Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36DA96D/6848737666CD11EEB788AD704AD9E6FC/n10GlKN56yP6tAip1LvVCOGqOSI.mft
File:                     n10GlKN56yP6tAip1LvVCOGqOSI.mft (raw, json)
Hash identifier:          h57y4LDVEzW5DuNXUfzToOoEabdYh11/TkCuMO2uCGI=
Subject key identifier:   23:64:72:20:5A:CB:A0:62:A0:5D:2A:0B:F1:C2:7B:8A:B8:AA:B3:DD
Authority key identifier: 9F:5D:06:94:A3:79:EB:23:FA:B4:08:A9:D4:BB:D5:08:E1:AA:39:22
Certificate issuer:       /CN=F36DA96DRI/serialNumber=9F5D0694A379EB23FAB408A9D4BBD508E1AA3922
Certificate serial:       0491
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/n10GlKN56yP6tAip1LvVCOGqOSI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DA96D/6848737666CD11EEB788AD704AD9E6FC/n10GlKN56yP6tAip1LvVCOGqOSI.mft
Manifest number:          048D
Signing time:             Sun 15 Nov 2026 03:43:29 +0000
Manifest this update:     Sun 15 Nov 2026 03:43:29 +0000
Manifest next update:     Tue 17 Nov 2026 03:43:29 +0000
Files and hashes:         1: n10GlKN56yP6tAip1LvVCOGqOSI.crl (hash: 2B+kmeJSyMi3Elc14qcPs/s3vsp/PyDAd3c3LF0QtCE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36DA96D/6848737666CD11EEB788AD704AD9E6FC/n10GlKN56yP6tAip1LvVCOGqOSI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36DA96D/6848737666CD11EEB788AD704AD9E6FC/n10GlKN56yP6tAip1LvVCOGqOSI.mft
                          rsync://rpki.afrinic.net/repository/ripe/n10GlKN56yP6tAip1LvVCOGqOSI.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 17 Nov 2026 00:45:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1169 (0x491)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DA96DRI, serialNumber=9F5D0694A379EB23FAB408A9D4BBD508E1AA3922
        Validity
            Not Before: Nov 15 03:43:29 2026 GMT
            Not After : Nov 17 03:43:29 2026 GMT
        Subject: CN=6af92a61-945c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:9c:be:ea:a1:c8:91:e1:e9:a8:d7:62:43:58:
                    ad:26:cf:ba:1d:5f:68:e8:7b:61:cd:73:12:97:e0:
                    30:80:f1:b3:51:73:6e:d3:49:57:38:da:cd:bf:1a:
                    55:95:2e:07:a1:ef:ca:a9:bd:df:ed:e5:93:b2:6b:
                    8c:4a:34:1c:21:ab:a0:13:90:47:ac:95:9d:22:ca:
                    23:fb:57:0d:45:74:c0:a1:92:92:82:6c:85:3c:60:
                    c7:86:37:9a:1e:bd:5a:5e:a4:7c:8d:2a:af:64:03:
                    f7:1b:ee:f3:74:3e:be:61:02:d4:93:8b:d7:b3:06:
                    c4:77:db:a6:2d:c0:cc:14:5f:63:21:2a:d7:3a:82:
                    94:de:2e:c5:9d:d6:b2:41:80:fe:cb:61:dc:ec:cb:
                    13:c0:5b:3f:25:65:2f:da:91:9b:4d:99:08:c4:5e:
                    f9:a2:c2:9c:98:9e:31:17:8d:67:c0:be:60:f1:22:
                    a6:d5:5f:93:83:07:f7:1a:b2:18:0d:74:d7:12:2b:
                    ff:a8:7d:c2:a2:9e:86:02:07:6b:b6:25:3d:27:7f:
                    24:34:58:8f:f1:8a:2f:c9:bf:d3:a1:9b:dd:d9:73:
                    09:8a:c5:78:c4:b5:f9:5b:5d:f1:fe:34:68:ec:77:
                    a6:05:77:74:7f:8c:11:b8:0c:76:69:fc:c5:d2:5a:
                    4d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:64:72:20:5A:CB:A0:62:A0:5D:2A:0B:F1:C2:7B:8A:B8:AA:B3:DD
            X509v3 Authority Key Identifier:
                keyid:9F:5D:06:94:A3:79:EB:23:FA:B4:08:A9:D4:BB:D5:08:E1:AA:39:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DA96D/6848737666CD11EEB788AD704AD9E6FC/n10GlKN56yP6tAip1LvVCOGqOSI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/n10GlKN56yP6tAip1LvVCOGqOSI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DA96D/6848737666CD11EEB788AD704AD9E6FC/n10GlKN56yP6tAip1LvVCOGqOSI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:e8:d1:c5:d9:44:c2:52:53:17:20:bf:fb:ae:c7:0e:96:ef:
         23:dd:c4:67:ff:cb:4d:18:0a:7b:9e:78:f8:53:fa:99:d1:25:
         7d:03:b5:05:3e:65:fe:f6:e5:70:23:ef:d3:a5:49:04:e2:f0:
         cf:59:0d:0d:63:11:4c:3c:1a:36:e8:b8:39:dc:51:66:a3:79:
         c8:fb:36:61:30:ad:49:91:63:3c:a4:e0:ad:4e:9a:15:a0:f4:
         ee:7a:76:e0:65:10:52:61:6a:6a:cc:d5:bf:d7:e2:84:71:24:
         ea:d7:5e:35:1b:d4:61:54:86:a1:83:47:97:a1:b2:d5:41:44:
         73:25:f8:9d:11:d1:ed:86:ec:bc:f2:66:2e:df:c0:35:c8:6e:
         8b:32:9d:ab:92:68:99:5d:17:af:f0:03:38:c7:a9:69:49:7b:
         82:98:66:26:85:94:86:cf:04:fb:30:eb:a8:ef:f5:18:c6:3d:
         e9:7e:5e:ac:3c:f3:1e:36:b9:3c:dd:e0:61:7c:0e:3e:9f:76:
         46:2a:e9:00:94:d2:92:d7:c8:b2:fe:9b:85:64:20:74:c3:bb:
         bc:ab:f5:93:62:bb:26:ab:19:44:fb:64:44:b9:e9:b0:59:20:
         de:77:91:58:a0:f9:82:a8:2a:27:14:77:de:35:4f:36:0e:d9:
         a4:0f:79:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----