Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/168AF9828C929A8BC03AE488A068519C415C253FE317E90CE437F9B8F62200F5/0/88B9C7D3CB5B4DC497A9B1FA06B333643B5E7232.mft
File:                     88B9C7D3CB5B4DC497A9B1FA06B333643B5E7232.mft (raw, json)
Hash identifier:          lIA63DgmVbw5kgvy4tPeqdUxt7VR+78xm7Ntrg9PHb4=
Subject key identifier:   EC:C6:F4:68:47:84:AD:AC:3E:DB:91:90:0E:8D:85:82:83:87:BD:0E
Authority key identifier: 88:B9:C7:D3:CB:5B:4D:C4:97:A9:B1:FA:06:B3:33:64:3B:5E:72:32
Certificate issuer:       /CN=88B9C7D3CB5B4DC497A9B1FA06B333643B5E7232
Certificate serial:       7EBB2E2801E83EC5D1AD3DE90F4D1A7850B4730F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/88B9C7D3CB5B4DC497A9B1FA06B333643B5E7232.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/168AF9828C929A8BC03AE488A068519C415C253FE317E90CE437F9B8F62200F5/0/88B9C7D3CB5B4DC497A9B1FA06B333643B5E7232.mft
Manifest number:          65
Signing time:             Fri 17 Apr 2026 16:08:34 +0000
Manifest this update:     Fri 17 Apr 2026 16:03:34 +0000
Manifest next update:     Thu 23 Apr 2026 14:13:34 +0000
Files and hashes:         1: 323830363a3430343a3a2f33322d3438203d3e20323730323231.roa (hash: MfWEaJC8zJvG0pibbyROR4+xAu/tstOCtmjgq04T+wQ=)
                          2: 88B9C7D3CB5B4DC497A9B1FA06B333643B5E7232.crl (hash: +Gngvvv7WWlU3YgPfB21dkpdpcs/uzRLjEeVp7DpuAo=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/168AF9828C929A8BC03AE488A068519C415C253FE317E90CE437F9B8F62200F5/0/88B9C7D3CB5B4DC497A9B1FA06B333643B5E7232.crl
                          rsync://repository.lacnic.net/rpki/lacnic/168AF9828C929A8BC03AE488A068519C415C253FE317E90CE437F9B8F62200F5/0/88B9C7D3CB5B4DC497A9B1FA06B333643B5E7232.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/88B9C7D3CB5B4DC497A9B1FA06B333643B5E7232.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Apr 2026 04:33:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:bb:2e:28:01:e8:3e:c5:d1:ad:3d:e9:0f:4d:1a:78:50:b4:73:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88B9C7D3CB5B4DC497A9B1FA06B333643B5E7232
        Validity
            Not Before: Apr 17 16:03:34 2026 GMT
            Not After : Apr 23 14:13:34 2026 GMT
        Subject: CN=ECC6F4684784ADAC3EDB91900E8D85828387BD0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:09:80:1a:68:fc:d0:26:38:1f:db:8f:3c:ed:
                    be:21:64:e4:d8:ad:8d:02:cb:20:1a:56:fc:f3:6a:
                    4b:ea:5d:43:c7:9d:ef:cd:64:92:fb:32:67:af:85:
                    3b:20:07:cf:2a:27:5b:68:ec:88:d3:47:27:fb:55:
                    c6:a4:47:1f:e0:3a:73:19:2a:6c:17:b7:2a:50:b3:
                    35:5d:c9:cc:f5:66:ce:34:c6:9a:f7:a5:01:fb:3c:
                    a5:b8:6a:cd:7f:da:4c:98:6d:be:92:19:48:cc:a6:
                    f3:c2:b9:cf:bc:1e:d5:af:9d:f0:54:44:22:c9:ce:
                    f5:8f:a5:18:b8:20:51:1b:c0:7c:5d:e1:a2:8b:df:
                    ba:da:f5:9f:15:86:a2:b8:89:5f:29:cf:e1:cb:9d:
                    22:56:e1:91:b0:79:9d:68:83:d7:90:30:49:d0:1f:
                    17:53:af:41:9a:9f:e7:23:9b:15:4d:0f:33:2b:ad:
                    06:a5:99:46:f4:5d:63:d6:26:74:d9:27:70:02:99:
                    94:f7:f7:02:3d:cb:e7:fa:e1:b4:e2:80:c4:ae:05:
                    46:18:88:c9:a4:a7:54:36:49:52:73:d1:b9:a3:fe:
                    7f:b3:3a:5e:9f:2d:70:3c:b3:27:85:14:78:ea:88:
                    e3:54:fa:14:b5:d8:4c:26:4f:c5:21:9a:2a:91:b0:
                    bd:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:C6:F4:68:47:84:AD:AC:3E:DB:91:90:0E:8D:85:82:83:87:BD:0E
            X509v3 Authority Key Identifier:
                keyid:88:B9:C7:D3:CB:5B:4D:C4:97:A9:B1:FA:06:B3:33:64:3B:5E:72:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/168AF9828C929A8BC03AE488A068519C415C253FE317E90CE437F9B8F62200F5/0/88B9C7D3CB5B4DC497A9B1FA06B333643B5E7232.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/88B9C7D3CB5B4DC497A9B1FA06B333643B5E7232.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/168AF9828C929A8BC03AE488A068519C415C253FE317E90CE437F9B8F62200F5/0/88B9C7D3CB5B4DC497A9B1FA06B333643B5E7232.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:d6:ac:70:91:7d:e1:b2:2d:05:21:33:ad:34:a2:7b:d8:c8:
         73:7c:00:0b:5a:8c:af:35:c6:ad:3e:45:64:18:5c:dc:fa:6c:
         21:92:01:44:6e:13:56:6e:02:39:d8:74:75:26:79:2b:04:6f:
         09:94:e6:b9:ae:c0:43:3a:b7:20:96:28:33:9d:9a:d9:98:fb:
         00:03:4f:6a:80:48:f2:5d:44:d8:e5:00:5d:77:7f:4f:67:0d:
         bd:9e:43:a5:82:0e:8a:65:e1:17:66:b3:3f:1e:a4:ca:d6:81:
         7e:00:ee:a1:4c:a2:6d:42:7d:a8:b9:ab:dd:84:b6:da:44:36:
         c6:8b:f6:ee:29:b7:08:81:e2:fb:1b:7d:de:2c:9c:5a:2a:17:
         2d:a6:38:2c:b7:a8:9c:68:c3:e4:c5:ec:49:48:53:50:78:9d:
         9b:21:ac:7d:85:36:ae:d0:7a:77:10:24:e5:41:c7:87:a0:f5:
         21:e5:72:6b:17:b8:93:3f:62:69:0c:92:98:99:22:e4:41:a5:
         5c:85:53:2e:ba:a3:76:e3:71:1b:90:49:7d:f7:d6:02:0e:55:
         77:e1:be:42:c7:ce:b9:ae:ff:f6:4b:c0:2f:d2:03:d8:f1:26:
         90:19:3e:8b:8f:c4:2f:21:8e:30:bb:c1:70:be:69:76:fe:71:
         ea:80:3f:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:35:52 2026 by rpki-client