Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D987F/134C6996844211F1A57466E5CE1D38B0/00oZ5jEGlkvQLLLYrRgH35prGQE.mft
File:                     00oZ5jEGlkvQLLLYrRgH35prGQE.mft (raw, json)
Hash identifier:          WSj1vvWoCRhMvtmmPLCSxvU6O5E0acQeSi0Y6Brng+Y=
Subject key identifier:   D5:EF:04:AA:13:2A:EF:E1:D0:08:F2:57:12:C1:B8:AA:71:99:D9:95
Authority key identifier: D3:4A:19:E6:31:06:96:4B:D0:2C:B2:D8:AD:18:07:DF:9A:6B:19:01
Certificate issuer:       /CN=F36D987FRI/serialNumber=D34A19E63106964BD02CB2D8AD1807DF9A6B1901
Certificate serial:       0A
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/00oZ5jEGlkvQLLLYrRgH35prGQE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D987F/134C6996844211F1A57466E5CE1D38B0/00oZ5jEGlkvQLLLYrRgH35prGQE.mft
Manifest number:          08
Signing time:             Fri 24 Jul 2026 05:45:32 +0000
Manifest this update:     Fri 24 Jul 2026 05:45:31 +0000
Manifest next update:     Sun 26 Jul 2026 05:45:31 +0000
Files and hashes:         1: 00oZ5jEGlkvQLLLYrRgH35prGQE.crl (hash: WwGh2U87YSw36DfaqODLZf9/bmDNKbaHLsZtMqD7350=)
                          2: 2D3A58E2844A11F191A58113CF1D38B0.roa (hash: B/vvT2Jfc++6xpCJZfkdlYiPhk3yse5YiJZ7AjLkKmk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D987F/134C6996844211F1A57466E5CE1D38B0/00oZ5jEGlkvQLLLYrRgH35prGQE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D987F/134C6996844211F1A57466E5CE1D38B0/00oZ5jEGlkvQLLLYrRgH35prGQE.mft
                          rsync://rpki.afrinic.net/repository/ripe/00oZ5jEGlkvQLLLYrRgH35prGQE.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 26 Jul 2026 00:45:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10 (0xa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D987FRI, serialNumber=D34A19E63106964BD02CB2D8AD1807DF9A6B1901
        Validity
            Not Before: Jul 24 05:45:31 2026 GMT
            Not After : Jul 26 05:45:31 2026 GMT
        Subject: CN=6a62fbfc-f938
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:be:44:a6:c7:ed:e7:f1:9c:69:38:2c:90:62:
                    66:63:51:f9:d4:0a:21:bc:26:11:03:fc:66:ba:f6:
                    8f:53:b4:78:1e:f5:3a:42:50:06:a6:a7:4b:c5:1c:
                    d7:ab:10:1e:c7:37:d5:49:54:13:a3:66:6f:27:bb:
                    ad:ac:20:1e:a3:4e:f6:2d:99:46:1d:62:53:1a:00:
                    90:b3:f0:cc:20:00:2b:9a:3f:0a:df:0a:49:af:50:
                    c4:ca:8a:e9:dd:11:c7:a0:2c:fb:ad:15:eb:f1:27:
                    75:ae:59:fe:23:4b:09:c5:30:5f:1f:d8:4e:85:ea:
                    86:39:d6:16:de:6b:09:11:e4:bb:09:a8:a6:10:1d:
                    4c:b0:2e:f4:86:6e:f9:5f:a9:2d:c7:13:99:30:e5:
                    2f:b6:58:9e:dd:c5:25:65:5a:dc:74:08:93:ea:63:
                    77:85:b9:4e:02:c6:29:36:fd:d4:dd:ff:6e:8f:bf:
                    5d:04:c9:77:27:94:78:20:72:aa:c2:7c:4e:a1:71:
                    14:24:ee:05:9a:64:da:90:85:63:10:f5:3f:d8:70:
                    2b:10:df:06:87:9c:b7:79:8c:fa:05:39:ff:38:8d:
                    1d:16:df:11:af:6c:d3:c5:21:df:4f:9a:db:64:46:
                    80:27:e2:72:6c:45:59:84:b9:df:fb:54:fe:11:41:
                    47:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:EF:04:AA:13:2A:EF:E1:D0:08:F2:57:12:C1:B8:AA:71:99:D9:95
            X509v3 Authority Key Identifier:
                keyid:D3:4A:19:E6:31:06:96:4B:D0:2C:B2:D8:AD:18:07:DF:9A:6B:19:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D987F/134C6996844211F1A57466E5CE1D38B0/00oZ5jEGlkvQLLLYrRgH35prGQE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/00oZ5jEGlkvQLLLYrRgH35prGQE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D987F/134C6996844211F1A57466E5CE1D38B0/00oZ5jEGlkvQLLLYrRgH35prGQE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:ec:8f:48:4a:c8:ed:45:ad:2e:21:ed:b2:01:4b:dd:a9:e6:
         e3:f2:4f:48:ce:76:ac:8b:a4:55:0a:f8:6a:8b:d2:ca:ca:97:
         05:80:d2:f9:ec:5c:38:1a:06:80:11:d0:50:b7:4d:77:5a:ba:
         94:6a:93:af:3e:d2:35:6a:8e:b7:cf:7f:3f:9c:82:6f:77:a4:
         b9:19:45:86:fe:c1:e6:d1:4c:4d:53:bc:f7:83:63:75:bd:d5:
         78:91:e9:d8:03:9a:67:fb:9a:4e:ff:f5:08:e9:7d:1a:fb:95:
         54:01:ca:26:26:6c:18:3a:4a:95:55:b8:31:54:5d:24:93:3b:
         c1:8f:98:04:7f:58:f3:70:f3:80:24:3b:90:42:5c:0f:66:5e:
         54:ea:11:70:e8:14:42:2a:bf:5f:e2:4c:81:52:f2:0d:26:3d:
         3d:e2:de:cc:3c:40:5f:0d:f4:28:e4:d6:d4:16:40:37:04:ae:
         cb:c7:7a:89:ef:70:76:8b:fb:cc:aa:4a:15:d7:17:e6:12:b5:
         9a:6c:41:53:57:07:dd:3b:6a:6a:45:9d:82:6a:f3:b8:11:7f:
         9b:ee:3a:75:6a:03:77:4e:be:ee:95:b2:e0:00:e5:75:df:f7:
         ee:74:c9:88:84:84:da:b5:67:91:5c:45:4b:23:9a:ea:ef:d1:
         37:38:0b:30
-----BEGIN CERTIFICATE-----
MIIFkjCCBHqgAwIBAgIBCjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzZE
OTg3RlJJMTEwLwYDVQQFEyhEMzRBMTlFNjMxMDY5NjRCRDAyQ0IyRDhBRDE4MDdE
RjlBNkIxOTAxMB4XDTI2MDcyNDA1NDUzMVoXDTI2MDcyNjA1NDUzMVowGDEWMBQG
A1UEAxMNNmE2MmZiZmMtZjkzODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJK+RKbH7efxnGk4LJBiZmNR+dQKIbwmEQP8Zrr2j1O0eB71OkJQBqanS8Uc
16sQHsc31UlUE6Nmbye7rawgHqNO9i2ZRh1iUxoAkLPwzCAAK5o/Ct8KSa9QxMqK
6d0Rx6As+60V6/Enda5Z/iNLCcUwXx/YToXqhjnWFt5rCRHkuwmophAdTLAu9IZu
+V+pLccTmTDlL7ZYnt3FJWVa3HQIk+pjd4W5TgLGKTb91N3/bo+/XQTJdyeUeCBy
qsJ8TqFxFCTuBZpk2pCFYxD1P9hwKxDfBoect3mM+gU5/ziNHRbfEa9s08Uh30+a
22RGgCficmxFWYS53/tU/hFBR7kCAwEAAaOCArUwggKxMB0GA1UdDgQWBBTV7wSq
Eyrv4dAI8lcSwbiqcZnZlTAfBgNVHSMEGDAWgBTTShnmMQaWS9AsstitGAffmmsZ
ATAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2RDk4N0YvMTM0QzY5OTY4NDQyMTFGMUE1NzQ2NkU1Q0UxRDM4QjAvMDBvWjVq
RUdsa3ZRTExMWXJSZ0gzNXByR1FFLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L3JpcGUv
MDBvWjVqRUdsa3ZRTExMWXJSZ0gzNXByR1FFLmNlcjBPBgNVHSABAf8ERTBDMEEG
CCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmljLm5l
dC9wb2xpY3kvQ1BTLnBkZjCB1QYIKwYBBQUHAQsEgcgwgcUwgYsGCCsGAQUFBzAL
hn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVw
b3NpdG9yeS9GMzZEOTg3Ri8xMzRDNjk5Njg0NDIxMUYxQTU3NDY2RTVDRTFEMzhC
MC8wMG9aNWpFR2xrdlFMTExZclJnSDM1cHJHUUUubWZ0MDUGCCsGAQUFBzANhilo
dHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEF
BQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwDQYJKoZIhvcNAQELBQADggEBAA3sj0hKyO1FrS4h7bIBS92p5uPyT0jOdqyL
pFUK+GqL0srKlwWA0vnsXDgaBoAR0FC3TXdaupRqk68+0jVqjrfPfz+cgm93pLkZ
RYb+webRTE1TvPeDY3W91XiR6dgDmmf7mk7/9QjpfRr7lVQByiYmbBg6SpVVuDFU
XSSTO8GPmAR/WPNw84AkO5BCXA9mXlTqEXDoFEIqv1/iTIFS8g0mPT3i3sw8QF8N
9Cjk1tQWQDcErsvHeonvcHaL+8yqShXXF+YStZpsQVNXB907ampFnYJq87gRf5vu
OnVqA3dOvu6VsuAA5XXf9+50yYiEhNq1Z5FcRUsjmurv0Tc4CzA=
-----END CERTIFICATE-----
Generated at Fri Jul 24 14:57:44 2026 by rpki-client