Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DB7B8B4B4E6E8C43722E958F037046B89E9E27F0DF2AA08EB3DFD9DCCECF1247/0/9E7F2EB76A05A952625CB92EA40D238CA348F718.mft
File:                     9E7F2EB76A05A952625CB92EA40D238CA348F718.mft (raw, json)
Hash identifier:          3Du5nh4lrwyEQI6KPEs9Fp0CYFLK8VAWEV5bxeGlvh0=
Subject key identifier:   D9:41:E1:11:FD:5C:F5:96:C7:F0:24:39:93:E4:8C:9D:BE:51:E7:EA
Authority key identifier: 9E:7F:2E:B7:6A:05:A9:52:62:5C:B9:2E:A4:0D:23:8C:A3:48:F7:18
Certificate issuer:       /CN=9E7F2EB76A05A952625CB92EA40D238CA348F718
Certificate serial:       629C6ABBE5DB52812C29B9BE57F7B2433BE9B3E9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E7F2EB76A05A952625CB92EA40D238CA348F718.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DB7B8B4B4E6E8C43722E958F037046B89E9E27F0DF2AA08EB3DFD9DCCECF1247/0/9E7F2EB76A05A952625CB92EA40D238CA348F718.mft
Manifest number:          0135
Signing time:             Thu 06 Nov 2025 15:27:35 +0000
Manifest this update:     Thu 06 Nov 2025 15:22:35 +0000
Manifest next update:     Wed 12 Nov 2025 03:50:35 +0000
Files and hashes:         1: 3137302e38302e32372e302f32342d3234203d3e203237393831.roa (hash: aYAvg8k10aW9dP7Fj9v8BXd2e7qGtU+OWOAIdESdQlk=)
                          2: 3137302e38302e32342e302f32342d3234203d3e203237393831.roa (hash: pIW4RaxERzyb3mabYdUmJuJtuX3eWvenOxc7LKOw9jE=)
                          3: 9E7F2EB76A05A952625CB92EA40D238CA348F718.crl (hash: 12Y8q2r85T9rmVgP62hVIMEwPcgRsTuWzVEypkd3oPw=)
                          4: 3230302e302e3138322e302f32342d3234203d3e203237393831.roa (hash: 78A+AkIfAJ2wuL+p89b/B9Vc3VixGXY7h/SgvV0D0vA=)
                          5: 3230302e302e3138332e302f32342d3234203d3e203237393831.roa (hash: 5TcjF8GjohyAMP6NS+e32QqzvVCjaQtm7FhmtLS3268=)
                          6: 3137302e38302e32352e302f32342d3234203d3e203237393831.roa (hash: sllmiP/024PgdI1npYTfAq9H/30TOMS2DwC7oOGtQ+U=)
                          7: 3137302e38302e32362e302f32342d3234203d3e203237393831.roa (hash: 4tmxWgje/NssD+wMjdRqU4gBrg30gFk5YFsKou8Il4o=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DB7B8B4B4E6E8C43722E958F037046B89E9E27F0DF2AA08EB3DFD9DCCECF1247/0/9E7F2EB76A05A952625CB92EA40D238CA348F718.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DB7B8B4B4E6E8C43722E958F037046B89E9E27F0DF2AA08EB3DFD9DCCECF1247/0/9E7F2EB76A05A952625CB92EA40D238CA348F718.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E7F2EB76A05A952625CB92EA40D238CA348F718.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 11 Nov 2025 05:17:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:9c:6a:bb:e5:db:52:81:2c:29:b9:be:57:f7:b2:43:3b:e9:b3:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E7F2EB76A05A952625CB92EA40D238CA348F718
        Validity
            Not Before: Nov  6 15:22:35 2025 GMT
            Not After : Nov 12 03:50:35 2025 GMT
        Subject: CN=D941E111FD5CF596C7F0243993E48C9DBE51E7EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:d6:a6:8e:1d:0d:c7:e9:0b:47:c8:9f:42:ae:
                    26:67:d9:53:b2:3b:2d:62:4f:79:17:54:1a:d1:de:
                    d7:be:0e:78:97:f6:b1:0e:76:c6:55:26:b7:7b:f6:
                    8b:6b:55:78:e4:d3:05:da:7e:b6:68:65:71:96:6e:
                    02:9c:33:48:64:79:a7:3c:c3:6d:fd:b0:b2:a9:e2:
                    a5:f5:63:77:d0:f2:86:4d:0f:46:9b:fa:bd:c9:23:
                    5b:df:2e:af:7f:0a:2d:19:93:e7:9a:b6:b2:58:d1:
                    25:bd:8c:b4:bc:7a:f2:df:11:3a:ad:74:39:ff:36:
                    55:fb:e1:36:25:ed:e1:15:df:2e:0b:03:4e:36:83:
                    e0:fb:d0:73:c8:2b:09:da:a4:73:c6:4f:f6:75:10:
                    0f:97:af:a5:6b:b0:73:97:a1:ba:99:e0:f3:ef:7a:
                    d5:f4:2a:84:69:25:0a:8b:63:88:0a:d1:60:6c:32:
                    6f:64:d0:27:0c:d4:be:75:3f:23:84:89:ca:f7:f2:
                    63:60:05:31:da:32:f8:f1:12:07:d6:e8:c0:fd:2d:
                    26:ff:08:48:fe:cc:a0:f4:0d:c8:71:26:67:61:3c:
                    a2:85:c0:4d:6e:2e:f0:73:c7:dc:64:13:06:53:b5:
                    68:a0:d7:a3:a6:79:92:48:54:1d:cc:13:b6:5f:f5:
                    b0:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:41:E1:11:FD:5C:F5:96:C7:F0:24:39:93:E4:8C:9D:BE:51:E7:EA
            X509v3 Authority Key Identifier:
                keyid:9E:7F:2E:B7:6A:05:A9:52:62:5C:B9:2E:A4:0D:23:8C:A3:48:F7:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DB7B8B4B4E6E8C43722E958F037046B89E9E27F0DF2AA08EB3DFD9DCCECF1247/0/9E7F2EB76A05A952625CB92EA40D238CA348F718.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E7F2EB76A05A952625CB92EA40D238CA348F718.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DB7B8B4B4E6E8C43722E958F037046B89E9E27F0DF2AA08EB3DFD9DCCECF1247/0/9E7F2EB76A05A952625CB92EA40D238CA348F718.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:d9:ff:2b:a8:9c:02:94:cb:55:11:07:f4:d3:81:31:1d:24:
         cd:0c:8c:b1:61:3e:0f:d6:30:55:f0:2e:df:dc:b6:88:4b:e6:
         e2:71:72:bb:0f:08:15:69:c4:ee:c6:86:d9:81:02:f2:4c:b7:
         af:38:8f:ca:24:e8:d5:09:29:2c:57:75:d1:4e:96:d2:5a:56:
         ed:29:36:71:06:27:56:55:c8:9e:c8:91:b6:a7:74:d5:88:c9:
         99:9f:4a:56:9f:79:c5:d8:fc:eb:96:39:c2:ad:e3:bc:cc:d6:
         29:b9:92:64:60:2c:ca:30:94:d6:6d:17:17:e8:ea:01:32:1c:
         f6:49:8d:5e:f0:3e:a1:6d:d4:c1:72:0f:60:5c:d8:bd:f4:68:
         3b:ee:c1:02:d6:ff:14:5b:28:a3:83:e7:f2:d7:df:1f:33:2d:
         5f:a8:56:f8:c4:a5:93:1b:f8:da:52:b9:76:13:1d:b0:b0:1a:
         08:78:79:db:34:23:c3:f8:7a:e5:f4:a7:1c:55:2a:74:2b:cf:
         f8:f9:8b:1c:e7:59:d8:ca:e9:53:8f:58:00:8c:e1:25:50:86:
         e2:b8:a4:db:f5:f1:47:f4:88:1c:26:57:5b:bc:8b:cd:63:4e:
         40:0f:3f:c7:7d:75:02:ee:c4:40:76:32:23:4a:97:7b:75:6c:
         7d:d0:b4:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 20:47:23 2025 by rpki-client