Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DE42D/CC9AA0E641DA11EEB03EBE374AD9E6FC/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.mft
File:                     nYXa0C_Bd6QOm5BwI3BvP5d0TaA.mft (raw, json)
Hash identifier:          cpJcUvYcn/OWZVcbaVfkoVrMvogWsMh6hZp1zz5rUW0=
Subject key identifier:   CC:58:27:9F:29:4E:E3:AE:9F:0D:3D:D0:EC:F3:45:B8:51:04:5F:A1
Authority key identifier: 9D:85:DA:D0:2F:C1:77:A4:0E:9B:90:70:23:70:6F:3F:97:74:4D:A0
Certificate issuer:       /CN=F36DE42DRI/serialNumber=9D85DAD02FC177A40E9B907023706F3F97744DA0
Certificate serial:       032E
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DE42D/CC9AA0E641DA11EEB03EBE374AD9E6FC/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.mft
Manifest number:          032D
Signing time:             Mon 20 Oct 2025 03:47:45 +0000
Manifest this update:     Mon 20 Oct 2025 03:47:45 +0000
Manifest next update:     Wed 22 Oct 2025 03:47:45 +0000
Files and hashes:         1: nYXa0C_Bd6QOm5BwI3BvP5d0TaA.crl (hash: 6HuzxcvoCTSuwu0u8IzXBHSGSfHw/dzTGmKfHdajXqA=)
                          2: CC9C343441E311EEA3DA33544AD9E6FC.roa (hash: O2w06Y8bPWrlQlM0KiCR/CDJJh42Y1TIJDGWDlX/VL0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36DE42D/CC9AA0E641DA11EEB03EBE374AD9E6FC/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36DE42D/CC9AA0E641DA11EEB03EBE374AD9E6FC/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.mft
                          rsync://rpki.afrinic.net/repository/ripe/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 22 Oct 2025 00:45:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 814 (0x32e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DE42DRI, serialNumber=9D85DAD02FC177A40E9B907023706F3F97744DA0
        Validity
            Not Before: Oct 20 03:47:45 2025 GMT
            Not After : Oct 22 03:47:45 2025 GMT
        Subject: CN=68f5b0e1-cec3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:a5:2c:40:6c:35:dd:3e:f6:73:dd:09:e1:87:
                    12:74:30:72:89:d0:01:73:da:f0:30:37:c1:65:1e:
                    8b:25:75:90:a8:a9:f4:1e:ee:b2:cc:64:9f:c4:7d:
                    54:e8:8f:7e:f8:b2:ad:78:73:0d:55:d5:10:dd:a1:
                    b9:30:c1:61:ce:83:2c:30:b4:26:a5:a6:f0:c2:8d:
                    52:91:58:c2:d6:5d:56:5f:ee:ed:a0:7c:08:f5:27:
                    d0:13:ca:4c:77:6a:79:ff:29:15:c4:a4:d5:5b:29:
                    6f:41:d9:8a:5f:0f:7e:57:2b:05:d7:ca:c0:32:99:
                    a3:f5:2b:1a:4d:9b:58:dd:9a:b0:80:ff:78:8a:cf:
                    de:a0:0f:4b:5b:3d:b0:81:f6:57:eb:06:a0:ec:74:
                    b3:a3:08:83:3c:2b:bc:43:1a:24:67:d3:97:4f:03:
                    7f:e0:ef:24:93:a3:9b:ee:01:be:cc:d5:bc:cd:74:
                    6c:8c:16:c0:f8:fe:ed:f8:bc:87:b8:bf:2a:fa:61:
                    35:7b:58:ca:be:6f:ab:e9:d7:72:cd:f9:e3:34:4e:
                    8b:d6:47:53:78:d9:de:25:6f:44:b5:53:02:c9:33:
                    37:f4:fc:59:52:e6:f3:e8:ba:7b:60:b1:84:51:06:
                    7c:52:18:4f:31:d4:5d:cb:fd:38:65:9e:ab:3e:e4:
                    91:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:58:27:9F:29:4E:E3:AE:9F:0D:3D:D0:EC:F3:45:B8:51:04:5F:A1
            X509v3 Authority Key Identifier:
                keyid:9D:85:DA:D0:2F:C1:77:A4:0E:9B:90:70:23:70:6F:3F:97:74:4D:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DE42D/CC9AA0E641DA11EEB03EBE374AD9E6FC/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DE42D/CC9AA0E641DA11EEB03EBE374AD9E6FC/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:7d:fe:37:47:c5:30:ff:90:73:2e:07:0b:54:5b:e6:03:0a:
         ba:e7:bc:e0:9d:47:7e:25:5b:4b:0f:6b:b1:3c:0b:85:25:51:
         78:19:56:59:cc:bb:69:7d:7c:a0:bd:f6:31:1c:f0:fe:4d:de:
         78:c9:f2:ec:8c:bf:9c:6a:2a:2f:24:a8:46:d6:40:41:a0:f5:
         92:f1:e1:8d:dc:37:9d:71:14:f8:91:95:fc:1f:c0:84:b7:b8:
         66:10:5d:db:24:89:c5:98:f0:0d:b1:8f:17:50:f6:03:a3:5d:
         74:09:6a:22:96:e5:4f:a6:57:51:75:5f:ce:96:cd:f6:ad:7d:
         cb:5c:81:96:46:52:61:70:6b:44:5b:52:69:23:29:f6:38:08:
         36:92:0f:4f:71:5d:d0:b7:b7:70:95:32:bd:b0:d3:76:64:a7:
         b2:95:3c:ef:29:1e:0b:c8:c2:d0:f3:77:cc:07:01:a6:ee:92:
         00:ca:66:7c:a6:fd:ff:91:e7:33:2e:c3:d6:6b:e7:f0:26:ea:
         53:62:3d:a0:eb:fd:c3:a5:46:4f:51:82:2a:f1:b8:35:54:9d:
         fd:71:83:90:2a:91:5e:dd:83:d3:d4:42:b8:16:b2:55:8a:06:
         8d:c8:c0:85:4f:01:dc:fd:af:d6:b4:0c:74:c9:c9:e1:7f:5a:
         d0:ae:d3:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:51:17 2025 by rpki-client