Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F3EB1087C8B4BB3CA5678E41F4538BAA836DF0D1F0C8EE32359654DFD2B5E894/0/D8B4D8CF7C53F893FA81A1E1115BC8E0267F9845.mft
File:                     D8B4D8CF7C53F893FA81A1E1115BC8E0267F9845.mft (raw, json)
Hash identifier:          X32FqTrlVkMMU7sYMJFtC+VERnZ86Ze99V9nHEdNVGc=
Subject key identifier:   F4:A6:42:53:82:13:6E:28:9F:16:51:AE:C7:84:6A:80:A3:2C:FA:10
Authority key identifier: D8:B4:D8:CF:7C:53:F8:93:FA:81:A1:E1:11:5B:C8:E0:26:7F:98:45
Certificate issuer:       /CN=D8B4D8CF7C53F893FA81A1E1115BC8E0267F9845
Certificate serial:       67041306CEF98F3F61F00962F3452E9C68FA4207
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B4D8CF7C53F893FA81A1E1115BC8E0267F9845.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F3EB1087C8B4BB3CA5678E41F4538BAA836DF0D1F0C8EE32359654DFD2B5E894/0/D8B4D8CF7C53F893FA81A1E1115BC8E0267F9845.mft
Manifest number:          01BA
Signing time:             Thu 23 Jul 2026 05:04:50 +0000
Manifest this update:     Thu 23 Jul 2026 04:59:50 +0000
Manifest next update:     Mon 27 Jul 2026 18:25:50 +0000
Files and hashes:         1: 3230302e35302e3135342e302f32342d3234203d3e20323733313131.roa (hash: XaHCApzJcXFCm+X2NfUeGZoV56JdbktQI+iF2ku8n+Y=)
                          2: 323830333a323835303a3a2f33322d3438203d3e20323733313131.roa (hash: nm1/JV+H51+tPU6WsvB6c1Y+U18+q926bawGupsbi4Q=)
                          3: D8B4D8CF7C53F893FA81A1E1115BC8E0267F9845.crl (hash: QDzvCPYHEFd8CZDX9wHtRJcdBv6U3OwJ4wzw3z4cJ+E=)
                          4: 3230302e35302e3135322e302f32342d3234203d3e20323733313131.roa (hash: EJzf6mLoLR96n6XoxESmv1IcnH91n3PMdZ9SlWvdmOY=)
                          5: 3230302e35302e3135352e302f32342d3234203d3e20323732383732.roa (hash: zzoveUPZIi8r1Wk/k7CsUXeNbduQvMz5imXYI/pUTXY=)
                          6: 3230302e35302e3135332e302f32342d3234203d3e20323733313131.roa (hash: w0JIK8/X4fFR6iQhLqJjBdIBCRwqS+IZJysffWmaRa8=)
                          7: 3230302e35302e3135322e302f32332d3233203d3e20323733313131.roa (hash: Y1QrmoE4YLknL1HSaiK6zos5OSnqb6YQrsK10y2G9ak=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F3EB1087C8B4BB3CA5678E41F4538BAA836DF0D1F0C8EE32359654DFD2B5E894/0/D8B4D8CF7C53F893FA81A1E1115BC8E0267F9845.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F3EB1087C8B4BB3CA5678E41F4538BAA836DF0D1F0C8EE32359654DFD2B5E894/0/D8B4D8CF7C53F893FA81A1E1115BC8E0267F9845.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B4D8CF7C53F893FA81A1E1115BC8E0267F9845.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 27 Jul 2026 18:25:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:04:13:06:ce:f9:8f:3f:61:f0:09:62:f3:45:2e:9c:68:fa:42:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8B4D8CF7C53F893FA81A1E1115BC8E0267F9845
        Validity
            Not Before: Jul 23 04:59:50 2026 GMT
            Not After : Jul 27 18:25:50 2026 GMT
        Subject: CN=F4A6425382136E289F1651AEC7846A80A32CFA10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ae:47:f9:c6:f1:ff:33:fa:c1:55:60:ed:2d:
                    f9:ae:4b:d6:25:08:20:c6:89:ce:03:de:e5:6c:35:
                    15:31:3b:27:e9:d3:40:24:61:6d:cb:e5:7d:c0:4d:
                    a5:e9:8b:ca:56:36:80:dc:4d:8c:67:7c:76:1e:37:
                    7e:31:73:15:4a:68:9c:9c:cc:76:98:d3:5a:89:87:
                    f5:10:b6:b0:57:e0:8c:a7:6a:4f:26:ca:91:d5:fd:
                    e9:fb:75:66:49:3a:1e:6a:35:43:66:0b:54:74:b0:
                    fb:5d:be:a7:fe:07:98:48:88:02:b6:3a:54:ae:be:
                    7f:22:34:f2:db:a3:80:cf:53:28:27:c9:54:c2:7a:
                    a7:99:95:1c:64:81:e0:03:cd:9f:00:2e:44:07:3d:
                    1e:79:18:7d:f3:4d:6f:ca:db:a7:3f:26:03:16:36:
                    e4:1d:6e:c3:ed:06:9e:8e:f8:5c:42:27:41:f9:d3:
                    88:98:a9:6e:ca:ad:45:c7:3d:31:ad:52:74:93:f2:
                    84:ba:c7:9e:b3:94:fa:57:e8:fd:ca:e7:32:79:30:
                    be:08:e7:6a:63:4f:0c:48:be:99:fc:d0:a4:7d:a3:
                    c5:00:19:1b:42:b4:2e:7c:26:58:4e:60:64:e0:64:
                    86:ac:ab:ef:43:dc:59:f4:f0:0e:fa:24:5b:ef:3f:
                    47:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:A6:42:53:82:13:6E:28:9F:16:51:AE:C7:84:6A:80:A3:2C:FA:10
            X509v3 Authority Key Identifier:
                keyid:D8:B4:D8:CF:7C:53:F8:93:FA:81:A1:E1:11:5B:C8:E0:26:7F:98:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F3EB1087C8B4BB3CA5678E41F4538BAA836DF0D1F0C8EE32359654DFD2B5E894/0/D8B4D8CF7C53F893FA81A1E1115BC8E0267F9845.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B4D8CF7C53F893FA81A1E1115BC8E0267F9845.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F3EB1087C8B4BB3CA5678E41F4538BAA836DF0D1F0C8EE32359654DFD2B5E894/0/D8B4D8CF7C53F893FA81A1E1115BC8E0267F9845.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:b7:30:51:a8:d8:93:86:10:a5:29:cf:ba:f9:48:c0:de:9a:
         cf:16:53:c2:35:b3:9e:7e:a5:f9:6b:1b:aa:26:52:fb:b1:d4:
         bd:39:1c:25:d3:ed:25:e4:38:0f:10:b5:e2:2c:1a:ba:a0:2d:
         69:d5:a2:9d:68:ed:30:6e:d4:0d:ec:c7:b6:11:c7:e5:32:31:
         24:09:7f:d1:a2:88:96:ef:74:9d:c2:2e:6e:a3:69:88:11:90:
         8a:3b:a2:63:7c:43:e1:df:03:d4:6d:c4:aa:1c:57:ca:1a:ec:
         98:c7:64:12:90:ce:30:0d:93:1f:5d:5a:4c:c3:89:7a:0e:42:
         73:24:17:e8:e8:29:6a:a4:2f:8b:37:2b:31:5a:7f:07:46:d8:
         14:9b:7b:8a:cd:92:fa:76:25:10:1d:f9:7e:d5:4e:6d:3a:da:
         af:9a:6b:4a:dc:d2:7a:aa:c3:5e:70:91:07:7e:6c:a1:7d:76:
         de:0d:14:e1:bd:47:f0:4f:0d:e4:8f:2e:e4:f9:ef:23:48:1f:
         34:94:ae:d9:b1:0c:12:f5:a4:07:38:cf:fc:e6:01:5e:1f:45:
         12:63:71:59:46:f8:29:0e:19:17:f2:f0:96:2f:9c:c3:2a:c7:
         42:68:9f:8c:9e:a5:ed:f4:2a:7a:5e:57:c1:d3:50:d3:22:b5:
         b3:14:4a:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:57:58 2026 by rpki-client