Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B5DC9768EA0AACF46DC911E81D0D9D049927D24AACAF0685CB367D54CEE2BD95/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.mft
File:                     CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.mft (raw, json)
Hash identifier:          oKbaV330rs9byB53c20fJdTedxOaWDoJc7qZGwYn284=
Subject key identifier:   B1:8F:BE:89:01:CF:6A:F5:6B:AA:15:F8:F3:43:96:6A:0B:3D:A5:45
Authority key identifier: CE:FF:58:50:7A:F1:A0:6A:EF:DA:67:DD:8D:65:12:5C:36:4A:4D:EC
Certificate issuer:       /CN=CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC
Certificate serial:       58C4C0F784E6CCE512D8B8C47E9D6F6BF1879012
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B5DC9768EA0AACF46DC911E81D0D9D049927D24AACAF0685CB367D54CEE2BD95/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.mft
Manifest number:          01BD
Signing time:             Mon 20 Jul 2026 12:35:25 +0000
Manifest this update:     Mon 20 Jul 2026 12:30:25 +0000
Manifest next update:     Sat 25 Jul 2026 19:30:25 +0000
Files and hashes:         1: 3139312e39372e31362e302f32322d3234203d3e20323634383434.roa (hash: MEOX8cb/xn0PzPSkD5BZOrCXIBBzlral/GxElCiDJtI=)
                          2: 3137302e3234342e38382e302f32322d3234203d3e20323634383434.roa (hash: UOxffU8Cq9dGbKc/4yTBm3REFxfZR/iie/Kxnn1AGoo=)
                          3: 3139312e39372e31372e302f32342d3234203d3e20323732383635.roa (hash: 8JFBRRJPMn+8eQeCdhdOgi4iQs4rzxptXxCUEWx1+Q0=)
                          4: 3137302e3234342e39312e302f32342d3234203d3e20333934363834.roa (hash: dZi8nOK08Jc+jAYRbCC2CyB8HCiEQ6gGEaN7ug9JFLM=)
                          5: 3137302e3234342e39302e302f32342d3234203d3e20323732383635.roa (hash: RVDqso5Gnl9JOnomIdp9SmFB4AqAm+xMXj7Ltq02FYM=)
                          6: CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.crl (hash: Z/Rqy03MtmNmh9hgnClLiEolOiJSt5uUNgPX5ftoYaY=)
                          7: 323830333a383238303a3a2f33322d3332203d3e20323634383434.roa (hash: kMz8Zk/AWDRwAVGLJFvvyvYKJjpACmuyP6pcjkl4MGA=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B5DC9768EA0AACF46DC911E81D0D9D049927D24AACAF0685CB367D54CEE2BD95/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B5DC9768EA0AACF46DC911E81D0D9D049927D24AACAF0685CB367D54CEE2BD95/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 05:19:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:c4:c0:f7:84:e6:cc:e5:12:d8:b8:c4:7e:9d:6f:6b:f1:87:90:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC
        Validity
            Not Before: Jul 20 12:30:25 2026 GMT
            Not After : Jul 25 19:30:25 2026 GMT
        Subject: CN=B18FBE8901CF6AF56BAA15F8F343966A0B3DA545
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b3:ec:8b:61:86:ff:9d:be:55:2b:fd:88:d8:
                    bd:8f:15:d7:f4:88:e3:cb:4e:e2:84:5b:38:b0:d5:
                    c7:cb:bf:eb:26:ce:b3:05:ef:6d:58:05:a4:17:96:
                    75:d8:18:ee:a9:ca:23:2b:35:73:f8:77:da:a7:6b:
                    03:ab:58:fb:9f:4f:b2:dc:49:d7:62:d4:c0:2a:52:
                    db:0c:66:69:9c:75:ae:3c:58:96:01:ba:67:ab:76:
                    9b:5c:b5:af:f9:25:02:74:19:09:42:88:36:44:36:
                    91:41:b1:e5:7f:11:6f:97:79:fe:95:bf:a0:fc:0c:
                    db:3d:57:df:5a:65:82:c7:d5:94:af:6a:a3:18:04:
                    13:5d:25:d3:b1:b0:c9:2f:39:51:3a:99:9f:3d:08:
                    f1:d8:58:29:31:13:2d:e8:ba:81:52:9b:25:be:aa:
                    69:e9:7e:e7:75:d0:76:bc:99:9a:bd:78:13:74:62:
                    e8:de:27:62:13:8b:38:ff:13:95:ce:fe:bd:c8:f0:
                    de:8b:d0:b2:56:22:7d:cf:19:ef:04:6a:56:6c:d9:
                    0b:12:ff:0a:d9:4d:2c:c7:cd:4e:61:69:4f:20:c7:
                    4f:c4:00:83:a9:c3:ae:0a:64:f9:66:f8:e4:49:7e:
                    45:4d:c9:4f:f9:f7:4c:15:39:0d:b7:78:22:43:72:
                    e6:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:8F:BE:89:01:CF:6A:F5:6B:AA:15:F8:F3:43:96:6A:0B:3D:A5:45
            X509v3 Authority Key Identifier:
                keyid:CE:FF:58:50:7A:F1:A0:6A:EF:DA:67:DD:8D:65:12:5C:36:4A:4D:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B5DC9768EA0AACF46DC911E81D0D9D049927D24AACAF0685CB367D54CEE2BD95/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B5DC9768EA0AACF46DC911E81D0D9D049927D24AACAF0685CB367D54CEE2BD95/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:a5:07:11:65:7b:f6:b5:34:b3:0f:32:9c:89:2b:2f:61:cb:
         50:12:69:98:07:bf:c8:a8:1f:0a:73:dd:80:67:df:15:6b:3e:
         8a:53:26:10:e0:c3:7f:bf:3a:2f:e3:9f:af:62:18:06:04:cb:
         1c:b8:8c:68:ff:f1:5f:71:11:c1:11:3d:16:0a:eb:e4:a2:3f:
         4a:41:e1:f8:65:cb:17:26:bb:dd:1e:9d:9d:ad:db:ac:03:7b:
         07:11:c8:4c:54:83:6d:01:a7:59:d8:3d:ae:ee:1e:83:26:29:
         d1:e3:6b:02:aa:73:08:ec:f3:f6:26:47:b0:19:f5:cb:28:e7:
         77:4a:41:57:be:0f:0d:7a:72:20:0f:df:80:34:65:ff:d8:50:
         51:cd:4a:41:26:75:d8:fc:c9:10:28:09:27:2c:c3:cd:83:47:
         a5:08:a5:56:2e:77:a9:7e:a6:b8:26:7f:3a:bd:ae:65:c8:cf:
         e2:13:a7:2f:5c:17:fd:71:54:05:d2:16:5e:8f:09:89:ab:1d:
         a8:39:53:e6:02:5d:87:2e:94:77:20:6a:de:95:d7:78:7c:e0:
         c3:f2:25:59:57:53:9a:95:12:28:79:b3:df:6c:5c:ae:50:56:
         0b:c8:7d:f2:d7:2a:18:44:20:26:56:e6:1c:9d:3d:ea:37:fd:
         ee:75:eb:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:48:18 2026 by rpki-client