Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7A87789620AEF1171C85AEBA41FEFDB2A3B68A65BE2902CE933B4A83911C8A21/0/35E5BB60F45DA7A5EB8398E119BF3E9C2EA594B2.mft
File:                     35E5BB60F45DA7A5EB8398E119BF3E9C2EA594B2.mft (raw, json)
Hash identifier:          koKFtTRNlOaFmCqxncWCEnh/3c6D8LaY+hxMSVQOYHc=
Subject key identifier:   4A:4C:90:A1:17:30:F6:32:FC:41:67:92:54:66:A1:05:F3:10:F0:66
Authority key identifier: 35:E5:BB:60:F4:5D:A7:A5:EB:83:98:E1:19:BF:3E:9C:2E:A5:94:B2
Certificate issuer:       /CN=35E5BB60F45DA7A5EB8398E119BF3E9C2EA594B2
Certificate serial:       67A775E468AF45CD2E51EBDCFDEC0E96ACA03AB1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35E5BB60F45DA7A5EB8398E119BF3E9C2EA594B2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7A87789620AEF1171C85AEBA41FEFDB2A3B68A65BE2902CE933B4A83911C8A21/0/35E5BB60F45DA7A5EB8398E119BF3E9C2EA594B2.mft
Manifest number:          0195
Signing time:             Wed 13 May 2026 06:34:57 +0000
Manifest this update:     Wed 13 May 2026 06:29:57 +0000
Manifest next update:     Mon 18 May 2026 23:21:57 +0000
Files and hashes:         1: 3230302e31322e3139322e302f32342d3234203d3e203532323933.roa (hash: VOwfRTx8AbmRJ6q7IAO+ZBHe6bq2jnFxRJymsUhD8Dg=)
                          2: 35E5BB60F45DA7A5EB8398E119BF3E9C2EA594B2.crl (hash: at+tQg7gDq0HT/+Z2eYhwN6ynU9I5GT3DA70CSeFEY0=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7A87789620AEF1171C85AEBA41FEFDB2A3B68A65BE2902CE933B4A83911C8A21/0/35E5BB60F45DA7A5EB8398E119BF3E9C2EA594B2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7A87789620AEF1171C85AEBA41FEFDB2A3B68A65BE2902CE933B4A83911C8A21/0/35E5BB60F45DA7A5EB8398E119BF3E9C2EA594B2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35E5BB60F45DA7A5EB8398E119BF3E9C2EA594B2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 16 May 2026 11:23:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:a7:75:e4:68:af:45:cd:2e:51:eb:dc:fd:ec:0e:96:ac:a0:3a:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35E5BB60F45DA7A5EB8398E119BF3E9C2EA594B2
        Validity
            Not Before: May 13 06:29:57 2026 GMT
            Not After : May 18 23:21:57 2026 GMT
        Subject: CN=4A4C90A11730F632FC4167925466A105F310F066
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b8:39:5c:46:f2:65:b7:25:e0:52:2b:29:e5:
                    65:5f:05:ce:42:21:1b:56:4d:19:0a:23:03:22:5b:
                    e0:be:8d:af:40:cb:a0:2e:fa:c8:66:46:67:57:f9:
                    4c:c5:1f:eb:97:4f:a0:03:e8:2f:f0:1f:72:3b:4e:
                    7d:0d:ef:fb:0c:b2:be:6d:29:18:94:f6:fb:fc:78:
                    bb:16:99:53:f3:56:35:85:ed:be:64:b4:fd:31:2f:
                    35:5f:29:8f:af:84:9c:ce:c1:90:04:d3:9e:ae:41:
                    7d:ac:32:48:01:72:7a:64:60:0f:2e:57:0e:4c:64:
                    ea:a1:0d:41:24:cc:c4:50:28:9d:26:47:37:e1:c8:
                    00:dc:78:a8:c0:59:fd:62:39:1e:55:77:25:8d:e8:
                    1a:84:b5:55:dc:46:ad:f0:92:0f:6d:e3:2a:99:21:
                    47:69:02:ef:d1:7a:5e:8b:5f:6e:07:ea:40:b1:0a:
                    6f:bc:57:31:f2:da:6e:8f:19:2f:62:b3:36:03:ef:
                    49:3d:35:fa:18:ed:4f:fa:96:58:6d:d2:7f:c3:df:
                    86:ad:db:6a:49:31:4a:0f:25:b0:eb:90:23:b2:a3:
                    8f:e4:94:42:56:ad:58:f4:c6:b0:9b:eb:f0:11:00:
                    c5:b9:51:b5:a7:c2:4f:09:cf:dd:b8:32:3b:de:3c:
                    99:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:4C:90:A1:17:30:F6:32:FC:41:67:92:54:66:A1:05:F3:10:F0:66
            X509v3 Authority Key Identifier:
                keyid:35:E5:BB:60:F4:5D:A7:A5:EB:83:98:E1:19:BF:3E:9C:2E:A5:94:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7A87789620AEF1171C85AEBA41FEFDB2A3B68A65BE2902CE933B4A83911C8A21/0/35E5BB60F45DA7A5EB8398E119BF3E9C2EA594B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35E5BB60F45DA7A5EB8398E119BF3E9C2EA594B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7A87789620AEF1171C85AEBA41FEFDB2A3B68A65BE2902CE933B4A83911C8A21/0/35E5BB60F45DA7A5EB8398E119BF3E9C2EA594B2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:75:d0:28:bc:8d:06:c5:6a:22:5b:32:9c:ff:30:07:c8:f8:
         02:ed:bc:81:ee:b3:0d:5e:b1:a3:5f:32:e2:c4:1d:d5:94:de:
         44:5c:19:b8:dd:29:c5:a0:8f:1e:e5:5b:67:fe:ba:02:39:37:
         d9:33:5d:bb:53:1f:fd:02:07:d0:0e:5d:bb:38:5b:0a:b0:80:
         9b:26:fc:81:66:76:2c:ae:30:22:8a:55:16:09:f9:9f:8b:31:
         29:45:58:9e:98:95:66:0d:2a:b9:a9:fc:b9:47:00:4d:90:52:
         1c:5a:f5:d5:f6:ee:3f:5c:c8:e4:69:31:64:18:f3:fa:0b:dc:
         f1:61:a4:84:0f:fd:68:7f:fc:b1:21:ab:b5:b4:00:9e:84:ed:
         ce:1e:0d:b6:65:7d:ee:94:9e:ab:2e:30:03:af:ee:0d:1a:4a:
         dd:32:ab:7e:e6:2a:a8:6e:69:43:94:85:83:69:16:49:7c:56:
         e8:cf:9e:b6:83:62:db:41:63:7d:03:2e:44:e3:c5:a9:42:61:
         a2:94:4b:95:3b:fe:ce:1c:0b:01:7c:99:c6:e2:5f:c3:1d:ac:
         7f:d9:bb:8a:41:44:9f:13:6f:51:3b:56:6a:66:cd:0f:02:cb:
         c5:5f:4c:a1:16:15:a9:af:8f:ee:65:8f:ed:c5:4f:47:40:76:
         fc:cd:25:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:02:23 2026 by rpki-client