30:16:bd:a8:06:d2:7b:90:24:07:
                    7b:0d:f3:20:c7:f6:be:c9:a6:16:3a:3a:14:c4:5d:
                    7d:79:66:a5:4c:e8:fb:8f:4a:01:26:74:ca:20:d4:
                    17:05:af:3b:61:10:63:ab:f2:f3:96:60:3d:b9:97:
                    3c:51:8d:ff:f8:85:90:fd:02:e9:a8:b7:79:c8:f0:
                    7f:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:B2:F2:1E:F0:A6:65:84:42:D2:6E:E9:E4:97:D1:A3:FA:4B:04:69
            X509v3 Authority Key Identifier:
                keyid:89:7B:97:3B:A0:3E:B9:34:DE:C5:E0:76:12:86:D3:DD:7C:81:A3:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D3DBF/E8D924C2361A11F086475D79DAE4EC9C/iXuXO6A-uTTexeB2EobT3XyBo7c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/iXuXO6A-uTTexeB2EobT3XyBo7c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D3DBF/E8D924C2361A11F086475D79DAE4EC9C/iXuXO6A-uTTexeB2EobT3XyBo7c.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:a9:8d:24:fc:c1:b3:7b:22:36:1c:6a:30:ef:35:9d:7d:c7:
         53:23:fe:52:a8:b1:68:8b:50:d3:61:2e:56:09:af:12:43:f3:
         16:b8:05:14:10:f5:7b:44:7b:48:27:9f:32:ad:79:88:8b:96:
         ba:0b:aa:46:12:ec:35:bc:65:de:1b:a2:b9:2b:ee:47:32:4a:
         ac:b9:c1:48:ed:55:94:98:09:e4:0a:45:b0:23:e6:1c:af:35:
         3e:18:ea:00:f9:d0:46:de:89:02:8c:ee:7b:e7:ea:41:a6:74:
         ae:88:8e:9a:a9:88:81:87:95:f5:88:a4:67:e8:e4:78:07:2b:
         aa:63:5f:aa:bc:91:06:4f:a0:66:10:03:f7:43:f8:23:93:2d:
         9e:0f:8a:72:aa:d7:70:76:3d:a3:f6:fb:71:00:a1:0e:d4:d0:
         1e:f7:d7:58:4e:81:d9:79:0f:43:2b:c7:90:64:14:c1:e6:20:
         56:2e:68:94:5b:f8:10:49:ae:2f:8e:19:c8:3d:81:f9:e7:39:
         ab:6d:85:c9:25:93:46:81:c4:81:c8:41:e4:8c:6f:a3:41:88:
         be:27:5a:6a:2a:77:18:33:18:ba:91:40:55:dc:db:62:3f:9a:
         ad:71:42:1a:17:8c:7b:2e:8d:4c:79:18:cf:45:73:f6:14:69:
         ac:6e:7f:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:27:18 2026 by rpki-client