Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4D09661F6A550B3E21627E54957D8CD8E8C7C5FEDD92226C1FB01961E2593F10/0/CFF4EB94A3CA4240E99D515F818C70090A5BEF59.mft
File:                     CFF4EB94A3CA4240E99D515F818C70090A5BEF59.mft (raw, json)
Hash identifier:          6XdADZGlpG2gcut2gbYm7YotoxrTbFZD+BFhTiXcuQY=
Subject key identifier:   BF:15:98:73:2D:BE:60:AE:61:B7:3E:46:BA:0E:FF:16:1D:3E:B1:EB
Authority key identifier: CF:F4:EB:94:A3:CA:42:40:E9:9D:51:5F:81:8C:70:09:0A:5B:EF:59
Certificate issuer:       /CN=CFF4EB94A3CA4240E99D515F818C70090A5BEF59
Certificate serial:       09FDDB91AAE73138092B4F6FAEFCDB0477AD9AEF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CFF4EB94A3CA4240E99D515F818C70090A5BEF59.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4D09661F6A550B3E21627E54957D8CD8E8C7C5FEDD92226C1FB01961E2593F10/0/CFF4EB94A3CA4240E99D515F818C70090A5BEF59.mft
Manifest number:          01C1
Signing time:             Sun 26 Jul 2026 13:47:00 +0000
Manifest this update:     Sun 26 Jul 2026 13:42:00 +0000
Manifest next update:     Sat 01 Aug 2026 08:26:00 +0000
Files and hashes:         1: 3139302e382e3137362e302f32322d3232203d3e203532333335.roa (hash: PUV3ZWY9JqupoTlTWIW6Pr4IJdO4qZf2zIgqjCY+ti4=)
                          2: 3138352e37342e31382e302f32342d3234203d3e203336343534.roa (hash: /s6vyPqjFsCBzbl7k2i7VjFnyweu8raSTCp18y5qPow=)
                          3: 3138352e37342e31362e302f32332d3234203d3e203336343534.roa (hash: 5hN2NJOMlsMqgRJfpQa/xPxQxH45stlb9cVIjWuo9mE=)
                          4: 3139302e382e3137362e302f32322d3234203d3e203336343534.roa (hash: dt9vy/6Dk0cotHocklt24/PtvbvoPUWM/O1eCtF+zH4=)
                          5: 3138352e37342e31362e302f32332d3233203d3e203532333335.roa (hash: k8hGd3QOuAZg603pGFJqGI/lZvvWK4caG63hHAMuDMU=)
                          6: CFF4EB94A3CA4240E99D515F818C70090A5BEF59.crl (hash: Vkm469lfMVFJTygypsjkOQb59gjm5/R4porH8Au4Mo4=)
                          7: 3138352e37342e31392e302f32342d3234203d3e203532333335.roa (hash: ExF9bS2S5c/xNWzt0eiAgaV0pJ2Sqw1dX/0cJOz/5OA=)
                          8: 3138352e37342e31382e302f32342d3234203d3e203532333335.roa (hash: A9ubWd6zXRextJ/B+1lIfmXt9WeNTj1eBcTgamTQDXo=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4D09661F6A550B3E21627E54957D8CD8E8C7C5FEDD92226C1FB01961E2593F10/0/CFF4EB94A3CA4240E99D515F818C70090A5BEF59.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4D09661F6A550B3E21627E54957D8CD8E8C7C5FEDD92226C1FB01961E2593F10/0/CFF4EB94A3CA4240E99D515F818C70090A5BEF59.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CFF4EB94A3CA4240E99D515F818C70090A5BEF59.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 01 Aug 2026 08:26:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:fd:db:91:aa:e7:31:38:09:2b:4f:6f:ae:fc:db:04:77:ad:9a:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CFF4EB94A3CA4240E99D515F818C70090A5BEF59
        Validity
            Not Before: Jul 26 13:42:00 2026 GMT
            Not After : Aug  1 08:26:00 2026 GMT
        Subject: CN=BF1598732DBE60AE61B73E46BA0EFF161D3EB1EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:1b:ec:82:1f:2b:f4:95:94:9c:8b:e3:02:36:
                    d5:dd:7b:a6:c3:8a:35:8b:0b:b8:42:6f:27:50:82:
                    43:90:3a:94:95:97:7f:db:43:34:1a:b6:d7:4e:5c:
                    3f:cd:71:dc:2d:c7:4d:99:e3:8e:a7:79:5b:f4:8b:
                    bf:58:7b:47:69:f2:04:ef:05:37:26:cc:89:09:49:
                    ec:86:0a:76:e9:f8:1e:a0:69:08:8b:db:3a:dc:ba:
                    05:62:40:c9:97:7c:74:b6:19:0d:49:b8:6a:6e:cd:
                    9c:b2:74:e0:46:4b:61:5f:07:8b:bb:82:bc:49:67:
                    fd:6f:46:5d:79:28:fa:68:ba:11:12:15:1a:21:12:
                    29:8e:7e:eb:7b:14:46:39:b2:d2:6f:79:93:a3:cb:
                    c2:af:32:a9:3c:1e:8f:57:4b:c6:18:9c:a5:ca:2e:
                    47:db:97:ba:af:03:2d:9e:7b:8c:df:72:ea:c8:91:
                    73:c7:0e:33:fd:73:a3:dc:96:ea:30:2b:4f:87:50:
                    01:71:99:1b:89:86:86:de:79:52:a5:9f:9c:ee:28:
                    7a:fe:6a:fa:c8:34:ac:39:46:15:42:dd:ea:26:8b:
                    13:75:5c:e3:c0:28:4a:11:d1:a0:25:0f:60:ea:b7:
                    be:b0:fb:c8:15:82:76:16:06:3d:98:47:9e:d5:69:
                    e7:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:15:98:73:2D:BE:60:AE:61:B7:3E:46:BA:0E:FF:16:1D:3E:B1:EB
            X509v3 Authority Key Identifier:
                keyid:CF:F4:EB:94:A3:CA:42:40:E9:9D:51:5F:81:8C:70:09:0A:5B:EF:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4D09661F6A550B3E21627E54957D8CD8E8C7C5FEDD92226C1FB01961E2593F10/0/CFF4EB94A3CA4240E99D515F818C70090A5BEF59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CFF4EB94A3CA4240E99D515F818C70090A5BEF59.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4D09661F6A550B3E21627E54957D8CD8E8C7C5FEDD92226C1FB01961E2593F10/0/CFF4EB94A3CA4240E99D515F818C70090A5BEF59.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:88:3a:c5:76:ee:79:97:98:af:fa:46:60:7a:d0:6e:dd:55:
         92:50:fa:ec:06:b2:c0:c1:c3:b2:35:d8:1d:41:d2:a2:86:51:
         04:9c:04:df:87:38:ba:d3:b7:37:fa:65:5d:65:99:82:d6:9d:
         10:54:26:b7:0b:89:da:cd:92:4f:01:90:77:8b:8d:44:40:88:
         8d:f7:93:8d:c2:6a:b3:6a:7e:1e:ac:3c:e3:b2:71:71:40:a2:
         e2:df:2d:c6:be:b7:8f:0f:82:3f:db:41:56:d3:dd:16:de:10:
         a4:95:8f:bf:65:bc:f4:7b:cf:2c:d7:02:50:d0:4f:de:cd:4e:
         c9:48:4e:39:83:6f:00:eb:e6:87:f0:60:c7:ad:d5:92:ee:fc:
         74:f6:66:e1:d5:27:45:a3:49:4f:22:d2:1b:4a:17:70:46:d1:
         8a:2f:bc:33:07:b1:99:08:3e:aa:39:08:0d:ff:ac:fe:28:48:
         28:37:c4:15:1b:65:26:5b:fd:7b:88:bf:12:b8:c2:c8:cd:b9:
         94:e3:33:31:43:e9:02:fb:fc:df:88:7f:a7:8d:97:55:f5:9c:
         61:2b:2b:0b:46:ca:19:65:f6:b5:16:b0:b9:d0:a8:42:3f:c2:
         a7:c1:03:ca:b3:89:e0:aa:51:82:e7:39:c8:d3:f3:58:ef:3c:
         2c:9c:c5:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 11:37:18 2026 by rpki-client