Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3624A99FB93ACECC7885D4DD4DB61DB734D523D3ADB766D395D260289BED5F6F/0/BAFB10BE93E03DE3AD7011080A4B6D0BEC2818F2.mft
File:                     BAFB10BE93E03DE3AD7011080A4B6D0BEC2818F2.mft (raw, json)
Hash identifier:          8o+vsbxOGo7ZlrUmcTkYmzYw+tb8LBa0TljYBG88uFA=
Subject key identifier:   09:D7:74:72:77:E8:F9:4E:6F:F8:78:FE:B2:8A:D1:3F:42:1F:D9:3F
Authority key identifier: BA:FB:10:BE:93:E0:3D:E3:AD:70:11:08:0A:4B:6D:0B:EC:28:18:F2
Certificate issuer:       /CN=BAFB10BE93E03DE3AD7011080A4B6D0BEC2818F2
Certificate serial:       466EA2AF44DF8B06FA1FE65ADE1FF0423BAE132D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BAFB10BE93E03DE3AD7011080A4B6D0BEC2818F2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3624A99FB93ACECC7885D4DD4DB61DB734D523D3ADB766D395D260289BED5F6F/0/BAFB10BE93E03DE3AD7011080A4B6D0BEC2818F2.mft
Manifest number:          24
Signing time:             Thu 23 Jul 2026 20:01:14 +0000
Manifest this update:     Thu 23 Jul 2026 19:56:14 +0000
Manifest next update:     Wed 29 Jul 2026 18:14:14 +0000
Files and hashes:         1: BAFB10BE93E03DE3AD7011080A4B6D0BEC2818F2.crl (hash: d7Yw3wI4OBIm8WRUDeej+Gb7gMSp5hgfx12pPNeVXHs=)
                          2: 323830333a6235303a3a2f33322d3438203d3e20323733393033.roa (hash: cLm/sOtijv9tUxv0gNYeq+uzl28t20gf139GQKEZj0g=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3624A99FB93ACECC7885D4DD4DB61DB734D523D3ADB766D395D260289BED5F6F/0/BAFB10BE93E03DE3AD7011080A4B6D0BEC2818F2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3624A99FB93ACECC7885D4DD4DB61DB734D523D3ADB766D395D260289BED5F6F/0/BAFB10BE93E03DE3AD7011080A4B6D0BEC2818F2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BAFB10BE93E03DE3AD7011080A4B6D0BEC2818F2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:6e:a2:af:44:df:8b:06:fa:1f:e6:5a:de:1f:f0:42:3b:ae:13:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BAFB10BE93E03DE3AD7011080A4B6D0BEC2818F2
        Validity
            Not Before: Jul 23 19:56:14 2026 GMT
            Not After : Jul 29 18:14:14 2026 GMT
        Subject: CN=09D7747277E8F94E6FF878FEB28AD13F421FD93F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:ca:ac:bc:71:f4:62:e1:39:87:59:60:b0:3d:
                    d8:bd:11:17:a9:88:e6:a9:df:2b:6c:aa:b9:c6:16:
                    67:f0:7f:6f:e8:c6:dc:6e:3a:68:60:3a:57:71:ca:
                    d9:4b:52:5c:1f:16:4e:be:0d:7f:0b:bc:52:1d:b8:
                    df:ee:2b:7b:80:84:fa:e0:db:66:5b:7b:0b:ce:0e:
                    3c:a9:d3:ad:f2:6a:14:dd:63:e2:dc:e7:f2:ae:43:
                    3f:4f:fe:8f:38:8b:49:64:e9:f3:ca:bc:97:3d:8a:
                    48:43:75:d0:c8:52:45:d3:33:77:d7:89:a5:d6:19:
                    07:60:61:49:ed:30:95:f6:f4:23:f3:37:20:f4:96:
                    4c:07:b5:30:fa:cc:ad:eb:54:4a:06:15:7a:e9:e2:
                    7b:ef:10:b2:82:53:95:8b:17:f0:c2:8d:40:41:f5:
                    1d:24:4d:37:3d:a4:eb:88:f1:9e:3b:d8:80:fd:d9:
                    69:42:d2:3f:44:f6:05:0f:f9:e7:f5:6a:4d:07:60:
                    86:49:e1:b7:84:b7:91:94:7a:b1:6a:fe:df:bf:e3:
                    e6:08:da:8b:8f:aa:c6:08:59:9c:ec:23:2f:a9:fb:
                    59:87:ef:f3:7f:d0:bc:94:94:7f:b5:6b:da:e4:26:
                    a4:41:64:da:ed:a7:99:1e:bf:d0:58:19:80:6c:d4:
                    58:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:D7:74:72:77:E8:F9:4E:6F:F8:78:FE:B2:8A:D1:3F:42:1F:D9:3F
            X509v3 Authority Key Identifier:
                keyid:BA:FB:10:BE:93:E0:3D:E3:AD:70:11:08:0A:4B:6D:0B:EC:28:18:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3624A99FB93ACECC7885D4DD4DB61DB734D523D3ADB766D395D260289BED5F6F/0/BAFB10BE93E03DE3AD7011080A4B6D0BEC2818F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BAFB10BE93E03DE3AD7011080A4B6D0BEC2818F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3624A99FB93ACECC7885D4DD4DB61DB734D523D3ADB766D395D260289BED5F6F/0/BAFB10BE93E03DE3AD7011080A4B6D0BEC2818F2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:ce:6e:01:9f:07:f5:2a:ce:6e:da:7c:52:ad:b9:3e:69:69:
         27:8e:d0:eb:ea:83:a5:9c:ba:a2:f9:ac:b0:f1:9c:6d:49:10:
         af:6c:57:19:c8:4e:7e:d3:ca:5c:18:e8:34:79:e5:62:93:35:
         47:51:ea:2c:40:0d:e4:8d:85:95:de:89:a0:25:46:9b:0a:9e:
         24:fb:64:67:50:57:20:5f:15:f3:dc:47:ef:67:b4:00:ac:80:
         84:7a:69:c6:73:4b:94:6e:7b:29:fc:9b:e5:47:dd:3b:f6:05:
         86:4d:f6:42:48:af:db:be:c0:9b:6d:14:ef:9d:b0:72:ca:d9:
         f3:ae:b2:0a:2f:e0:0b:8f:40:7b:42:5e:7a:7d:4b:f7:9e:8d:
         18:53:6c:60:94:5d:76:25:2d:d1:08:4c:d9:41:8e:9e:4f:1a:
         b5:71:08:50:43:7b:ec:b9:9d:42:a6:4a:f3:26:a7:7f:cd:d0:
         91:27:7b:b0:d8:f8:ac:71:2e:db:39:bc:63:f8:42:cf:f6:82:
         a3:e1:61:05:69:e2:29:08:eb:3a:b1:d0:d6:6a:be:07:35:00:
         94:ff:9b:76:8a:ae:d1:e0:35:68:64:9e:87:bc:e0:a2:b0:ba:
         57:40:44:b3:9e:bb:f4:08:e3:37:d9:1b:98:e9:81:ca:9d:d6:
         36:70:5b:8d
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIURm6ir0Tfiwb6H+Za3h/wQjuuEy0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkFGQjEwQkU5M0UwM0RFM0FENzAxMTA4MEE0QjZEMEJF
QzI4MThGMjAeFw0yNjA3MjMxOTU2MTRaFw0yNjA3MjkxODE0MTRaMDMxMTAvBgNV
BAMTKDA5RDc3NDcyNzdFOEY5NEU2RkY4NzhGRUIyOEFEMTNGNDIxRkQ5M0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqyqy8cfRi4TmHWWCwPdi9ERep
iOap3ytsqrnGFmfwf2/oxtxuOmhgOldxytlLUlwfFk6+DX8LvFIduN/uK3uAhPrg
22ZbewvODjyp063yahTdY+Lc5/KuQz9P/o84i0lk6fPKvJc9ikhDddDIUkXTM3fX
iaXWGQdgYUntMJX29CPzNyD0lkwHtTD6zK3rVEoGFXrp4nvvELKCU5WLF/DCjUBB
9R0kTTc9pOuI8Z472ID92WlC0j9E9gUP+ef1ak0HYIZJ4beEt5GUerFq/t+/4+YI
2ouPqsYIWZzsIy+p+1mH7/N/0LyUlH+1a9rkJqRBZNrtp5kev9BYGYBs1FgFAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUCdd0cnfo+U5v+Hj+sorRP0If2T8wHwYDVR0j
BBgwFoAUuvsQvpPgPeOtcBEICkttC+woGPIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zNjI0QTk5RkI5M0FDRUNDNzg4NUQ0REQ0REI2MURCNzM0
RDUyM0QzQURCNzY2RDM5NUQyNjAyODlCRUQ1RjZGLzAvQkFGQjEwQkU5M0UwM0RF
M0FENzAxMTA4MEE0QjZEMEJFQzI4MThGMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CQUZCMTBCRTkzRTAzREUzQUQ3
MDExMDgwQTRCNkQwQkVDMjgxOEYyLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMzYyNEE5OUZCOTNBQ0VDQzc4ODVENERENERCNjFEQjczNEQ1MjNEM0FE
Qjc2NkQzOTVEMjYwMjg5QkVENUY2Ri8wL0JBRkIxMEJFOTNFMDNERTNBRDcwMTEw
ODBBNEI2RDBCRUMyODE4RjIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBgzm4Bnwf1Ks5u2nxSrbk+aWkn
jtDr6oOlnLqi+ayw8ZxtSRCvbFcZyE5+08pcGOg0eeVikzVHUeosQA3kjYWV3omg
JUabCp4k+2RnUFcgXxXz3EfvZ7QArICEemnGc0uUbnsp/JvlR9079gWGTfZCSK/b
vsCbbRTvnbByytnzrrIKL+ALj0B7Ql56fUv3no0YU2xglF12JS3RCEzZQY6eTxq1
cQhQQ3vsuZ1CpkrzJqd/zdCRJ3uw2PiscS7bObxj+ELP9oKj4WEFaeIpCOs6sdDW
ar4HNQCU/5t2iq7R4DVoZJ6HvOCisLpXQESznrv0COM32RuY6YHKndY2cFuN
-----END CERTIFICATE-----
Generated at Fri Jul 24 18:50:47 2026 by rpki-client