Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/CxTKE6L14FHfSLrnB1kQ2b5jhtcif6PxthNE9ZT4TXWP/0/DCE12EC0DA41B59BE75216E28A3D798D4313AFEE.mft
File:                     DCE12EC0DA41B59BE75216E28A3D798D4313AFEE.mft (raw, json)
Hash identifier:          CZSyFXm2Muts4ChbwBTcdfIVXj2/ARLu9H/JgtMvYcE=
Subject key identifier:   ED:D4:61:DC:FC:9C:DF:13:81:9A:06:3E:40:ED:BB:38:6B:86:D9:DB
Authority key identifier: DC:E1:2E:C0:DA:41:B5:9B:E7:52:16:E2:8A:3D:79:8D:43:13:AF:EE
Certificate issuer:       /CN=DCE12EC0DA41B59BE75216E28A3D798D4313AFEE
Certificate serial:       76405B05E60C203196231A9B4456E75FFB6EEFDC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCE12EC0DA41B59BE75216E28A3D798D4313AFEE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CxTKE6L14FHfSLrnB1kQ2b5jhtcif6PxthNE9ZT4TXWP/0/DCE12EC0DA41B59BE75216E28A3D798D4313AFEE.mft
Manifest number:          0220
Signing time:             Thu 05 Nov 2026 03:31:41 +0000
Manifest this update:     Thu 05 Nov 2026 03:26:41 +0000
Manifest next update:     Fri 06 Nov 2026 07:09:41 +0000
Files and hashes:         1: 34352e3137362e3232302e302f32322d3234203d3e20323639303134.roa (hash: /L++aiB0G2JeqjRaay0H6d/E6MVL2Or5FI+d/8yBNIU=)
                          2: DCE12EC0DA41B59BE75216E28A3D798D4313AFEE.crl (hash: l6P8ZwGoAVGW/Q5RRXOaNEl45qpBoRBp7QMjRTWMmi0=)
                          3: 34352e3137362e3232322e302f32342d3234203d3e20323639303134.roa (hash: TMqtVymNnVZQnDoesvbltGKlzPZonslILIb+/kn6jaM=)
                          4: 323830343a356532343a3a2f33322d3332203d3e20323639303134.roa (hash: gYJIAgQO/pbG7SCS4IxSyxbC1o0mKZfDkoPR9ZIpaU0=)
                          5: 323830343a356532343a3a2f33322d3336203d3e20323639303134.roa (hash: GEDe8Crb8E8hryIGEyTA9CD8eSF8LTOae/OP02CbiAU=)
                          6: 34352e3137362e3232302e302f32322d3232203d3e20323639303134.roa (hash: SH/H79dhq9ZDRW6z+pRdV00UqWxGpL2yEZFuewPOr+4=)
                          7: 34352e3137362e3232302e302f32332d3233203d3e20323639303134.roa (hash: bWIPYzVkLzgqHKZjWU7VfXxrdgzoDBGHIudXfrUNzsQ=)
                          8: 34352e3137362e3232322e302f32332d3233203d3e20323639303134.roa (hash: aOadg1Jrln36WM9I8/+D3CD75Sv2Mn0G0R95xqiCx0Y=)
                          9: 34352e3137362e3232332e302f32342d3234203d3e20323639303134.roa (hash: 4rQ6zK79hkekm4Od8rCyUwuN2XcSD//AW3OYG6lzvj8=)
                          10: 34352e3137362e3232302e302f32342d3234203d3e20323639303134.roa (hash: MHvxb++mGBTWBQCC9yWWCWNh1Bzqf+LstxrAoEs3xSU=)
                          11: 34352e3137362e3232312e302f32342d3234203d3e20323639303134.roa (hash: wL4SNZRXDfxVuAN4TQt9fu7WJTyXRYGVNm6Y/10ngRQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CxTKE6L14FHfSLrnB1kQ2b5jhtcif6PxthNE9ZT4TXWP/0/DCE12EC0DA41B59BE75216E28A3D798D4313AFEE.crl
                          rsync://rpki-repo.registro.br/repo/CxTKE6L14FHfSLrnB1kQ2b5jhtcif6PxthNE9ZT4TXWP/0/DCE12EC0DA41B59BE75216E28A3D798D4313AFEE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCE12EC0DA41B59BE75216E28A3D798D4313AFEE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 06 Nov 2026 07:09:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:40:5b:05:e6:0c:20:31:96:23:1a:9b:44:56:e7:5f:fb:6e:ef:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCE12EC0DA41B59BE75216E28A3D798D4313AFEE
        Validity
            Not Before: Nov  5 03:26:41 2026 GMT
            Not After : Nov  6 07:09:41 2026 GMT
        Subject: CN=EDD461DCFC9CDF13819A063E40EDBB386B86D9DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:59:11:7a:d4:4a:92:ca:28:9c:e7:7b:00:20:
                    82:f2:d4:88:6a:28:c7:a4:98:a3:03:f6:80:31:c0:
                    75:05:4d:d7:bd:8d:41:15:dc:d8:7c:b0:e2:11:c1:
                    01:53:29:c5:05:f4:af:05:3e:65:54:bf:4f:ac:8d:
                    a9:37:48:83:69:9f:37:b0:ff:96:9d:35:83:87:cf:
                    fe:11:4a:91:1a:4e:81:c0:63:8e:6c:b0:b5:df:d7:
                    06:04:68:24:d2:64:c0:59:67:92:9c:9e:fd:c3:23:
                    21:d8:2c:b8:3c:0a:78:b5:d8:cf:ef:94:61:aa:c7:
                    ad:9c:10:3b:52:79:9c:23:88:72:44:bb:d2:78:f2:
                    db:a1:2e:37:d4:72:d3:19:0c:85:51:a6:48:1f:08:
                    43:ad:98:d0:13:a4:39:e9:8a:89:bd:eb:7d:d4:a2:
                    2b:99:b4:fa:0c:c6:3b:8a:56:f4:02:1b:66:65:09:
                    a5:20:38:ca:6e:d3:c0:e3:91:5e:76:81:74:83:73:
                    92:ef:de:b8:7f:b9:fb:b1:85:5a:16:43:6d:04:b5:
                    86:9d:ed:4c:5a:e3:e5:58:c6:bf:c2:db:59:5c:d0:
                    80:80:de:6d:3e:77:cf:88:4c:ba:8e:5f:90:c5:a8:
                    41:df:21:38:40:df:66:2f:8a:d2:7f:f0:39:ed:43:
                    d1:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:D4:61:DC:FC:9C:DF:13:81:9A:06:3E:40:ED:BB:38:6B:86:D9:DB
            X509v3 Authority Key Identifier:
                keyid:DC:E1:2E:C0:DA:41:B5:9B:E7:52:16:E2:8A:3D:79:8D:43:13:AF:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CxTKE6L14FHfSLrnB1kQ2b5jhtcif6PxthNE9ZT4TXWP/0/DCE12EC0DA41B59BE75216E28A3D798D4313AFEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCE12EC0DA41B59BE75216E28A3D798D4313AFEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CxTKE6L14FHfSLrnB1kQ2b5jhtcif6PxthNE9ZT4TXWP/0/DCE12EC0DA41B59BE75216E28A3D798D4313AFEE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:d2:42:63:13:b2:09:d6:03:fb:0e:0c:7e:51:c8:e7:b9:d5:
         f6:79:81:2f:b2:cc:fa:e1:63:8b:ce:c9:7a:21:66:15:c4:a7:
         b5:33:92:b2:21:b2:19:3f:7c:af:e5:46:f8:73:33:d8:66:95:
         92:c2:10:f7:f4:03:9c:16:63:5e:99:7d:9e:c0:67:40:f5:e1:
         ea:26:41:e6:cf:f8:c8:65:a4:1b:a1:d2:7c:89:9f:0b:43:d0:
         44:2e:f9:1d:a9:51:2c:8a:30:c0:12:87:10:95:b4:cd:50:2d:
         11:ce:d9:22:8b:04:3f:51:23:a1:23:68:95:ad:67:f5:1b:87:
         ee:f4:ee:3e:31:0e:a4:2e:67:47:bd:a1:60:ba:f0:07:38:e5:
         8f:c3:2e:f1:a3:cf:18:c6:76:95:f4:dc:de:5e:26:61:ca:86:
         92:e3:c0:f0:b1:d3:a5:47:e0:7d:d0:c2:db:de:f8:bc:20:a2:
         85:d2:09:e4:66:30:3c:a8:19:76:00:33:bf:18:86:87:f4:fe:
         25:15:e8:4e:03:21:b3:40:0b:d5:b4:82:d6:e0:f8:f6:c4:be:
         ee:fd:98:b6:fc:d2:c7:cb:ae:60:8d:ec:19:d3:6e:7c:49:43:
         6b:c1:7e:06:d9:36:98:f3:9f:af:56:e4:5d:97:b1:d1:93:a6:
         5b:4d:4b:dc
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUdkBbBeYMIDGWIxqbRFbnX/tu79wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRENFMTJFQzBEQTQxQjU5QkU3NTIxNkUyOEEzRDc5OEQ0
MzEzQUZFRTAeFw0yNjExMDUwMzI2NDFaFw0yNjExMDYwNzA5NDFaMDMxMTAvBgNV
BAMTKEVERDQ2MURDRkM5Q0RGMTM4MTlBMDYzRTQwRURCQjM4NkI4NkQ5REIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7WRF61EqSyiic53sAIILy1Ihq
KMekmKMD9oAxwHUFTde9jUEV3Nh8sOIRwQFTKcUF9K8FPmVUv0+sjak3SINpnzew
/5adNYOHz/4RSpEaToHAY45ssLXf1wYEaCTSZMBZZ5Kcnv3DIyHYLLg8Cni12M/v
lGGqx62cEDtSeZwjiHJEu9J48tuhLjfUctMZDIVRpkgfCEOtmNATpDnpiom9633U
oiuZtPoMxjuKVvQCG2ZlCaUgOMpu08DjkV52gXSDc5Lv3rh/ufuxhVoWQ20EtYad
7Uxa4+VYxr/C21lc0ICA3m0+d8+ITLqOX5DFqEHfIThA32YvitJ/8DntQ9HxAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU7dRh3Pyc3xOBmgY+QO27OGuG2dswHwYDVR0j
BBgwFoAU3OEuwNpBtZvnUhbiij15jUMTr+4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ3hUS0U2TDE0RkhmU0xybkIxa1EyYjVqaHRjaWY2UHh0aE5FOVpUNFRY
V1AvMC9EQ0UxMkVDMERBNDFCNTlCRTc1MjE2RTI4QTNENzk4RDQzMTNBRkVFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RDRTEyRUMwREE0MUI1OUJF
NzUyMTZFMjhBM0Q3OThENDMxM0FGRUUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
Q3hUS0U2TDE0RkhmU0xybkIxa1EyYjVqaHRjaWY2UHh0aE5FOVpUNFRYV1AvMC9E
Q0UxMkVDMERBNDFCNTlCRTc1MjE2RTI4QTNENzk4RDQzMTNBRkVFLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAaNJCYxOyCdYD+w4MflHI57nV9nmBL7LM+uFji87JeiFmFcSntTOSsiGyGT98
r+VG+HMz2GaVksIQ9/QDnBZjXpl9nsBnQPXh6iZB5s/4yGWkG6HSfImfC0PQRC75
HalRLIowwBKHEJW0zVAtEc7ZIosEP1EjoSNola1n9RuH7vTuPjEOpC5nR72hYLrw
Bzjlj8Mu8aPPGMZ2lfTc3l4mYcqGkuPA8LHTpUfgfdDC2974vCCihdIJ5GYwPKgZ
dgAzvxiGh/T+JRXoTgMhs0AL1bSC1uD49sS+7v2YtvzSx8uuYI3sGdNufElDa8F+
Btk2mPOfr1bkXZex0ZOmW01L3A==
-----END CERTIFICATE-----