Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/Ge459Jp9EqoMrWNNkVhgM78x1kD4MKdjfDr92w3uhQor/0/968400C9DFC16D643EF5C94C34F993F17C7568AA.mft
File:                     968400C9DFC16D643EF5C94C34F993F17C7568AA.mft (raw, json)
Hash identifier:          eB8oc5Xi9OQKkeJqPv0SCt9aBezindcp9q4FOmgpyr8=
Subject key identifier:   F4:FB:3C:F7:C1:24:5A:79:0A:B5:6F:1B:84:0F:E7:EE:5B:EE:BB:BD
Authority key identifier: 96:84:00:C9:DF:C1:6D:64:3E:F5:C9:4C:34:F9:93:F1:7C:75:68:AA
Certificate issuer:       /CN=968400C9DFC16D643EF5C94C34F993F17C7568AA
Certificate serial:       3C00BC4DF3F3EBB8A43C2C1CE0021365809349FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/968400C9DFC16D643EF5C94C34F993F17C7568AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ge459Jp9EqoMrWNNkVhgM78x1kD4MKdjfDr92w3uhQor/0/968400C9DFC16D643EF5C94C34F993F17C7568AA.mft
Manifest number:          04A6
Signing time:             Mon 02 Nov 2026 13:34:24 +0000
Manifest this update:     Mon 02 Nov 2026 13:29:24 +0000
Manifest next update:     Tue 03 Nov 2026 15:23:24 +0000
Files and hashes:         1: 3230312e37362e3139322e302f32302d3234203d3e203232333536.roa (hash: +5vV9SWUULsQqY+LvioHyLpOc2IPaOTxU/VMOjRhlTc=)
                          2: 3138362e3139322e3132382e302f31392d3234203d3e203232333536.roa (hash: amR+0SLg6kGFYPNft6EZilA4SfBkMjeP860weU+dZzk=)
                          3: 3230302e3136302e3139322e302f32302d3234203d3e203232333536.roa (hash: w/zZDpFsdqwHm+eM2tEmoIfW63zV3dNfQ85wMOXyDTQ=)
                          4: 3230302e3137302e38302e302f32302d3234203d3e203232333536.roa (hash: QRYh9ZQMlJVdqSERPOTOdXLh0LID5cZaIIKXYRyxk7o=)
                          5: 3138392e3132342e39362e302f32302d3234203d3e203232333536.roa (hash: VJJnatX9PpahQcZ4u7y/9xGVAW8lmQjVl1nyp69bzCs=)
                          6: 968400C9DFC16D643EF5C94C34F993F17C7568AA.crl (hash: N0XIQVUzcblHl06rANlIoXakmoL/xVGXGyblaiIReGA=)
                          7: 3137372e3139302e39362e302f32302d3234203d3e203232333536.roa (hash: zpsWcTHE4Sco4YcQkYtoiNTtif8Kyx6fOOvEm3nSQLc=)
                          8: 323030313a313239633a3a2f33322d3438203d3e203232333536.roa (hash: m5Nc9dH10neNbKM+w3cyytiacRROX+YRbx16uynq/lQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ge459Jp9EqoMrWNNkVhgM78x1kD4MKdjfDr92w3uhQor/0/968400C9DFC16D643EF5C94C34F993F17C7568AA.crl
                          rsync://rpki-repo.registro.br/repo/Ge459Jp9EqoMrWNNkVhgM78x1kD4MKdjfDr92w3uhQor/0/968400C9DFC16D643EF5C94C34F993F17C7568AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/968400C9DFC16D643EF5C94C34F993F17C7568AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Nov 2026 15:23:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:00:bc:4d:f3:f3:eb:b8:a4:3c:2c:1c:e0:02:13:65:80:93:49:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=968400C9DFC16D643EF5C94C34F993F17C7568AA
        Validity
            Not Before: Nov  2 13:29:24 2026 GMT
            Not After : Nov  3 15:23:24 2026 GMT
        Subject: CN=F4FB3CF7C1245A790AB56F1B840FE7EE5BEEBBBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:5c:29:67:34:62:2a:ef:87:f7:3f:6a:ca:ee:
                    93:68:ad:20:e7:5f:c1:51:ea:c5:53:19:ad:43:c0:
                    b1:cd:5d:a4:ed:75:92:72:6f:c1:f6:3b:89:1b:bd:
                    44:56:80:68:63:fe:50:52:5a:ae:e8:c0:86:1b:6d:
                    6d:25:d1:c0:37:35:c5:39:30:cd:f0:38:17:da:55:
                    ad:3a:09:38:6e:07:03:07:82:18:9e:8c:1f:e4:f0:
                    5d:9a:71:d7:7b:5b:a0:c2:4a:2a:a5:38:84:19:34:
                    ec:15:97:f3:3b:78:a0:6c:89:97:96:f7:c2:63:19:
                    93:a2:bb:45:b7:9a:6c:e2:fc:41:f6:b6:e5:41:fb:
                    f8:f0:96:94:a0:e5:08:0d:45:70:92:40:6f:50:12:
                    26:05:6d:51:cd:2a:d7:e2:3f:a8:75:90:1d:54:70:
                    8d:ba:20:dc:8a:05:33:da:6d:a9:20:97:c2:e4:1e:
                    d4:dc:77:23:2a:98:f8:83:3d:35:29:a4:fc:7c:d5:
                    0e:a8:01:44:30:95:3f:fd:0f:38:28:bb:8d:ab:c8:
                    3c:d0:a2:a9:ab:ae:56:15:52:6d:ab:08:67:38:72:
                    e3:b4:03:53:1c:62:c7:f3:57:bc:ba:66:fc:be:26:
                    6f:fe:37:7c:6e:94:3d:c9:9c:ff:11:8f:57:7e:aa:
                    7d:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:FB:3C:F7:C1:24:5A:79:0A:B5:6F:1B:84:0F:E7:EE:5B:EE:BB:BD
            X509v3 Authority Key Identifier:
                keyid:96:84:00:C9:DF:C1:6D:64:3E:F5:C9:4C:34:F9:93:F1:7C:75:68:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ge459Jp9EqoMrWNNkVhgM78x1kD4MKdjfDr92w3uhQor/0/968400C9DFC16D643EF5C94C34F993F17C7568AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/968400C9DFC16D643EF5C94C34F993F17C7568AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ge459Jp9EqoMrWNNkVhgM78x1kD4MKdjfDr92w3uhQor/0/968400C9DFC16D643EF5C94C34F993F17C7568AA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:b3:49:ba:17:39:72:93:9b:f5:6b:1f:f7:71:85:a2:9c:f7:
         30:d6:74:39:c7:31:2c:97:10:e1:5d:d5:0e:e3:1a:8c:2a:af:
         90:3a:29:b1:b3:90:69:c6:ce:db:27:43:f3:6f:73:5a:51:a8:
         a2:a9:6b:72:ab:8c:bf:f2:8d:25:26:6f:ef:ce:8c:6d:98:68:
         72:d6:4f:7a:51:2e:d4:4e:9c:2e:05:68:47:ae:24:9f:0d:39:
         42:d9:e4:40:14:41:0a:da:ba:c7:91:98:72:11:7a:8b:59:0a:
         63:6e:00:61:f1:85:ca:7a:34:f0:16:92:d5:b4:a9:35:a7:e8:
         0a:89:7d:35:18:a6:e5:83:50:ca:42:51:3d:21:78:b9:09:60:
         8b:e1:84:99:5a:88:0d:4b:4f:54:0d:e7:bd:3b:83:7e:04:ee:
         6b:30:29:bf:de:7b:d5:b6:51:97:ed:b8:34:06:8b:d9:8a:88:
         f1:cd:d2:6c:0e:86:ec:e6:cc:1d:db:09:be:ba:a7:17:80:16:
         f8:d2:e0:31:c1:51:45:af:22:33:c5:c3:51:21:0c:d6:da:27:
         cd:f8:c4:0e:7e:29:00:84:d6:3e:2a:68:c9:fb:c2:2e:01:02:
         50:5f:f5:d5:0e:51:e3:94:f5:5f:54:66:1f:d7:0e:78:f3:de:
         7e:b4:23:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----