Manifest

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/6FFF22C277A104448C9BCFF9F7595C1BDBD80DE090D9A4889EB7B703E1F31945/0/C2BD7C7D74F49CE6BEC80D95C96213DD0DC5C4B7.mft
File:                     C2BD7C7D74F49CE6BEC80D95C96213DD0DC5C4B7.mft (raw, json)
Hash identifier:          4U0h4eyIS21iZsgqsBnCP1Xn1tryln+3wt2c2vAFHtc=
Subject key identifier:   37:4C:B1:F0:57:B8:F5:91:BB:9B:E7:6F:54:F1:D5:36:EE:43:6B:01
Authority key identifier: C2:BD:7C:7D:74:F4:9C:E6:BE:C8:0D:95:C9:62:13:DD:0D:C5:C4:B7
Certificate issuer:       /CN=C2BD7C7D74F49CE6BEC80D95C96213DD0DC5C4B7
Certificate serial:       3DCC82D4B259574021239ADE383AB276C0AE1FA3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2BD7C7D74F49CE6BEC80D95C96213DD0DC5C4B7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6FFF22C277A104448C9BCFF9F7595C1BDBD80DE090D9A4889EB7B703E1F31945/0/C2BD7C7D74F49CE6BEC80D95C96213DD0DC5C4B7.mft
Manifest number:          01CE
Signing time:             Mon 14 Sep 2026 13:34:38 +0000
Manifest this update:     Mon 14 Sep 2026 13:29:38 +0000
Manifest next update:     Sat 19 Sep 2026 12:42:38 +0000
Files and hashes:         1: 3137392e36302e3139362e302f32322d3234203d3e203132313530.roa (hash: SIdGPbwVU3RStMVE8RbDy/pwKv2XIsHBeAIjKmVLe50=)
                          2: 3134332e302e3234342e302f32322d3234203d3e203132313530.roa (hash: tTpmuE3jng6tXbkRa/D5oivt+SB1WFTUlsjeLYffzcY=)
                          3: C2BD7C7D74F49CE6BEC80D95C96213DD0DC5C4B7.crl (hash: kkagm7StqgPtoyjHNfLONlhi23j0dr91sbCyUm7MPfw=)
                          4: 323830333a653038303a3a2f33322d3332203d3e203132313530.roa (hash: wY3V/67VbcbzWTjCzNWok8qMBMKoucQ251PF77Te6iE=)
                          5: 3230302e36312e3234302e302f32312d3234203d3e203132313530.roa (hash: xpQyeJi8P95kkicNdHWTRRcAnUJAW3u6mhmy+wLVxWI=)
                          6: 3137302e38342e34342e302f32322d3234203d3e203132313530.roa (hash: lndcK9xxquXD9DeJHvcV4Tq7pAvlexkhyQ1ZRBMI58c=)
                          7: 3230302e35392e302e302f32302d3234203d3e203132313530.roa (hash: e/JMPjqcDJCi48+2ZHKqqmUt3eW5en7KAkVbFr8BbLc=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6FFF22C277A104448C9BCFF9F7595C1BDBD80DE090D9A4889EB7B703E1F31945/0/C2BD7C7D74F49CE6BEC80D95C96213DD0DC5C4B7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6FFF22C277A104448C9BCFF9F7595C1BDBD80DE090D9A4889EB7B703E1F31945/0/C2BD7C7D74F49CE6BEC80D95C96213DD0DC5C4B7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2BD7C7D74F49CE6BEC80D95C96213DD0DC5C4B7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Sep 2026 11:29:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:cc:82:d4:b2:59:57:40:21:23:9a:de:38:3a:b2:76:c0:ae:1f:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2BD7C7D74F49CE6BEC80D95C96213DD0DC5C4B7
        Validity
            Not Before: Sep 14 13:29:38 2026 GMT
            Not After : Sep 19 12:42:38 2026 GMT
        Subject: CN=374CB1F057B8F591BB9BE76F54F1D536EE436B01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:80:de:fd:42:85:1a:14:8d:b6:fe:96:60:25:
                    d2:f9:1d:48:36:fe:c9:cc:70:97:59:7a:35:77:2d:
                    46:ea:74:59:c7:fb:36:ab:e8:59:60:3b:3c:ea:c2:
                    d9:dc:fb:d2:79:87:eb:a6:c4:d8:e2:02:63:3e:35:
                    7b:d4:39:c5:77:1e:01:aa:b0:e3:ff:9d:34:44:ee:
                    b3:6d:73:48:e7:86:8f:66:0f:38:22:c1:f5:93:a7:
                    1b:2a:fb:77:10:f5:36:c2:04:cf:43:56:4b:40:89:
                    80:3d:94:24:0f:64:7c:f3:83:3c:e8:91:54:1a:f7:
                    cf:ef:1b:b1:34:2d:31:6b:7d:33:67:69:eb:52:56:
                    ec:35:12:5e:f8:21:3c:84:ff:25:dc:19:e3:df:be:
                    8c:3a:6c:99:90:27:b3:88:5e:43:7b:df:c6:3a:f5:
                    f9:0d:48:a2:a4:96:d8:e5:5d:f6:02:fe:1e:dd:84:
                    47:82:7d:b2:1a:8d:42:61:05:6c:33:20:5e:e6:31:
                    46:93:4a:f3:26:b4:1b:80:4b:29:a6:fc:00:90:53:
                    7c:43:10:a5:ae:58:8d:50:ce:82:6a:55:02:db:a2:
                    54:a8:31:6b:f0:9e:01:59:87:cd:07:0a:a3:cf:3c:
                    fe:1a:8f:28:35:21:96:31:45:f4:30:e9:e7:cb:04:
                    a9:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:4C:B1:F0:57:B8:F5:91:BB:9B:E7:6F:54:F1:D5:36:EE:43:6B:01
            X509v3 Authority Key Identifier:
                keyid:C2:BD:7C:7D:74:F4:9C:E6:BE:C8:0D:95:C9:62:13:DD:0D:C5:C4:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6FFF22C277A104448C9BCFF9F7595C1BDBD80DE090D9A4889EB7B703E1F31945/0/C2BD7C7D74F49CE6BEC80D95C96213DD0DC5C4B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2BD7C7D74F49CE6BEC80D95C96213DD0DC5C4B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6FFF22C277A104448C9BCFF9F7595C1BDBD80DE090D9A4889EB7B703E1F31945/0/C2BD7C7D74F49CE6BEC80D95C96213DD0DC5C4B7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:b3:c5:09:8f:89:02:32:68:e0:80:11:1e:9a:ab:49:41:49:
         13:ef:40:c0:0f:6b:c7:f2:8c:bc:4d:69:8e:5e:30:6a:17:7c:
         f5:65:0a:14:ec:00:35:73:3d:18:b2:3f:f2:1a:56:91:e5:dd:
         5e:b1:53:2d:8c:8f:75:5a:27:f8:dc:b5:af:67:30:6b:a6:aa:
         14:dc:31:4c:85:df:fe:99:a3:4a:2c:9b:8a:26:f7:b1:5c:bc:
         c8:5a:a9:0f:6a:8b:62:8c:73:0e:a7:e6:99:5f:00:f2:db:13:
         01:7a:b3:19:66:d7:3b:84:ae:89:fb:9f:b0:69:8c:cd:35:20:
         ed:2b:5e:e7:1a:a9:e8:8c:80:4a:9f:64:af:24:a7:15:0a:e6:
         3d:88:ec:a5:1b:ae:fc:c4:b3:a8:6c:c7:ec:d4:8e:ac:79:d8:
         6d:f5:d4:ae:8b:80:45:0c:b8:61:e5:7d:e3:c1:9a:52:70:c8:
         58:2c:a7:8a:3f:c3:b2:8c:1a:61:97:e5:fc:28:e0:b8:41:5b:
         0b:99:76:7b:2c:27:73:8b:78:54:c0:a1:94:4a:c9:3f:b4:8f:
         70:3e:d9:52:db:a4:fd:f8:62:fc:74:ee:2d:80:b3:5e:34:1b:
         62:2a:53:ea:64:6c:d4:1a:d5:9b:24:7f:76:f8:35:61:b4:6b:
         5d:e7:cf:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 05:43:58 2026 by rpki-client