Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/Ge459Jp9EqoMrWNNkVhgM78x1kD4MKdjfDr92w3uhQor/0/968400C9DFC16D643EF5C94C34F993F17C7568AA.mft
File:                     968400C9DFC16D643EF5C94C34F993F17C7568AA.mft (raw, json)
Hash identifier:          XVKxmWXaDMiobkM1Y3W5mhOaIk10Cx3qFs4DDjvFHno=
Subject key identifier:   B4:1C:43:27:0A:A3:10:64:34:9F:11:00:FE:5E:46:75:46:F1:76:5C
Authority key identifier: 96:84:00:C9:DF:C1:6D:64:3E:F5:C9:4C:34:F9:93:F1:7C:75:68:AA
Certificate issuer:       /CN=968400C9DFC16D643EF5C94C34F993F17C7568AA
Certificate serial:       68D55FEDCFE46683FDBB297FC58EDC5B75A2EBA0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/968400C9DFC16D643EF5C94C34F993F17C7568AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ge459Jp9EqoMrWNNkVhgM78x1kD4MKdjfDr92w3uhQor/0/968400C9DFC16D643EF5C94C34F993F17C7568AA.mft
Manifest number:          0488
Signing time:             Sun 11 Oct 2026 02:23:14 +0000
Manifest this update:     Sun 11 Oct 2026 02:18:14 +0000
Manifest next update:     Mon 12 Oct 2026 04:36:14 +0000
Files and hashes:         1: 3138392e3132342e39362e302f32302d3234203d3e203232333536.roa (hash: VJJnatX9PpahQcZ4u7y/9xGVAW8lmQjVl1nyp69bzCs=)
                          2: 968400C9DFC16D643EF5C94C34F993F17C7568AA.crl (hash: Tay+5QfMQI+eT89jgq83njqYPDfV7pPs1lhV5EpSbYg=)
                          3: 3230302e3136302e3139322e302f32302d3234203d3e203232333536.roa (hash: w/zZDpFsdqwHm+eM2tEmoIfW63zV3dNfQ85wMOXyDTQ=)
                          4: 3137372e3139302e39362e302f32302d3234203d3e203232333536.roa (hash: zpsWcTHE4Sco4YcQkYtoiNTtif8Kyx6fOOvEm3nSQLc=)
                          5: 3138362e3139322e3132382e302f31392d3234203d3e203232333536.roa (hash: amR+0SLg6kGFYPNft6EZilA4SfBkMjeP860weU+dZzk=)
                          6: 323030313a313239633a3a2f33322d3438203d3e203232333536.roa (hash: m5Nc9dH10neNbKM+w3cyytiacRROX+YRbx16uynq/lQ=)
                          7: 3230312e37362e3139322e302f32302d3234203d3e203232333536.roa (hash: +5vV9SWUULsQqY+LvioHyLpOc2IPaOTxU/VMOjRhlTc=)
                          8: 3230302e3137302e38302e302f32302d3234203d3e203232333536.roa (hash: QRYh9ZQMlJVdqSERPOTOdXLh0LID5cZaIIKXYRyxk7o=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ge459Jp9EqoMrWNNkVhgM78x1kD4MKdjfDr92w3uhQor/0/968400C9DFC16D643EF5C94C34F993F17C7568AA.crl
                          rsync://rpki-repo.registro.br/repo/Ge459Jp9EqoMrWNNkVhgM78x1kD4MKdjfDr92w3uhQor/0/968400C9DFC16D643EF5C94C34F993F17C7568AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/968400C9DFC16D643EF5C94C34F993F17C7568AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 04:36:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:d5:5f:ed:cf:e4:66:83:fd:bb:29:7f:c5:8e:dc:5b:75:a2:eb:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=968400C9DFC16D643EF5C94C34F993F17C7568AA
        Validity
            Not Before: Oct 11 02:18:14 2026 GMT
            Not After : Oct 12 04:36:14 2026 GMT
        Subject: CN=B41C43270AA31064349F1100FE5E467546F1765C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:a5:82:0f:25:62:19:63:d2:1b:bc:ff:84:30:
                    1d:b2:28:e7:fc:7d:bc:12:45:8a:d5:c8:80:7d:af:
                    c1:65:50:4a:d2:fa:40:31:2c:32:e6:27:28:4b:6b:
                    45:df:8a:f1:62:97:e8:a4:c2:58:1b:23:de:3d:d6:
                    79:3c:6f:e2:f8:68:19:a5:d0:b9:b2:ce:53:6f:c2:
                    42:f0:a7:d6:74:85:6b:1f:e4:8d:f6:86:fd:56:6a:
                    a2:75:14:57:85:06:34:bb:58:e9:4f:50:e2:2f:4c:
                    97:f6:04:df:54:86:b3:05:df:71:51:1f:a2:df:90:
                    0d:0d:7c:31:28:0f:8b:8a:79:c3:e7:d0:d3:68:8c:
                    1c:65:02:91:9d:90:5e:6d:e1:1f:e7:0c:61:07:fe:
                    f1:44:be:24:ff:5d:ef:e7:32:97:b7:3f:67:18:70:
                    d4:f1:68:a8:1e:37:f8:bd:cc:72:5b:53:a9:52:30:
                    56:f7:71:e1:36:5e:1c:3a:35:29:94:89:43:2a:5e:
                    92:ba:17:93:e9:47:cb:78:5c:68:81:1e:ea:4f:3e:
                    c3:ed:bf:87:7a:8b:58:7b:3e:a8:10:1b:c2:9c:f1:
                    70:42:88:ca:c0:3b:49:da:8f:00:d6:67:47:78:1b:
                    7e:70:67:3f:1f:a3:61:b9:db:e1:c4:0b:26:ce:04:
                    ed:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:1C:43:27:0A:A3:10:64:34:9F:11:00:FE:5E:46:75:46:F1:76:5C
            X509v3 Authority Key Identifier:
                keyid:96:84:00:C9:DF:C1:6D:64:3E:F5:C9:4C:34:F9:93:F1:7C:75:68:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ge459Jp9EqoMrWNNkVhgM78x1kD4MKdjfDr92w3uhQor/0/968400C9DFC16D643EF5C94C34F993F17C7568AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/968400C9DFC16D643EF5C94C34F993F17C7568AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ge459Jp9EqoMrWNNkVhgM78x1kD4MKdjfDr92w3uhQor/0/968400C9DFC16D643EF5C94C34F993F17C7568AA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:9d:c5:a5:9f:42:2b:ae:73:0c:d0:8c:d8:e1:62:80:86:ce:
         0c:aa:cb:3a:2d:67:f9:bc:67:7c:9b:38:41:d1:14:a0:e6:f3:
         12:35:02:41:a0:fe:ec:c7:6f:a1:9c:67:d8:61:41:5a:8b:59:
         06:33:0e:dc:7d:8f:e2:2b:9e:2e:18:22:7d:65:36:01:c3:64:
         10:d2:b1:96:21:18:e6:db:40:05:d9:de:c0:d3:10:03:cb:52:
         75:73:3a:70:16:89:90:4c:4b:84:ae:09:a6:28:a8:1d:d8:0b:
         a6:c6:bb:b7:31:f3:42:60:b0:16:e4:a0:81:85:a3:cd:4e:7a:
         65:b8:53:34:45:23:3c:74:e1:9a:7c:ef:9e:c8:c6:fb:78:ce:
         1c:29:70:c1:9b:40:a5:0e:27:03:3b:dc:96:ed:91:9b:64:6f:
         91:57:b7:4f:24:a0:ec:46:4d:75:c3:8d:71:07:cc:fc:29:f3:
         d9:40:b4:64:ff:36:e2:b1:23:79:d4:c7:ca:bc:dd:75:51:4b:
         9b:99:36:7d:92:56:1f:f0:3b:71:ac:e2:70:6f:ac:4b:b3:36:
         ff:72:ab:84:f4:ee:79:48:a9:f2:15:ed:47:30:30:0d:61:9c:
         a0:32:7d:bc:06:ca:d6:a8:d5:ff:c0:04:f6:41:ae:63:86:01:
         0d:df:7c:e5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUaNVf7c/kZoP9uyl/xY7cW3Wi66AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTY4NDAwQzlERkMxNkQ2NDNFRjVDOTRDMzRGOTkzRjE3
Qzc1NjhBQTAeFw0yNjEwMTEwMjE4MTRaFw0yNjEwMTIwNDM2MTRaMDMxMTAvBgNV
BAMTKEI0MUM0MzI3MEFBMzEwNjQzNDlGMTEwMEZFNUU0Njc1NDZGMTc2NUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDopYIPJWIZY9IbvP+EMB2yKOf8
fbwSRYrVyIB9r8FlUErS+kAxLDLmJyhLa0XfivFil+ikwlgbI9491nk8b+L4aBml
0LmyzlNvwkLwp9Z0hWsf5I32hv1WaqJ1FFeFBjS7WOlPUOIvTJf2BN9UhrMF33FR
H6LfkA0NfDEoD4uKecPn0NNojBxlApGdkF5t4R/nDGEH/vFEviT/Xe/nMpe3P2cY
cNTxaKgeN/i9zHJbU6lSMFb3ceE2Xhw6NSmUiUMqXpK6F5PpR8t4XGiBHupPPsPt
v4d6i1h7PqgQG8Kc8XBCiMrAO0najwDWZ0d4G35wZz8fo2G52+HECybOBO3hAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUtBxDJwqjEGQ0nxEA/l5GdUbxdlwwHwYDVR0j
BBgwFoAUloQAyd/BbWQ+9clMNPmT8Xx1aKowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2U0NTlKcDlFcW9NcldOTmtWaGdNNzh4MWtENE1LZGpmRHI5MnczdWhR
b3IvMC85Njg0MDBDOURGQzE2RDY0M0VGNUM5NEMzNEY5OTNGMTdDNzU2OEFBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk2ODQwMEM5REZDMTZENjQz
RUY1Qzk0QzM0Rjk5M0YxN0M3NTY4QUEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
R2U0NTlKcDlFcW9NcldOTmtWaGdNNzh4MWtENE1LZGpmRHI5MnczdWhRb3IvMC85
Njg0MDBDOURGQzE2RDY0M0VGNUM5NEMzNEY5OTNGMTdDNzU2OEFBLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAIp3FpZ9CK65zDNCM2OFigIbODKrLOi1n+bxnfJs4QdEUoObzEjUCQaD+7Mdv
oZxn2GFBWotZBjMO3H2P4iueLhgifWU2AcNkENKxliEY5ttABdnewNMQA8tSdXM6
cBaJkExLhK4JpiioHdgLpsa7tzHzQmCwFuSggYWjzU56ZbhTNEUjPHThmnzvnsjG
+3jOHClwwZtApQ4nAzvclu2Rm2RvkVe3TySg7EZNdcONcQfM/Cnz2UC0ZP824rEj
edTHyrzddVFLm5k2fZJWH/A7cazicG+sS7M2/3KrhPTueUip8hXtRzAwDWGcoDJ9
vAbK1qjV/8AE9kGuY4YBDd985Q==
-----END CERTIFICATE-----