Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/CcKTasYok2N6u4yrpQLacSNxZC93tKsNRY6iiAs2zZee/2/98E0B0E6B64869AA12126FA739434E8D48C37493.mft
File:                     98E0B0E6B64869AA12126FA739434E8D48C37493.mft (raw, json)
Hash identifier:          4pd2gqLDNiWj9p94SNVRSallj0+5OAPnZlnMXstwdTA=
Subject key identifier:   CA:98:75:6D:9B:07:99:07:B1:E0:67:8A:D5:62:60:C3:A6:55:21:7A
Authority key identifier: 98:E0:B0:E6:B6:48:69:AA:12:12:6F:A7:39:43:4E:8D:48:C3:74:93
Certificate issuer:       /CN=98E0B0E6B64869AA12126FA739434E8D48C37493
Certificate serial:       70A4F36F9B15F194C89D9919F121009A5AFAD17D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98E0B0E6B64869AA12126FA739434E8D48C37493.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CcKTasYok2N6u4yrpQLacSNxZC93tKsNRY6iiAs2zZee/2/98E0B0E6B64869AA12126FA739434E8D48C37493.mft
Manifest number:          A1
Signing time:             Sun 01 Nov 2026 13:31:27 +0000
Manifest this update:     Sun 01 Nov 2026 13:26:27 +0000
Manifest next update:     Mon 02 Nov 2026 17:01:27 +0000
Files and hashes:         1: 3230302e3139352e3232342e302f31392d3332203d3e203631383839.roa (hash: 7DFPRKMglz8ypy4wo77/EhwaSgbLL8ZQrNIocv5sCKg=)
                          2: 323830343a6533343a3a2f33322d313238203d3e203631383839.roa (hash: I9GTpjc6BiK39+e/b8bDBELcxMyjyAJYcPK0sSeSlA4=)
                          3: 323830343a383a3a2f33302d313238203d3e203134383430.roa (hash: mJpokzvnE63T26TD6VmJImgSEmHGezcbKB1ctOCFgJs=)
                          4: 3230302e3231352e3230382e302f32302d3332203d3e203134383430.roa (hash: gorVWkviDIs6s/janb957B2tUJU6cywurdqJrVDaNE0=)
                          5: 98E0B0E6B64869AA12126FA739434E8D48C37493.crl (hash: skehX1HG7Etzpj0ume0uExpzQG0op9COQvl2z9fbzlg=)
                          6: 3230302e3134332e36342e302f31382d3332203d3e203134383430.roa (hash: qw46uCZRplD4u6r8l7GLa8Aat36iZeOIF9Hz3Dx/8Ac=)
                          7: 3137372e3135322e3138342e302f32322d3332203d3e203631383839.roa (hash: ql8tb0IO7Fl4IH094+JFAnTRxsHx1FbVPh706lyIyzM=)
                          8: 3230302e302e33322e302f32302d3332203d3e203631383839.roa (hash: hwIhXo+MW+EN4i9SbIH+bjjcpWTrxp5xpWv5l06z51w=)
                          9: 3138372e3130332e39362e302f31392d3332203d3e203134383430.roa (hash: boU5D0EuptXhzaqdXvCoWCeELCmgPTzc25DAoiGeqlw=)
                          10: 3230312e31362e302e302f31382d3332203d3e203134383430.roa (hash: E+AtRYXDJIh/rlkCNM2IO6izAuUqfR2jUUjlDbfJrqM=)
                          11: 3230312e31362e36342e302f31382d3332203d3e203134383430.roa (hash: tN/+qBa2EOV/LUFtUM460GIvOolbvFtbZnFYc1L6WMQ=)
                          12: 3138362e3231312e3132382e302f31372d3332203d3e203134383430.roa (hash: ZeEjYxHKqqnd1a6LJr0/O3TCU4YBypqf5PlnOWU7JZA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CcKTasYok2N6u4yrpQLacSNxZC93tKsNRY6iiAs2zZee/2/98E0B0E6B64869AA12126FA739434E8D48C37493.crl
                          rsync://rpki-repo.registro.br/repo/CcKTasYok2N6u4yrpQLacSNxZC93tKsNRY6iiAs2zZee/2/98E0B0E6B64869AA12126FA739434E8D48C37493.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98E0B0E6B64869AA12126FA739434E8D48C37493.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Nov 2026 17:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:a4:f3:6f:9b:15:f1:94:c8:9d:99:19:f1:21:00:9a:5a:fa:d1:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98E0B0E6B64869AA12126FA739434E8D48C37493
        Validity
            Not Before: Nov  1 13:26:27 2026 GMT
            Not After : Nov  2 17:01:27 2026 GMT
        Subject: CN=CA98756D9B079907B1E0678AD56260C3A655217A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:14:68:5b:3f:c1:8a:96:ae:18:8d:70:12:55:
                    30:40:a1:bf:03:8a:52:e1:fb:1f:22:57:3f:59:16:
                    de:71:6b:69:29:67:67:15:40:45:c4:4f:27:cc:80:
                    ff:f8:10:5d:9b:ed:00:cf:d4:f6:37:58:6f:52:74:
                    20:b3:c3:82:9c:12:f1:9d:2b:fd:1d:bf:9b:e9:6a:
                    e2:0c:34:21:b0:cc:79:8f:c8:65:6e:b9:8f:e8:ca:
                    a4:77:e2:a7:6d:bd:b8:dd:f8:8e:59:44:8c:12:b0:
                    60:5f:7a:41:20:6b:71:da:5b:76:37:9f:70:78:b3:
                    cb:f0:5c:79:4a:05:1a:6e:08:71:04:ed:11:2a:b1:
                    2b:32:63:2f:8e:e4:f7:d6:97:e9:d2:93:fc:50:59:
                    72:d4:63:f3:32:04:5e:3c:9f:2d:b3:be:42:88:a1:
                    72:82:21:81:c5:6d:b1:83:28:78:f7:04:97:7f:58:
                    fe:57:e2:22:6a:3b:65:14:32:69:43:22:50:a2:e4:
                    cd:3a:5d:ba:10:7d:a7:e4:91:42:6b:fe:9b:8e:3f:
                    98:87:33:a5:8c:80:91:15:bb:8f:38:d6:ce:15:27:
                    95:f1:a6:92:88:90:d7:56:b6:ca:c1:69:9a:8e:55:
                    5c:79:ae:b6:68:30:d5:b4:52:4a:4d:4c:bf:b1:91:
                    72:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:98:75:6D:9B:07:99:07:B1:E0:67:8A:D5:62:60:C3:A6:55:21:7A
            X509v3 Authority Key Identifier:
                keyid:98:E0:B0:E6:B6:48:69:AA:12:12:6F:A7:39:43:4E:8D:48:C3:74:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CcKTasYok2N6u4yrpQLacSNxZC93tKsNRY6iiAs2zZee/2/98E0B0E6B64869AA12126FA739434E8D48C37493.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98E0B0E6B64869AA12126FA739434E8D48C37493.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CcKTasYok2N6u4yrpQLacSNxZC93tKsNRY6iiAs2zZee/2/98E0B0E6B64869AA12126FA739434E8D48C37493.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d3:c6:0e:dd:34:03:bf:bd:0b:f8:88:3b:7c:3f:2a:d9:34:55:
         e3:97:ef:20:10:a4:f2:4a:be:a9:fe:aa:fc:c9:6d:73:0f:e2:
         32:16:bf:fc:e8:ca:2c:a5:e9:f5:2d:e6:8a:0c:55:f9:92:05:
         9f:50:1d:ea:a0:c3:12:96:6b:3e:5c:f5:7e:34:c3:1c:51:84:
         3c:54:01:1f:03:58:76:30:0d:d7:00:84:aa:c8:50:22:99:45:
         73:2d:22:6a:f0:07:7e:e1:8e:37:97:fb:f0:47:12:65:ce:aa:
         7a:d2:f1:ad:75:1a:8b:8a:3f:4a:54:a5:f3:33:ec:ae:48:7b:
         8b:c8:ec:47:81:fd:91:34:78:33:fb:fd:59:74:25:f4:b3:a1:
         8d:b1:fa:61:11:e7:a3:d2:8d:07:69:c7:46:b4:c0:8e:7a:f0:
         d2:7a:80:b0:ed:bb:d2:7f:11:d7:40:bc:67:12:ed:37:5f:68:
         03:b8:1e:06:2a:c4:a5:53:03:84:29:99:28:b2:56:3e:90:6c:
         42:fb:68:3b:c4:cd:7d:55:54:6c:ed:35:1f:84:11:ef:af:df:
         7d:8a:f1:45:b2:44:37:6b:0c:c3:4c:c1:e4:fd:90:58:95:47:
         87:f0:e3:dc:55:45:85:38:75:2b:0e:22:c4:52:b6:8c:e2:bc:
         79:97:8e:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 06:45:15 2026 by rpki-client