Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/41723B0679130F659FD2BC970D21FAE11B92497391E79D8A864EC930F7D8EB6F/0/259C857FBBE3D174F02EFBE0681691812000149A.mft
File:                     259C857FBBE3D174F02EFBE0681691812000149A.mft (raw, json)
Hash identifier:          1Nf3KONlB7YhWD81neU0HZ4OqXsnoXIDcwYZPQNnoys=
Subject key identifier:   B4:26:0C:C0:DA:E1:26:9B:E8:8C:80:88:2C:C7:DB:DE:E8:A0:71:24
Authority key identifier: 25:9C:85:7F:BB:E3:D1:74:F0:2E:FB:E0:68:16:91:81:20:00:14:9A
Certificate issuer:       /CN=259C857FBBE3D174F02EFBE0681691812000149A
Certificate serial:       421044FB428A7D94079E242B12FECF92B254D91F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/259C857FBBE3D174F02EFBE0681691812000149A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/41723B0679130F659FD2BC970D21FAE11B92497391E79D8A864EC930F7D8EB6F/0/259C857FBBE3D174F02EFBE0681691812000149A.mft
Manifest number:          01B7
Signing time:             Mon 20 Jul 2026 10:18:14 +0000
Manifest this update:     Mon 20 Jul 2026 10:13:14 +0000
Manifest next update:     Sat 25 Jul 2026 04:26:14 +0000
Files and hashes:         1: 259C857FBBE3D174F02EFBE0681691812000149A.crl (hash: ICQ53mESpI2ZYeh+RIjbXwgL8Hxh27DTGQH7BKvJHCs=)
                          2: 3137302e3234372e39372e302f32342d3234203d3e20323635363539.roa (hash: Lxxl/OWDbs4znPmRnlWYgjHy7w0b44TCsegOcuzvwYA=)
                          3: 323830333a623663303a3a2f33322d3332203d3e20323635363539.roa (hash: tz5NGBbZHlJHFvrDG6X8bD9kTiTR/hw957UUKkztHD4=)
                          4: 3137302e3234372e39382e302f32342d3234203d3e20323635363539.roa (hash: w9Xsr1lsIJ01m0TfJWAnkQ15dYGYuXOP4zNKMwlfH/o=)
                          5: 3137302e3234372e39392e302f32342d3234203d3e20323635363539.roa (hash: VTNhT0kJ+lDZDdF3WslmaL35DJm3Mz68viSaUh2R4+A=)
                          6: 3137302e3234372e39362e302f32342d3234203d3e20323635363539.roa (hash: 6vj8aS6SeoD0tMc6O64D2iLeio74vWdXZGNLvxImxwU=)
                          7: 3137302e3234372e39362e302f32322d3234203d3e20323635363539.roa (hash: RUg/NavMR/fFlcFoDBKqN3kRoM/mJ6zdR46g8rINTRM=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/41723B0679130F659FD2BC970D21FAE11B92497391E79D8A864EC930F7D8EB6F/0/259C857FBBE3D174F02EFBE0681691812000149A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/41723B0679130F659FD2BC970D21FAE11B92497391E79D8A864EC930F7D8EB6F/0/259C857FBBE3D174F02EFBE0681691812000149A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/259C857FBBE3D174F02EFBE0681691812000149A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 04:26:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:10:44:fb:42:8a:7d:94:07:9e:24:2b:12:fe:cf:92:b2:54:d9:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=259C857FBBE3D174F02EFBE0681691812000149A
        Validity
            Not Before: Jul 20 10:13:14 2026 GMT
            Not After : Jul 25 04:26:14 2026 GMT
        Subject: CN=B4260CC0DAE1269BE88C80882CC7DBDEE8A07124
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:87:f8:8e:38:e0:77:cc:2a:a2:cf:f2:55:58:
                    62:e8:af:c0:ba:57:57:ed:1b:d7:24:56:84:97:23:
                    b1:46:d4:a8:ce:c3:67:39:6e:75:cd:1c:25:56:2b:
                    2e:60:1e:5a:59:08:91:1b:93:fd:22:91:a3:43:79:
                    5e:47:3e:98:3b:5a:b1:70:7c:54:31:ad:3d:dd:a9:
                    51:61:6f:26:c8:0e:4d:0e:0a:a1:ed:16:f1:96:bc:
                    57:57:9c:37:e3:91:b6:37:c0:c3:3c:6b:6c:b3:ba:
                    4a:7f:e0:b8:41:19:4c:20:9c:02:5e:86:df:20:ba:
                    e3:1d:52:eb:28:a2:4b:5f:76:19:d5:45:00:12:ef:
                    48:99:e7:2a:96:b1:7e:b6:a1:2d:3e:3d:ba:38:c4:
                    e3:93:33:7a:d0:c6:15:d8:37:4c:65:9b:15:e9:f6:
                    83:d0:cc:44:8f:c0:e4:68:52:b7:93:e7:1c:b9:e1:
                    61:d1:0d:46:03:1e:c0:29:43:16:4a:c7:c3:90:c4:
                    2a:21:0b:36:76:14:ce:b3:43:14:53:47:1f:bf:da:
                    8e:22:a1:fc:87:12:91:81:1f:0d:a7:bf:5a:08:d0:
                    d9:83:b6:3e:d8:0a:23:59:b9:d3:01:01:6d:44:75:
                    5e:15:d3:ae:73:3f:04:99:4d:fe:2e:2e:56:0c:c2:
                    39:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:26:0C:C0:DA:E1:26:9B:E8:8C:80:88:2C:C7:DB:DE:E8:A0:71:24
            X509v3 Authority Key Identifier:
                keyid:25:9C:85:7F:BB:E3:D1:74:F0:2E:FB:E0:68:16:91:81:20:00:14:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/41723B0679130F659FD2BC970D21FAE11B92497391E79D8A864EC930F7D8EB6F/0/259C857FBBE3D174F02EFBE0681691812000149A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/259C857FBBE3D174F02EFBE0681691812000149A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/41723B0679130F659FD2BC970D21FAE11B92497391E79D8A864EC930F7D8EB6F/0/259C857FBBE3D174F02EFBE0681691812000149A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:b0:4c:c4:c2:ff:0a:2c:ce:98:5f:ae:b8:71:9e:72:ba:23:
         9c:c6:09:7d:b4:77:34:01:fd:68:ec:a4:6c:50:f8:64:b0:93:
         8d:fe:30:ac:e6:15:4e:1d:ef:a5:69:70:eb:a1:fe:cc:09:11:
         41:7f:c1:b5:ca:2c:5c:e5:61:52:b8:06:f6:13:3e:0e:b1:27:
         a8:88:1f:49:35:8b:24:38:12:57:b0:a9:bc:37:8d:8c:4f:8e:
         ff:d8:58:12:19:42:b5:97:ad:84:7e:99:a1:a7:68:80:08:13:
         9d:8d:73:22:b2:1e:a1:26:f6:b8:bf:2c:24:fe:55:4e:61:86:
         98:45:8a:88:8f:94:90:87:99:7b:02:85:46:04:b8:32:4c:42:
         d8:e7:1a:af:a9:14:d0:5b:1f:76:0b:1f:5d:98:c0:b7:09:b1:
         6a:0c:ac:d2:c6:78:03:3e:af:4e:85:8b:d1:e3:76:f9:54:4c:
         a1:35:7c:e8:92:5a:21:38:70:e0:89:fd:2b:4a:ad:56:0e:cb:
         b9:a9:d9:9b:93:38:16:e6:04:a9:b7:16:02:ec:12:58:71:8a:
         2e:6b:e7:a5:23:96:a2:08:89:95:69:8d:04:c6:f9:f7:e5:23:
         48:6e:a9:9c:d1:13:53:4e:be:3c:1a:e4:45:0b:a0:ce:59:4f:
         8f:66:27:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:30:51 2026 by rpki-client