Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.mft
File:                     1b-H2jRmyC2MbY40473YW8050us.mft (raw, json)
Hash identifier:          /stYHC85eRRnEpo+pNC0sCWvmwbSlFaV3VDDw7vdpmg=
Subject key identifier:   10:CA:83:C9:AA:53:30:EC:63:C3:DC:56:51:53:5F:CC:17:26:9F:AC
Authority key identifier: D5:BF:87:DA:34:66:C8:2D:8C:6D:8E:34:E3:BD:D8:5B:CD:39:D2:EB
Certificate issuer:       /CN=LACNICTOAFRINIC/serialNumber=D5BF87DA3466C82D8C6D8E34E3BDD85BCD39D2EB
Certificate serial:       1041
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/lacnic-to-afrinic.cer
Subject info access:      rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.mft
Manifest number:          1038
Signing time:             Fri 24 Jul 2026 00:35:13 +0000
Manifest this update:     Fri 24 Jul 2026 00:35:11 +0000
Manifest next update:     Sun 26 Jul 2026 00:35:11 +0000
Files and hashes:         1: 1b-H2jRmyC2MbY40473YW8050us.crl (hash: SbFuYmr8Rt0BrtzkJ8UqHh5PNpgF2QaSFMahhaHKIXQ=)
                          2: QDrQFAXpeziMuD5pbQudgLuguLg.cer (hash: ASXr/z3/TFAjN9mGCUeoTFZ5kUKM8GgENaBe5GUyQ0s=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.crl
                          rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/lacnic-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 26 Jul 2026 00:35:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4161 (0x1041)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=LACNICTOAFRINIC, serialNumber=D5BF87DA3466C82D8C6D8E34E3BDD85BCD39D2EB
        Validity
            Not Before: Jul 24 00:35:11 2026 GMT
            Not After : Jul 26 00:35:11 2026 GMT
        Subject: CN=6a62b33f-c607
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:ef:f7:c4:0b:a5:8a:aa:16:85:4a:93:96:2a:
                    e4:bf:b7:64:32:10:f2:87:d5:27:20:99:ef:17:c2:
                    95:91:a6:a9:fa:2c:6e:0a:be:2d:90:47:9c:ed:ad:
                    ec:d3:f3:cc:d2:7f:39:8a:ff:f8:45:bc:a7:8b:d0:
                    83:49:dd:75:d3:c4:1d:4b:22:72:4d:03:7d:eb:8d:
                    05:a8:36:d7:36:8d:18:eb:7a:6a:b1:a5:e9:83:c2:
                    1a:b1:31:b9:39:6e:73:91:57:b6:3c:7b:67:00:a5:
                    4a:73:9b:90:13:36:2e:18:d3:84:b8:11:c6:57:c2:
                    ff:2b:94:59:16:df:c5:ed:63:b8:d2:42:02:00:0d:
                    3d:c3:d7:a6:ef:51:3d:c7:04:14:f8:e1:e9:42:12:
                    61:4c:12:69:34:36:d7:fd:25:2d:b5:60:f4:d7:95:
                    00:99:1a:4c:49:ab:29:a2:d6:4f:46:3f:6c:39:1c:
                    46:ef:a4:1f:87:e9:47:62:7f:af:58:d6:b9:18:2f:
                    e8:ca:d8:1f:c9:dc:e6:6d:e8:37:d1:7b:32:93:b7:
                    f0:24:e4:2f:77:06:19:5f:56:28:9d:47:6b:cf:a5:
                    5f:cd:a9:d2:51:bc:55:c8:e0:1a:5b:fc:16:b4:57:
                    8e:fb:e2:d1:cf:b5:ed:c3:a4:30:ca:43:25:69:a1:
                    c0:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:CA:83:C9:AA:53:30:EC:63:C3:DC:56:51:53:5F:CC:17:26:9F:AC
            X509v3 Authority Key Identifier:
                keyid:D5:BF:87:DA:34:66:C8:2D:8C:6D:8E:34:E3:BD:D8:5B:CD:39:D2:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/lacnic-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:ac:57:fe:7b:13:c1:99:52:06:92:0f:6d:80:0d:ab:79:5f:
         e4:c9:e7:31:f5:bb:99:06:c0:ef:82:47:ad:90:38:f6:f5:64:
         9b:1d:71:b6:76:64:e2:66:56:ad:c1:a9:4d:cf:6a:e3:e0:26:
         4f:ad:90:e8:3d:1f:d6:b5:e2:3c:21:1e:13:60:d4:a6:af:2d:
         fc:d0:7f:fb:73:6f:cd:2e:de:49:e3:c8:7d:3c:4c:d3:91:95:
         7e:46:01:6d:f7:2a:97:74:28:ce:5c:d4:f9:f2:7a:98:13:70:
         fc:9f:fc:0d:38:b6:9a:9b:e1:5b:89:2f:87:5c:dc:7b:03:f1:
         3d:9a:d7:d4:e3:f9:7d:b6:96:ff:80:19:53:66:41:ab:32:00:
         1f:3d:c0:6c:31:aa:05:4c:93:c0:ba:cc:53:bd:ce:09:43:b9:
         f6:6d:5b:d4:4b:3e:e1:09:02:2a:ee:46:f0:14:bc:09:0d:57:
         bf:b9:b5:44:9a:ff:f7:85:3e:77:94:71:be:5b:89:6b:89:93:
         ad:3b:fc:c5:03:ba:41:d7:89:1b:15:ea:92:a8:95:6f:42:59:
         b9:a3:a7:6b:63:67:d3:da:29:fa:ba:95:36:69:53:79:11:c5:
         05:8d:22:19:81:08:9f:c9:66:94:73:85:cf:21:3c:20:fc:bb:
         c2:46:b5:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:27:57 2026 by rpki-client