Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/08C3EA796DE2A8DC84B989CDFA46FEA0EE10CFB8AA714F20F43D1CB010D4A2AD/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.mft
File:                     2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.mft (raw, json)
Hash identifier:          2LhRRIZNLtvTXbnyC3EjKVy8Nisz3r9ou9bwnfuiYmQ=
Subject key identifier:   01:68:E7:73:58:20:D5:68:C1:5C:02:DB:D7:83:DB:18:3D:8A:B1:4C
Authority key identifier: 2B:96:B9:59:C7:24:5B:9C:BE:8A:E0:F7:BD:6A:75:21:2C:CA:15:89
Certificate issuer:       /CN=2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589
Certificate serial:       23A179DFE338F22C746B42DA55A127924CF8AADF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/08C3EA796DE2A8DC84B989CDFA46FEA0EE10CFB8AA714F20F43D1CB010D4A2AD/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.mft
Manifest number:          01AF
Signing time:             Wed 22 Jul 2026 20:43:34 +0000
Manifest this update:     Wed 22 Jul 2026 20:38:34 +0000
Manifest next update:     Tue 28 Jul 2026 19:58:34 +0000
Files and hashes:         1: 2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.crl (hash: aX5vzj3zPbVoV701D48OiH2EdIvEmY7Uz+Try/uaHJc=)
                          2: 323830333a666265303a3a2f33322d3438203d3e20323730303932.roa (hash: 2yEIjUF2fEPUL86o8w4pwk+eVelS5xc2STIvqPSnONM=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/08C3EA796DE2A8DC84B989CDFA46FEA0EE10CFB8AA714F20F43D1CB010D4A2AD/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.crl
                          rsync://repository.lacnic.net/rpki/lacnic/08C3EA796DE2A8DC84B989CDFA46FEA0EE10CFB8AA714F20F43D1CB010D4A2AD/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:a1:79:df:e3:38:f2:2c:74:6b:42:da:55:a1:27:92:4c:f8:aa:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589
        Validity
            Not Before: Jul 22 20:38:34 2026 GMT
            Not After : Jul 28 19:58:34 2026 GMT
        Subject: CN=0168E7735820D568C15C02DBD783DB183D8AB14C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c3:98:04:2e:95:b8:3e:9a:2d:a2:96:db:30:
                    98:87:35:9f:72:30:06:f9:c9:02:66:67:6e:d1:50:
                    46:7d:27:93:75:0e:1b:a4:d0:53:03:f9:4f:be:da:
                    cf:39:7c:97:65:73:2b:ef:86:d5:75:77:37:86:9e:
                    62:01:72:4b:1f:76:8e:b1:c1:6d:3b:62:97:3a:0f:
                    b9:9f:ac:61:19:0a:75:f8:b7:90:20:53:e3:05:64:
                    ac:25:f1:75:29:5e:0e:94:e6:08:68:fa:ff:05:26:
                    0d:72:74:08:f8:83:82:a8:82:55:05:d3:46:f5:68:
                    03:ab:52:70:3f:0d:f0:e9:23:bc:45:85:46:fe:c4:
                    97:4b:7b:0d:a6:b5:56:2b:7d:99:20:31:c6:36:d8:
                    af:03:5c:ba:76:ef:2e:18:25:26:79:3e:80:06:4f:
                    80:45:d3:c0:cd:ad:d7:02:fe:22:e9:e3:49:66:f0:
                    10:94:2f:13:81:b9:1e:a3:2f:28:be:b2:2c:4d:43:
                    eb:60:ad:ac:14:9f:b4:32:09:a1:32:30:c1:26:e0:
                    34:c2:e3:7c:e4:b6:3c:1e:f6:1e:ab:17:6b:de:44:
                    b4:e5:01:24:e5:fa:28:2a:30:d9:c7:42:27:2b:0b:
                    95:9b:b5:03:24:95:57:96:b4:1e:37:af:22:8b:aa:
                    d0:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:68:E7:73:58:20:D5:68:C1:5C:02:DB:D7:83:DB:18:3D:8A:B1:4C
            X509v3 Authority Key Identifier:
                keyid:2B:96:B9:59:C7:24:5B:9C:BE:8A:E0:F7:BD:6A:75:21:2C:CA:15:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/08C3EA796DE2A8DC84B989CDFA46FEA0EE10CFB8AA714F20F43D1CB010D4A2AD/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/08C3EA796DE2A8DC84B989CDFA46FEA0EE10CFB8AA714F20F43D1CB010D4A2AD/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:ce:1b:ad:db:2c:d4:77:49:b5:03:62:f4:df:17:15:6b:54:
         7f:49:b8:b6:30:b8:5d:5b:8a:fc:6a:a5:2b:b9:14:09:9e:d8:
         1c:4d:a7:2e:d8:dc:ca:3d:3c:a4:0b:78:eb:ce:ae:74:a9:2c:
         ce:0c:f8:03:ee:80:74:7c:9b:f5:52:5b:1d:c0:ef:ab:4a:85:
         f5:a5:6b:c1:66:48:78:84:0d:c7:e6:27:bb:72:27:a3:1a:99:
         5b:08:51:85:70:ba:77:c2:db:7c:5a:e5:3f:d3:b9:cd:7a:f0:
         32:e7:74:cb:13:f5:f8:46:80:b5:49:e8:4d:a7:e8:8f:2d:97:
         71:ab:da:11:13:90:8a:c8:d1:f5:cb:4a:44:ba:fa:b5:c3:3d:
         ef:72:7e:c0:b7:e1:65:4f:e3:66:91:73:d0:29:f2:ac:2d:c0:
         b8:28:c0:bb:e9:11:96:af:61:20:b0:24:8c:9b:01:ad:9b:b1:
         a9:a2:23:bd:2c:87:4c:4c:da:74:00:af:f4:a6:35:b5:32:5f:
         c3:50:bd:eb:b7:39:42:ce:b6:23:51:15:64:22:e2:02:cf:f5:
         de:e8:b3:3a:7d:41:68:6b:89:1c:2e:d9:fe:ba:9a:ff:cb:56:
         98:9e:6d:89:7a:2e:ad:c1:72:74:24:54:03:34:b5:9c:49:12:
         d1:77:8a:8b
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUI6F53+M48ix0a0LaVaEnkkz4qt8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkI5NkI5NTlDNzI0NUI5Q0JFOEFFMEY3QkQ2QTc1MjEy
Q0NBMTU4OTAeFw0yNjA3MjIyMDM4MzRaFw0yNjA3MjgxOTU4MzRaMDMxMTAvBgNV
BAMTKDAxNjhFNzczNTgyMEQ1NjhDMTVDMDJEQkQ3ODNEQjE4M0Q4QUIxNEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHw5gELpW4PpotopbbMJiHNZ9y
MAb5yQJmZ27RUEZ9J5N1Dhuk0FMD+U++2s85fJdlcyvvhtV1dzeGnmIBcksfdo6x
wW07Ypc6D7mfrGEZCnX4t5AgU+MFZKwl8XUpXg6U5gho+v8FJg1ydAj4g4KoglUF
00b1aAOrUnA/DfDpI7xFhUb+xJdLew2mtVYrfZkgMcY22K8DXLp27y4YJSZ5PoAG
T4BF08DNrdcC/iLp40lm8BCULxOBuR6jLyi+sixNQ+tgrawUn7QyCaEyMMEm4DTC
43zktjwe9h6rF2veRLTlASTl+igqMNnHQicrC5WbtQMklVeWtB43ryKLqtAzAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUAWjnc1gg1WjBXALb14PbGD2KsUwwHwYDVR0j
BBgwFoAUK5a5WcckW5y+iuD3vWp1ISzKFYkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wOEMzRUE3OTZERTJBOERDODRCOTg5Q0RGQTQ2RkVBMEVF
MTBDRkI4QUE3MTRGMjBGNDNEMUNCMDEwRDRBMkFELzAvMkI5NkI5NTlDNzI0NUI5
Q0JFOEFFMEY3QkQ2QTc1MjEyQ0NBMTU4OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yQjk2Qjk1OUM3MjQ1QjlDQkU4
QUUwRjdCRDZBNzUyMTJDQ0ExNTg5LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDhDM0VBNzk2REUyQThEQzg0Qjk4OUNERkE0NkZFQTBFRTEwQ0ZCOEFB
NzE0RjIwRjQzRDFDQjAxMEQ0QTJBRC8wLzJCOTZCOTU5QzcyNDVCOUNCRThBRTBG
N0JENkE3NTIxMkNDQTE1ODkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAizhut2yzUd0m1A2L03xcVa1R/
Sbi2MLhdW4r8aqUruRQJntgcTacu2NzKPTykC3jrzq50qSzODPgD7oB0fJv1Ulsd
wO+rSoX1pWvBZkh4hA3H5ie7ciejGplbCFGFcLp3wtt8WuU/07nNevAy53TLE/X4
RoC1SehNp+iPLZdxq9oRE5CKyNH1y0pEuvq1wz3vcn7At+FlT+NmkXPQKfKsLcC4
KMC76RGWr2EgsCSMmwGtm7GpoiO9LIdMTNp0AK/0pjW1Ml/DUL3rtzlCzrYjURVk
IuICz/Xe6LM6fUFoa4kcLtn+upr/y1aYnm2Jei6twXJ0JFQDNLWcSRLRd4qL
-----END CERTIFICATE-----
Generated at Fri Jul 24 21:14:06 2026 by rpki-client