Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DBC4B/2336786EF8A911EEBCB49C0F017001B1/_n_6ewbTc1Hbkta507CtEDB7WiE.mft
File:                     _n_6ewbTc1Hbkta507CtEDB7WiE.mft (raw, json)
Hash identifier:          u2FLRq9vCVSxO8XV8qv3Vsv0SFlBH8MJtsRVt6wBf7c=
Subject key identifier:   E9:16:65:0F:50:B3:68:7D:EB:B3:96:60:A6:D5:DE:AE:FA:FB:09:AC
Authority key identifier: FE:7F:FA:7B:06:D3:73:51:DB:92:D6:B9:D3:B0:AD:10:30:7B:5A:21
Certificate issuer:       /CN=F36DBC4BAF/serialNumber=FE7FFA7B06D37351DB92D6B9D3B0AD10307B5A21
Certificate serial:       02E4
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/_n_6ewbTc1Hbkta507CtEDB7WiE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DBC4B/2336786EF8A911EEBCB49C0F017001B1/_n_6ewbTc1Hbkta507CtEDB7WiE.mft
Manifest number:          02E0
Signing time:             Thu 26 Mar 2026 04:54:16 +0000
Manifest this update:     Thu 26 Mar 2026 04:54:15 +0000
Manifest next update:     Sat 28 Mar 2026 04:54:15 +0000
Files and hashes:         1: _n_6ewbTc1Hbkta507CtEDB7WiE.crl (hash: tg+Q/PsycGE5EKtf0jAsDryMtbsPNFXRCAexlUdJk5E=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36DBC4B/2336786EF8A911EEBCB49C0F017001B1/_n_6ewbTc1Hbkta507CtEDB7WiE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36DBC4B/2336786EF8A911EEBCB49C0F017001B1/_n_6ewbTc1Hbkta507CtEDB7WiE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/_n_6ewbTc1Hbkta507CtEDB7WiE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 740 (0x2e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DBC4BAF, serialNumber=FE7FFA7B06D37351DB92D6B9D3B0AD10307B5A21
        Validity
            Not Before: Mar 26 04:54:15 2026 GMT
            Not After : Mar 28 04:54:15 2026 GMT
        Subject: CN=69c4bbf8-b99e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:42:a7:7a:15:4f:4b:24:6a:34:12:7c:f5:7b:
                    21:98:80:b7:29:69:04:64:c9:f4:a2:8a:ed:e3:f2:
                    97:fa:92:b4:dc:70:92:a6:30:b5:94:19:07:17:76:
                    de:ca:b8:f5:38:1b:64:46:6d:11:71:33:c7:3a:11:
                    1d:f3:05:3f:24:1f:83:2e:2e:45:d3:c3:cc:c1:43:
                    14:bc:bc:ce:a8:ab:8b:d6:71:df:17:52:db:66:60:
                    3b:5a:34:d4:ec:7d:1f:a9:0c:e7:b4:64:2a:23:04:
                    48:b3:9c:dd:04:48:44:fc:95:03:18:5c:1d:23:2f:
                    cd:53:81:e1:90:dc:55:57:80:05:96:9b:28:4b:9e:
                    db:ee:e6:ee:df:7d:d0:3d:2e:02:64:6f:96:30:4b:
                    e6:1a:37:db:9d:4c:75:c7:5b:a2:ac:ea:62:02:9c:
                    6d:69:42:c0:76:be:9a:14:ac:47:09:66:a5:db:4c:
                    8f:4b:81:40:5b:d3:18:51:78:ee:7a:22:9b:7a:36:
                    38:62:ff:00:50:fc:12:84:84:b5:af:f6:6b:8c:1b:
                    39:59:83:c9:d9:97:38:19:51:f4:ac:37:23:bb:bc:
                    bd:4b:44:68:ff:bd:45:7b:ca:e8:48:83:68:bf:bf:
                    cb:57:54:ec:78:4d:31:a8:6e:b3:0d:8a:b9:15:62:
                    77:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:16:65:0F:50:B3:68:7D:EB:B3:96:60:A6:D5:DE:AE:FA:FB:09:AC
            X509v3 Authority Key Identifier:
                keyid:FE:7F:FA:7B:06:D3:73:51:DB:92:D6:B9:D3:B0:AD:10:30:7B:5A:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DBC4B/2336786EF8A911EEBCB49C0F017001B1/_n_6ewbTc1Hbkta507CtEDB7WiE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_n_6ewbTc1Hbkta507CtEDB7WiE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DBC4B/2336786EF8A911EEBCB49C0F017001B1/_n_6ewbTc1Hbkta507CtEDB7WiE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:a4:9c:2d:84:4c:85:15:53:d2:58:24:e8:dc:23:f5:60:f9:
         58:34:49:38:c0:25:d0:f2:c9:1f:57:11:7d:4b:51:37:9a:51:
         5d:60:de:b0:c4:9d:f8:f3:9f:f9:20:fb:1f:61:4f:8f:e6:15:
         fb:4f:b5:df:dc:40:51:71:ae:af:61:d3:5f:7e:71:aa:0f:d5:
         ec:e6:23:2d:f5:24:fb:76:57:e2:fd:b0:17:af:c3:d2:09:95:
         02:76:d5:5a:a4:d5:e7:84:09:16:ca:d4:a9:ee:38:f6:6b:c1:
         25:87:72:01:45:6c:f6:48:8f:ab:80:25:6e:bd:16:26:00:4a:
         e0:f5:5d:d5:7e:7d:e7:f0:70:c4:aa:e0:57:b6:07:1e:07:63:
         70:3a:5b:ed:a2:3c:5d:39:61:95:bb:ee:e0:ab:c9:e1:a4:69:
         ea:27:19:be:55:3c:4a:27:7e:aa:0b:f6:67:90:7b:31:ae:68:
         99:ab:81:e2:b3:3c:be:0a:67:52:47:ec:3e:f2:d3:0b:b2:e6:
         6e:04:e2:f4:e2:b6:79:d5:81:44:c7:fd:a7:6f:46:0e:d2:12:
         ee:be:8b:06:4a:2a:57:f5:d0:3b:7e:36:b4:41:9b:1d:ea:d6:
         94:d3:74:4c:de:66:5b:86:2c:8f:b6:5d:fd:4a:de:d5:f6:03:
         c7:82:d9:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:01:26 2026 by rpki-client