Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
File:                     f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft (raw, json)
Hash identifier:          a1SR6hdgj0xFesQumfc7LKhYNBHG+vv/2jbaW3o91O8=
Subject key identifier:   17:19:EC:85:1D:CD:9E:EA:20:AE:2A:DB:52:8D:13:78:35:D2:2C:5D
Authority key identifier: 7F:7A:C1:80:89:79:83:E2:9E:93:7C:0A:18:78:03:C0:72:75:55:45
Certificate issuer:       /CN=RIPETOAFRINIC/serialNumber=7F7AC180897983E29E937C0A187803C072755545
Certificate serial:       1257
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
Subject info access:      rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
Manifest number:          117C
Signing time:             Sun 15 Nov 2026 00:45:34 +0000
Manifest this update:     Sun 15 Nov 2026 00:45:32 +0000
Manifest next update:     Tue 17 Nov 2026 00:45:32 +0000
Files and hashes:         1: f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl (hash: fBZYFAO2M50X+WIzCUts/uhiJASOTBQLovKVvqdUrN8=)
                          2: KcDd4kMF8g5OWtC7_cAP8XSMpmU.cer (hash: 7P3OQMXmFsOa8WIMclWcCqGJQ7rr260vhG2nME8veoM=)
                          3: wDt4YuRBsALhCei7e6wo-u2Xl08.cer (hash: fJBiv8O0wZh6CtZ9/+QS/zyF54vwRtZW6gmFtWifhNA=)
                          4: n10GlKN56yP6tAip1LvVCOGqOSI.cer (hash: K04OvzkAolzFq1fT1oiHvi+Mj+v62+EgJUQSVJaFvcM=)
                          5: 9Iq-0-yjCOsi4bWiQoTP4eAyz9I.cer (hash: BZnl11DNpWh5PGLZaaoh4nJoG83nXFKoRkTHjhyWgz4=)
                          6: ZbPoGBw9qNHWQehKRcjvgjndfqc.cer (hash: aSidkzKJveb6i/hBK3iEqraQvUvcPExhwR8JmQ3u8Gs=)
                          7: Dri02bCDtqoVZiHtqi0RESt8WAQ.cer (hash: 6COukFYQ6ZIQvJpQFqu133B7MB7eGUg9xOkpwfqs8Qw=)
                          8: wySXsqJX-mcm_Z4GnwWCWtpw-WY.cer (hash: AfzL1WxSfoLeqoguZfbCpKb9Vic4c/fcP8fXCLcEQQ0=)
                          9: eW3qOGfLk4c-eX8UKo65xUiMl4A.cer (hash: mqEsTRKJt26AntvB6W5YNW2DnKeV27rd9z+f53GIxo0=)
                          10: sOuFTcDYmjIzySVR0W0U1DjPVR8.cer (hash: V4+FuUEoCZJ6/ClJ+fuUe/iGrC1jBuQuQZHU+7fX8Q0=)
                          11: 1X3hPvIcIQ_suBv_eMQUm-o6fDI.cer (hash: 7Yf2WnE0MSTH4H3Yv7yD9zrBsRwXsRyyy+8kRrCpH14=)
                          12: OWSdY4-MUgk4TWK4gN9_jH5G4fs.cer (hash: xBt25wdeMT7MFd1dqxS5Fs/a/6hAb2DrhZUOgYIJpek=)
                          13: 6vTkF_QNHJDUbdlViOspDev7ius.cer (hash: Vk6/QhwBtzjIFouUR5GpkXr9wLsJbmz7egRFfNs4fwU=)
                          14: 8GzMRNUs-b4RXOx6TaaxMJukOaU.cer (hash: 1f9QrB5GLNacvyX7ryc+rmCF6Rqqj5DBunkE238OAWs=)
                          15: nYezEXqhvXgot91GTXMHa66NzJY.cer (hash: /3p8PM8g2w6iGXCuh2E3NOY5JJz2WAq1yRiUMQFIv5o=)
                          16: qEB8UNNVEmlZXYTPEkOl86_4EHA.cer (hash: gIOVAzJrB5GBBiknNN57bD8vKs+P+elCD7kOXrr9P7s=)
                          17: D1pm1nbRb8eSfE4kaUoejHekQGs.cer (hash: ESonQPm1BZCZHT8AmAPn4aB2WMWF4HVW9G/XjdItdL0=)
                          18: SGm5dfSdmA_lFc7dSaDEDruBrKI.cer (hash: DdA86ErG2aWUEFY1XPYv5b9pK/sSPti3aZwUKBJ/sE0=)
                          19: 00oZ5jEGlkvQLLLYrRgH35prGQE.cer (hash: LKblwX6VPkqX+5B56CEh+E8d26+ROD/d77JKqICYltw=)
                          20: 3P6jhHci0v7HoDnpkDj3U4JZ0DE.cer (hash: PiWeHC/tbHAm1fE1JWWzKnAwyAo5srtkm1xwcPPCIpA=)
                          21: pyKwoONloK3D2e6zzL_MBi2Q76k.cer (hash: IrSo9ZLwerj9+uDqOJHKXiYYIV/k0fHU25wPuauz04U=)
                          22: gQZ7oJrGc0TwLNTmS2v15M1zuBA.cer (hash: 3DtWEKfWel4Ugy9StOMR1yLEPzZCWovefGWBtkcq17E=)
                          23: YiXGU2dIRI8cYBvpr6uCfJptjJg.cer (hash: P1aSzAVDH5tUU9whtzq2lgECjXLQtpROj+qfdFLtGSY=)
                          24: 7LrLcZq6XTK9mQ7zaFtao2sIygQ.cer (hash: O4IWRrDhqem9+Acu1pAthLUbgTcOC666MpFUC9ANW8k=)
                          25: 8ZI823Vz-wlzku4GArwdsbV78OM.cer (hash: RjzQhisIV4IZBDv1UUEp/AN146ndNgiP56kIgNc3obM=)
                          26: lyz9rusSb2_NRpalkPcBiDeqX_I.cer (hash: QBSq1jgFtVJGdhSF3kq8whg65OLr34x7xuXUJhj45n0=)
                          27: BinJnUdgwom4TNvs8bbBPPUl6q8.cer (hash: hzZBQC0rhVWEHJyovZhr6R4fT883Z/vVYRS/Cu/GUoE=)
                          28: btXWd58RVP-e4YoO_T3bdQZOoeU.cer (hash: 22IzvwF0ubOVwj7dDZXh+HuKNTWvJ+hh/Ol4mnaHd+g=)
                          29: W8VPKEgipxexrUw3z2nQls5_Z3M.cer (hash: a1WXPpH5gOhL3PAp6EzAsA/GCV1/LGE+Yg+s5Pl3/yE=)
                          30: 5jUkb-v3B1Mu2tICGvyHSMFxFq8.cer (hash: DZr1zEYmsmNuEWAIAxR5GzgoUKVNwtM9sbdrMLou0xk=)
                          31: 1F-q3w0PsrIYxNl-HvQbwMkznC8.cer (hash: xpydeokQoxNzDVYCyCJS3vRj2ntfmkb6bVOY0XBoBcE=)
                          32: CBu-ff9M0Q1agvt6aWqU1dTGrvU.cer (hash: YaTTmJfB5qkSFWL9ZYPB5h0TBO5OKdFOj/WIdmLXlIw=)
                          33: MTy_73KkJrBHiE4HS7G7CwL8Vkk.cer (hash: 78cXdx8qWdgwku4h6ARLYUeWMxb0UtRpJquZFI9BgCc=)
                          34: 5pD7ZWuNfQ8PZ22dEnoy3406bYU.cer (hash: nkYQLFEms18aXVHheCfHd/hM6smDyW/5caP1l97myOw=)
                          35: nYXa0C_Bd6QOm5BwI3BvP5d0TaA.cer (hash: WGAjmXTfCgdokK98XyWtkGwWIlDjE34bEfqdPnKFXNM=)
                          36: BMkLD2tuWZT2ZYfjcPf3y-ZhEgc.cer (hash: UNQ9r+ulyKJMsUSDxRq58fXfkcC8uAzkEQnsJKshYVc=)
                          37: dP2KmbmPfFmCclePXqFPEhiXqVs.cer (hash: ODPsy/iImVniqak/Pgduwz/zaZKctT401Fyabu3//kE=)
                          38: VCiBspPW4uKh8hlSyLwDISbuu8k.cer (hash: Q5EknewVPEVZwmglFeD965Bt2h8UU65GklGFGcZ/Alo=)
                          39: ShihNoN8fkklQFrLpOOnPS4t9d4.cer (hash: 9YlJmkUieHtPlYbBVLn2IEVg1vkosZNLAoAs1YdVgt8=)
                          40: bynJvMAklSDlBwZp-vZmUm98jzA.cer (hash: 48HpkA2xVe1po/4zte4zm57TDXGBkFxyvNFS1bmsdbY=)
                          41: 8qncFw2PMqBEwa8QUgRdbU4kIus.cer (hash: WXJbwAZTsEUuaDDDhQ0zysFJXc71VbV+Hx+e9SqnC9Y=)
                          42: i-GoLMm4kURYOcv-vplg8wM9pUI.cer (hash: 7jk8mJ3rCoxrRFhDFkx2XtYZWHW9cChZc7Me/I5u8+g=)
                          43: oHAxgIgisopRzqJ21BM9cIqlFO0.cer (hash: 58jHcj/BEAmJsCs+pzCNIv2iJNAegjttXvaY6UAxVFc=)
                          44: BSuc0Q9q5nsxJ-0SNyR-isRLeaE.cer (hash: IqULL+lG1Z5qhAnwhTtSEmsoGbxU4pT2kMU3GoeUntc=)
                          45: ASV1060ha8xY6Nfdnyk7hGN3150.cer (hash: HgIQo0zmshjlnU/dLzwvFtb/Qi0bvILXtRGW2v30E1w=)
                          46: mwftdzFoum4LC-Pl3LLPeB96yCo.cer (hash: mwUHFb8IaRLlcLhhn/YB6d0ugbt/JKazY6dGaopzai0=)
                          47: 48LJS_VpO0HwWh1WV9GnhLXVcmE.cer (hash: Typpk6tXaearLSR7AFkBBrayaSDOI/ZgTs2Fo/8103k=)
                          48: qq2zeUNQh6CU8n12Cd-4YvxcxGU.cer (hash: aqPqCmyv7jwaNDhMTitwanekt3dmItYEuK1j6O4NCUU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 17 Nov 2026 00:45:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4695 (0x1257)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=RIPETOAFRINIC, serialNumber=7F7AC180897983E29E937C0A187803C072755545
        Validity
            Not Before: Nov 15 00:45:32 2026 GMT
            Not After : Nov 17 00:45:32 2026 GMT
        Subject: CN=6af900ac-9e18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:50:bd:b0:c2:84:3a:8c:c3:34:31:c4:11:63:
                    75:66:17:47:6a:64:b2:38:c2:ec:e0:8e:d6:29:5e:
                    ea:8c:f0:39:27:02:94:c1:85:be:fc:b8:dc:7f:12:
                    4d:49:70:8b:5e:2d:3c:10:c6:84:4d:b3:92:74:dc:
                    31:ce:8b:00:ae:03:a4:42:ce:5e:f7:b1:23:77:47:
                    0a:9e:ce:57:e8:14:db:e6:ef:fe:ce:c3:b0:bc:58:
                    7f:62:ac:57:d6:3f:12:61:39:85:d2:bd:d3:45:71:
                    ad:a1:7c:7d:ba:f4:d4:9c:d8:10:51:90:b4:d8:00:
                    78:47:d8:fe:67:2b:0c:fa:0f:e3:df:54:c9:31:90:
                    4b:b6:ed:99:69:1e:ff:1a:d7:3f:6a:a3:4c:95:df:
                    1d:56:19:3a:5e:72:8d:51:db:17:4e:62:56:a8:31:
                    6e:2f:74:25:83:ea:7c:59:0b:3b:20:67:80:aa:0d:
                    4c:f6:9b:f4:e7:04:ac:f7:9a:a1:2f:42:5e:78:c0:
                    bb:18:07:75:7b:a7:4b:8b:88:1b:a0:95:e7:b4:c5:
                    15:4e:08:46:b1:52:93:22:18:44:53:ef:cb:ab:87:
                    c1:a9:b1:e6:c7:21:47:64:91:ba:a3:8b:de:9e:f5:
                    82:c7:ce:67:0c:72:67:f7:b0:d1:a1:b8:af:c2:da:
                    1f:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:19:EC:85:1D:CD:9E:EA:20:AE:2A:DB:52:8D:13:78:35:D2:2C:5D
            X509v3 Authority Key Identifier:
                keyid:7F:7A:C1:80:89:79:83:E2:9E:93:7C:0A:18:78:03:C0:72:75:55:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:72:76:a6:26:80:ab:79:63:99:c7:b1:1a:80:ef:cd:17:87:
         e3:b9:96:99:e9:c2:ca:1a:52:b7:ba:59:df:38:01:14:a0:8a:
         aa:df:50:0d:4a:0c:9b:bc:87:5c:a2:e5:96:4e:af:7a:69:f9:
         39:e0:db:60:6c:4d:ae:07:9b:47:3e:4f:f8:79:ae:7c:3a:7e:
         b3:a5:db:c9:06:da:ec:31:ed:5f:54:56:05:0d:ab:60:a9:fc:
         fd:c9:bf:72:9c:25:2f:cc:05:02:d5:74:13:9a:79:b6:e6:f1:
         64:d5:34:6f:fe:95:fb:b8:71:44:9c:cd:51:3e:62:e4:bb:ff:
         14:c7:13:1a:20:c2:8f:2e:5b:4d:cd:4d:1e:13:71:ca:7c:99:
         c6:e9:cc:cf:27:14:cb:4e:83:1a:53:48:eb:60:ff:3e:d8:2f:
         5a:de:53:3e:0f:df:78:7b:4c:d6:24:53:78:7f:5a:4f:c8:fe:
         54:e1:b4:01:c9:75:7b:6b:45:43:d6:96:e9:a3:79:f5:2c:8b:
         e3:91:81:d9:70:3f:a1:d4:6f:77:fb:4e:34:a5:2d:8b:a2:11:
         f9:e2:4d:a2:3b:0b:0f:cd:03:35:73:5f:91:da:b6:6a:2e:4a:
         5c:8b:f4:33:1a:a4:5f:e5:85:aa:71:1b:22:98:70:05:39:c1:
         d4:11:8d:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----