Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EE14C/5EA2D1DCDBE811EE89324E7F775412E6/3Y7gOV77NMQJjlduH6lWEvCuEIw.mft
File:                     3Y7gOV77NMQJjlduH6lWEvCuEIw.mft (raw, json)
Hash identifier:          S/Us4uMKqbIS3uVKI86QqAcfpDU140+ct0614H3Ot7Q=
Subject key identifier:   EB:73:6A:9C:FD:57:00:E5:72:0F:C2:B4:CA:D8:14:84:66:D4:5F:FD
Authority key identifier: DD:8E:E0:39:5E:FB:34:C4:09:8E:57:6E:1F:A9:56:12:F0:AE:10:8C
Certificate issuer:       /CN=F36EE14CAF/serialNumber=DD8EE0395EFB34C4098E576E1FA95612F0AE108C
Certificate serial:       022E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/3Y7gOV77NMQJjlduH6lWEvCuEIw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EE14C/5EA2D1DCDBE811EE89324E7F775412E6/3Y7gOV77NMQJjlduH6lWEvCuEIw.mft
Manifest number:          022A
Signing time:             Sat 23 Aug 2025 04:23:18 +0000
Manifest this update:     Sat 23 Aug 2025 04:23:18 +0000
Manifest next update:     Mon 25 Aug 2025 04:23:18 +0000
Files and hashes:         1: 3Y7gOV77NMQJjlduH6lWEvCuEIw.crl (hash: ZNK0ott0Jjklax0f9W4Nw3b1uvtlX+7WAGFVnadaaeQ=)
                          2: 41ED69D60D1511EFA8396400017001B1.roa (hash: x3aVslqCzMfioshN80Dla6JteewrsmH2GjIbIFA+j2M=)
                          3: 1A07CB8EDBEA11EEA45EFA81775412E6.roa (hash: Pkjs2jgzXCv29HKkqLFfvU1IeY4hITiyODVD/2YyWlE=)
                          4: A07BB004DBEA11EE8E03CC82775412E6.roa (hash: 5FeX+dqvUeIECgzm38Ru/fnBhkIsH4lq/tNWx1MCZM8=)
                          5: 6B9CD7800D1511EFB6A61201017001B1.roa (hash: ssvUYk5x0OzQ7Q0Xp7UErygVy3MmZIG7nazU7zgnCUM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36EE14C/5EA2D1DCDBE811EE89324E7F775412E6/3Y7gOV77NMQJjlduH6lWEvCuEIw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36EE14C/5EA2D1DCDBE811EE89324E7F775412E6/3Y7gOV77NMQJjlduH6lWEvCuEIw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/3Y7gOV77NMQJjlduH6lWEvCuEIw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Aug 2025 00:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 558 (0x22e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EE14CAF, serialNumber=DD8EE0395EFB34C4098E576E1FA95612F0AE108C
        Validity
            Not Before: Aug 23 04:23:18 2025 GMT
            Not After : Aug 25 04:23:18 2025 GMT
        Subject: CN=68a94236-b3eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:e6:59:ec:59:e0:97:5b:0b:8e:43:b5:b0:1e:
                    c5:47:e0:42:c4:0d:f9:61:b1:84:7a:4f:52:e2:de:
                    c4:b4:d0:ef:6a:8f:2f:63:22:23:7a:25:db:5f:58:
                    3f:ed:45:5a:58:91:5e:34:d7:f7:aa:11:4d:3e:01:
                    d8:ce:f1:53:c8:ed:62:2f:a5:c1:a4:75:f5:07:22:
                    3d:a1:3b:79:0d:05:35:00:22:9d:44:44:6d:92:9c:
                    0a:96:2f:25:4c:3a:e0:2c:d2:7a:f5:79:1c:34:c7:
                    2c:c9:ea:e4:d4:67:51:e8:51:ac:e2:72:c8:7e:59:
                    46:09:07:62:e3:21:8e:d4:09:61:41:c7:56:28:36:
                    de:c7:03:58:c1:9b:d6:50:79:b3:d4:2c:aa:99:65:
                    6e:64:f7:ba:e7:1a:55:5d:67:45:96:46:99:97:ae:
                    a3:18:fc:63:f5:f7:06:64:c1:a5:6d:f8:d3:64:84:
                    8d:76:8a:be:44:94:0a:6d:f5:50:7f:e3:c4:ad:2a:
                    e4:06:c3:fd:be:b2:f6:2a:44:29:77:ef:cf:b5:36:
                    f5:73:a4:a9:0f:e8:28:ed:f5:31:5f:87:d4:a0:96:
                    fe:45:b2:b6:fd:84:2b:98:cc:47:3b:22:06:2d:92:
                    22:8a:2d:18:97:58:97:f6:0d:cc:ab:a7:4c:b8:0b:
                    f8:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:73:6A:9C:FD:57:00:E5:72:0F:C2:B4:CA:D8:14:84:66:D4:5F:FD
            X509v3 Authority Key Identifier:
                keyid:DD:8E:E0:39:5E:FB:34:C4:09:8E:57:6E:1F:A9:56:12:F0:AE:10:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EE14C/5EA2D1DCDBE811EE89324E7F775412E6/3Y7gOV77NMQJjlduH6lWEvCuEIw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/3Y7gOV77NMQJjlduH6lWEvCuEIw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EE14C/5EA2D1DCDBE811EE89324E7F775412E6/3Y7gOV77NMQJjlduH6lWEvCuEIw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:f3:2d:18:90:89:11:3b:19:a7:81:63:2f:a2:de:ac:af:5a:
         6f:d0:6a:ff:e6:00:ce:7e:9a:63:83:d4:35:df:6f:26:23:e1:
         42:c0:d0:27:77:a7:33:b2:ef:3d:62:26:66:e7:95:58:39:35:
         c6:3a:34:93:18:77:75:1d:94:75:17:76:fe:d8:41:fc:3a:b9:
         4b:dd:e4:32:06:7f:77:ce:4f:cb:69:01:47:ca:a8:03:76:1e:
         37:53:63:f1:08:29:7a:86:36:63:bd:2c:77:83:54:36:d9:a4:
         10:b5:b5:8d:a0:89:7b:17:ed:88:39:b8:59:30:b2:a3:26:5c:
         b6:d4:ad:05:c0:22:4f:80:33:5c:3f:34:bb:be:7d:39:72:9a:
         a5:51:09:c1:bb:e0:74:fa:b5:d7:a1:23:b4:c5:8b:43:43:27:
         26:8d:09:c3:d1:26:eb:2f:64:d7:30:7b:d8:7d:9b:4c:96:40:
         c5:a8:50:cb:b3:e9:2f:d5:39:2b:07:65:16:46:5e:9c:c9:90:
         ed:6c:ae:3c:67:5b:a3:47:b0:3d:52:73:dd:05:15:8b:7c:eb:
         09:f4:0a:9d:d6:a2:c4:a2:73:14:74:db:73:79:bc:b9:60:ce:
         8a:1d:13:ae:b7:10:95:f7:e7:d8:ef:69:d3:1b:54:56:da:02:
         b8:b0:1c:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:11:59 2025 by rpki-client