Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/43B0BB76D85DA16925158D5E76180929BFDD03DCB1B46AFD3B1561EB31D82976/0/CB541DB73D995AE55C808A0E77CBFF873CCAE44F.mft
File:                     CB541DB73D995AE55C808A0E77CBFF873CCAE44F.mft (raw, json)
Hash identifier:          FkZLlnsdsm5Pl3+w81avn4vTAGceBCsdzcdLiW9exdU=
Subject key identifier:   E2:7D:7F:76:C2:8C:95:1E:C7:53:46:C0:43:A7:3B:C0:B4:9D:0B:CB
Authority key identifier: CB:54:1D:B7:3D:99:5A:E5:5C:80:8A:0E:77:CB:FF:87:3C:CA:E4:4F
Certificate issuer:       /CN=CB541DB73D995AE55C808A0E77CBFF873CCAE44F
Certificate serial:       3F57F87EEB44BC9C67E55E8A61DDAD9E0D10A635
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB541DB73D995AE55C808A0E77CBFF873CCAE44F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/43B0BB76D85DA16925158D5E76180929BFDD03DCB1B46AFD3B1561EB31D82976/0/CB541DB73D995AE55C808A0E77CBFF873CCAE44F.mft
Manifest number:          01BA
Signing time:             Thu 23 Jul 2026 07:48:10 +0000
Manifest this update:     Thu 23 Jul 2026 07:43:10 +0000
Manifest next update:     Tue 28 Jul 2026 14:19:10 +0000
Files and hashes:         1: CB541DB73D995AE55C808A0E77CBFF873CCAE44F.crl (hash: QHcSEn6A0h/yYfiIlIXVGTXVFOmvsSFXTuj3ZR/bPJ8=)
                          2: 3137302e302e31322e302f32322d3234203d3e20323633313537.roa (hash: f9SrUyZYA550SEyHV5RyaH3qPYLG41cfmER7A4eSG78=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/43B0BB76D85DA16925158D5E76180929BFDD03DCB1B46AFD3B1561EB31D82976/0/CB541DB73D995AE55C808A0E77CBFF873CCAE44F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/43B0BB76D85DA16925158D5E76180929BFDD03DCB1B46AFD3B1561EB31D82976/0/CB541DB73D995AE55C808A0E77CBFF873CCAE44F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB541DB73D995AE55C808A0E77CBFF873CCAE44F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:57:f8:7e:eb:44:bc:9c:67:e5:5e:8a:61:dd:ad:9e:0d:10:a6:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB541DB73D995AE55C808A0E77CBFF873CCAE44F
        Validity
            Not Before: Jul 23 07:43:10 2026 GMT
            Not After : Jul 28 14:19:10 2026 GMT
        Subject: CN=E27D7F76C28C951EC75346C043A73BC0B49D0BCB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:a3:50:01:42:4c:f7:cd:17:8c:0a:4c:ff:0d:
                    56:ab:be:e0:75:ea:1c:e8:ab:40:cf:4b:3d:d1:f1:
                    9a:82:e0:63:cb:ff:5c:85:5a:08:c2:ba:29:d9:f0:
                    6e:55:a1:af:b6:b6:b4:45:e8:a8:2e:e5:f9:18:f0:
                    46:27:44:be:90:17:34:55:eb:af:3d:53:d1:4e:c7:
                    24:98:0a:dc:b9:27:4b:c6:b6:c6:d6:c2:9f:1e:a3:
                    01:ce:1e:94:92:90:c0:4c:98:43:b4:1b:86:b9:2d:
                    4c:2e:d9:0a:32:68:4c:10:d1:b1:6d:25:8c:45:e9:
                    96:31:9e:24:9a:dd:01:d3:d5:51:b3:0a:29:5c:e1:
                    c8:a4:29:f8:07:c0:2e:04:6d:44:28:b1:1d:95:c0:
                    26:60:05:e6:90:80:4f:30:32:6a:40:a7:88:5d:ba:
                    8f:9e:9a:68:97:72:11:f4:98:8b:e0:57:2e:a9:03:
                    f5:5d:52:bd:9a:2a:00:bc:0d:e8:f2:8a:02:1c:5a:
                    4f:cd:22:3e:a8:46:2c:89:45:99:59:9c:ac:f4:2c:
                    35:8a:eb:46:b2:b0:c9:5d:8b:8d:ee:79:29:00:bd:
                    05:d3:8d:f3:9a:7a:7d:27:1f:ba:9c:69:db:cd:96:
                    f4:42:56:11:d9:1d:54:17:72:c0:ab:63:5f:34:9a:
                    d6:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:7D:7F:76:C2:8C:95:1E:C7:53:46:C0:43:A7:3B:C0:B4:9D:0B:CB
            X509v3 Authority Key Identifier:
                keyid:CB:54:1D:B7:3D:99:5A:E5:5C:80:8A:0E:77:CB:FF:87:3C:CA:E4:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/43B0BB76D85DA16925158D5E76180929BFDD03DCB1B46AFD3B1561EB31D82976/0/CB541DB73D995AE55C808A0E77CBFF873CCAE44F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB541DB73D995AE55C808A0E77CBFF873CCAE44F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/43B0BB76D85DA16925158D5E76180929BFDD03DCB1B46AFD3B1561EB31D82976/0/CB541DB73D995AE55C808A0E77CBFF873CCAE44F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:65:0a:99:aa:09:5c:4c:a3:21:6f:98:ff:ff:81:ce:9b:ac:
         47:0c:08:a4:35:db:25:f1:c7:42:7d:61:ae:a8:a6:f9:0d:81:
         28:a3:bd:70:66:7c:af:be:9c:ee:ab:c3:96:87:12:1c:d3:39:
         ef:dd:d6:4c:ce:95:55:4e:c5:1b:a5:fd:83:18:48:aa:8c:92:
         f9:cc:30:66:79:0d:11:bd:80:a5:e3:20:91:6c:65:d0:ad:41:
         98:96:f6:82:39:af:26:6e:cf:13:d7:76:64:2e:d7:78:33:5c:
         1a:b1:79:7c:75:be:f4:05:6d:b0:58:fc:7b:86:32:69:e4:d9:
         03:e2:49:55:95:b9:29:2a:6a:b8:34:77:17:3f:54:e4:b5:30:
         e7:69:91:06:fd:c0:a5:22:bc:bb:15:aa:06:5b:8c:00:95:e9:
         41:b5:05:6a:46:3f:e9:d1:66:07:b7:ad:a3:d7:49:93:13:0b:
         76:54:be:de:b5:4e:40:c8:54:b7:a5:8b:91:f9:87:14:95:25:
         39:f3:64:d1:ca:5a:45:a1:f2:b6:85:a7:63:ae:2e:1a:f5:a2:
         fe:1e:22:39:6b:0e:e2:92:a1:99:62:10:fa:bf:91:56:12:c0:
         25:09:fb:ae:9f:af:ad:e4:ef:a3:f4:12:bd:a7:6c:47:9b:85:
         fd:49:95:9d
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUP1f4futEvJxn5V6KYd2tng0QpjUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0I1NDFEQjczRDk5NUFFNTVDODA4QTBFNzdDQkZGODcz
Q0NBRTQ0RjAeFw0yNjA3MjMwNzQzMTBaFw0yNjA3MjgxNDE5MTBaMDMxMTAvBgNV
BAMTKEUyN0Q3Rjc2QzI4Qzk1MUVDNzUzNDZDMDQzQTczQkMwQjQ5RDBCQ0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDho1ABQkz3zReMCkz/DVarvuB1
6hzoq0DPSz3R8ZqC4GPL/1yFWgjCuinZ8G5Voa+2trRF6Kgu5fkY8EYnRL6QFzRV
6689U9FOxySYCty5J0vGtsbWwp8eowHOHpSSkMBMmEO0G4a5LUwu2QoyaEwQ0bFt
JYxF6ZYxniSa3QHT1VGzCilc4cikKfgHwC4EbUQosR2VwCZgBeaQgE8wMmpAp4hd
uo+emmiXchH0mIvgVy6pA/VdUr2aKgC8DejyigIcWk/NIj6oRiyJRZlZnKz0LDWK
60aysMldi43ueSkAvQXTjfOaen0nH7qcadvNlvRCVhHZHVQXcsCrY180mtb9AgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQU4n1/dsKMlR7HU0bAQ6c7wLSdC8swHwYDVR0j
BBgwFoAUy1Qdtz2ZWuVcgIoOd8v/hzzK5E8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80M0IwQkI3NkQ4NURBMTY5MjUxNThENUU3NjE4MDkyOUJG
REQwM0RDQjFCNDZBRkQzQjE1NjFFQjMxRDgyOTc2LzAvQ0I1NDFEQjczRDk5NUFF
NTVDODA4QTBFNzdDQkZGODczQ0NBRTQ0Ri5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQjU0MURCNzNEOTk1QUU1NUM4
MDhBMEU3N0NCRkY4NzNDQ0FFNDRGLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDNCMEJCNzZEODVEQTE2OTI1MTU4RDVFNzYxODA5MjlCRkREMDNEQ0Ix
QjQ2QUZEM0IxNTYxRUIzMUQ4Mjk3Ni8wL0NCNTQxREI3M0Q5OTVBRTU1QzgwOEEw
RTc3Q0JGRjg3M0NDQUU0NEYubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA9ZQqZqglcTKMhb5j//4HOm6xH
DAikNdsl8cdCfWGuqKb5DYEoo71wZnyvvpzuq8OWhxIc0znv3dZMzpVVTsUbpf2D
GEiqjJL5zDBmeQ0RvYCl4yCRbGXQrUGYlvaCOa8mbs8T13ZkLtd4M1wasXl8db70
BW2wWPx7hjJp5NkD4klVlbkpKmq4NHcXP1TktTDnaZEG/cClIry7FaoGW4wAlelB
tQVqRj/p0WYHt62j10mTEwt2VL7etU5AyFS3pYuR+YcUlSU582TRylpFofK2hadj
ri4a9aL+HiI5aw7ikqGZYhD6v5FWEsAlCfuun6+t5O+j9BK9p2xHm4X9SZWd
-----END CERTIFICATE-----
Generated at Fri Jul 24 16:34:07 2026 by rpki-client