Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36FB4CD/B321F4FEC17D11F1A69FE1DCCE1D38B0/Dri02bCDtqoVZiHtqi0RESt8WAQ.mft
File:                     Dri02bCDtqoVZiHtqi0RESt8WAQ.mft (raw, json)
Hash identifier:          422p+5ugfAYyPnGZl+1xSL538FlMv1ruvSFnAO1tNlo=
Subject key identifier:   16:6B:66:48:A7:E4:AC:1E:3B:ED:CA:47:66:51:EF:E5:C0:A9:D0:C8
Authority key identifier: 0E:B8:B4:D9:B0:83:B6:AA:15:66:21:ED:AA:2D:11:11:2B:7C:58:04
Certificate issuer:       /CN=F36FB4CDRI/serialNumber=0EB8B4D9B083B6AA156621EDAA2D11112B7C5804
Certificate serial:       29
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/Dri02bCDtqoVZiHtqi0RESt8WAQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FB4CD/B321F4FEC17D11F1A69FE1DCCE1D38B0/Dri02bCDtqoVZiHtqi0RESt8WAQ.mft
Manifest number:          29
Signing time:             Sun 15 Nov 2026 05:58:56 +0000
Manifest this update:     Sun 15 Nov 2026 05:58:55 +0000
Manifest next update:     Tue 17 Nov 2026 05:58:55 +0000
Files and hashes:         1: Dri02bCDtqoVZiHtqi0RESt8WAQ.crl (hash: tiiB2TxDOaXuEBnANJBa4zyAA5cRoUPJ78pSaxqyZkw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FB4CD/B321F4FEC17D11F1A69FE1DCCE1D38B0/Dri02bCDtqoVZiHtqi0RESt8WAQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FB4CD/B321F4FEC17D11F1A69FE1DCCE1D38B0/Dri02bCDtqoVZiHtqi0RESt8WAQ.mft
                          rsync://rpki.afrinic.net/repository/ripe/Dri02bCDtqoVZiHtqi0RESt8WAQ.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 17 Nov 2026 00:45:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 41 (0x29)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FB4CDRI, serialNumber=0EB8B4D9B083B6AA156621EDAA2D11112B7C5804
        Validity
            Not Before: Nov 15 05:58:55 2026 GMT
            Not After : Nov 17 05:58:55 2026 GMT
        Subject: CN=6af94a20-6302
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:55:05:62:85:b7:01:be:ba:51:a8:21:3e:ec:
                    3a:24:75:fd:cd:2a:6d:5d:a1:99:28:c7:38:8b:66:
                    30:ee:fa:d7:35:6d:87:ba:a5:f0:71:48:48:eb:c5:
                    10:4e:00:65:bf:40:ae:2f:cf:f1:0d:df:24:6f:4f:
                    a8:7d:91:33:f2:5a:73:41:18:a5:e2:c0:e7:12:95:
                    4c:8a:3d:f9:38:62:12:5b:4d:83:f0:6d:6b:ec:50:
                    d2:68:ce:4a:dc:19:cf:c2:88:65:9d:92:43:ef:7b:
                    1b:f1:95:a9:5c:ce:6b:27:2b:90:ff:ad:cd:6b:71:
                    f9:7d:53:8c:34:38:57:10:75:4c:32:80:5a:62:6e:
                    a0:a6:28:d2:bc:68:81:f4:6d:6a:84:df:be:06:05:
                    90:15:28:fc:65:84:1e:d4:de:96:96:4e:b5:ff:05:
                    a8:64:ef:66:36:84:98:ae:ed:1d:23:4a:29:6c:12:
                    f6:b3:9d:bb:5d:66:98:7a:88:ae:8b:38:6c:e2:8e:
                    8d:9b:f0:80:ce:e2:47:49:d3:cb:37:af:ba:19:fe:
                    ea:58:37:ba:9a:53:1e:aa:21:69:71:5d:ce:50:99:
                    20:1f:9a:fc:d1:02:11:81:92:0d:34:6b:43:e0:b6:
                    83:e9:fb:2d:5b:22:d6:36:9b:cd:56:2a:64:5c:30:
                    c1:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:6B:66:48:A7:E4:AC:1E:3B:ED:CA:47:66:51:EF:E5:C0:A9:D0:C8
            X509v3 Authority Key Identifier:
                keyid:0E:B8:B4:D9:B0:83:B6:AA:15:66:21:ED:AA:2D:11:11:2B:7C:58:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FB4CD/B321F4FEC17D11F1A69FE1DCCE1D38B0/Dri02bCDtqoVZiHtqi0RESt8WAQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/Dri02bCDtqoVZiHtqi0RESt8WAQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FB4CD/B321F4FEC17D11F1A69FE1DCCE1D38B0/Dri02bCDtqoVZiHtqi0RESt8WAQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:14:80:d5:fc:9e:f8:f8:57:8f:cb:90:db:7c:4a:a8:25:90:
         c9:db:97:76:df:ed:7f:48:82:3b:22:5c:83:a8:20:04:82:6b:
         56:49:ab:c0:2b:0a:67:e2:8f:ac:db:5f:e7:b0:96:13:be:35:
         f1:c1:16:b3:51:50:a0:a1:95:37:6f:6e:7e:43:84:4d:01:c7:
         4e:d0:22:5c:54:a6:3a:20:be:79:ab:a0:0a:29:3f:38:d0:1c:
         6c:f0:d0:d8:5d:5e:3d:76:17:38:c8:d3:fc:a7:6e:57:25:ee:
         fe:fc:4b:c5:fd:6e:3d:64:32:15:d2:2d:5e:ca:55:05:9f:6e:
         1a:d4:5c:38:8d:4f:88:b9:8c:a9:d4:78:a7:a5:d0:90:ed:f2:
         9e:9e:d4:a2:35:3d:a0:7d:65:81:1f:5c:f7:b5:99:dc:de:21:
         31:8e:f8:2c:d3:53:31:cd:d2:e9:a8:93:72:22:7c:48:3a:73:
         61:32:f7:79:39:3c:02:7f:c1:16:2e:2a:67:a5:31:a0:e0:44:
         c9:27:83:db:99:0c:ed:bf:ee:14:2b:3b:65:e2:0a:ab:88:02:
         47:f2:26:27:a4:e6:fa:2f:ef:96:98:8a:e0:1c:95:07:11:a5:
         b4:91:c5:90:ef:eb:ee:c7:24:01:9e:ab:37:aa:1c:e2:21:c0:
         ce:af:d2:00
-----BEGIN CERTIFICATE-----
MIIFkjCCBHqgAwIBAgIBKTANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzZG
QjRDRFJJMTEwLwYDVQQFEygwRUI4QjREOUIwODNCNkFBMTU2NjIxRURBQTJEMTEx
MTJCN0M1ODA0MB4XDTI2MTExNTA1NTg1NVoXDTI2MTExNzA1NTg1NVowGDEWMBQG
A1UEAxMNNmFmOTRhMjAtNjMwMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOZVBWKFtwG+ulGoIT7sOiR1/c0qbV2hmSjHOItmMO761zVth7ql8HFISOvF
EE4AZb9Ari/P8Q3fJG9PqH2RM/Jac0EYpeLA5xKVTIo9+ThiEltNg/Bta+xQ0mjO
StwZz8KIZZ2SQ+97G/GVqVzOaycrkP+tzWtx+X1TjDQ4VxB1TDKAWmJuoKYo0rxo
gfRtaoTfvgYFkBUo/GWEHtTelpZOtf8FqGTvZjaEmK7tHSNKKWwS9rOdu11mmHqI
ros4bOKOjZvwgM7iR0nTyzevuhn+6lg3uppTHqohaXFdzlCZIB+a/NECEYGSDTRr
Q+C2g+n7LVsi1jabzVYqZFwwwcMCAwEAAaOCArUwggKxMB0GA1UdDgQWBBQWa2ZI
p+SsHjvtykdmUe/lwKnQyDAfBgNVHSMEGDAWgBQOuLTZsIO2qhVmIe2qLRERK3xY
BDAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2RkI0Q0QvQjMyMUY0RkVDMTdEMTFGMUE2OUZFMURDQ0UxRDM4QjAvRHJpMDJi
Q0R0cW9WWmlIdHFpMFJFU3Q4V0FRLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L3JpcGUv
RHJpMDJiQ0R0cW9WWmlIdHFpMFJFU3Q4V0FRLmNlcjBPBgNVHSABAf8ERTBDMEEG
CCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmljLm5l
dC9wb2xpY3kvQ1BTLnBkZjCB1QYIKwYBBQUHAQsEgcgwgcUwgYsGCCsGAQUFBzAL
hn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVw
b3NpdG9yeS9GMzZGQjRDRC9CMzIxRjRGRUMxN0QxMUYxQTY5RkUxRENDRTFEMzhC
MC9EcmkwMmJDRHRxb1ZaaUh0cWkwUkVTdDhXQVEubWZ0MDUGCCsGAQUFBzANhilo
dHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEF
BQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwDQYJKoZIhvcNAQELBQADggEBAK4UgNX8nvj4V4/LkNt8SqglkMnbl3bf7X9I
gjsiXIOoIASCa1ZJq8ArCmfij6zbX+ewlhO+NfHBFrNRUKChlTdvbn5DhE0Bx07Q
IlxUpjogvnmroAopPzjQHGzw0NhdXj12FzjI0/ynblcl7v78S8X9bj1kMhXSLV7K
VQWfbhrUXDiNT4i5jKnUeKel0JDt8p6e1KI1PaB9ZYEfXPe1mdzeITGO+CzTUzHN
0umok3IifEg6c2Ey93k5PAJ/wRYuKmelMaDgRMkng9uZDO2/7hQrO2XiCquIAkfy
Jiek5vov75aYiuAclQcRpbSRxZDv6+7HJAGeqzeqHOIhwM6v0gA=
-----END CERTIFICATE-----