Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/41723B0679130F659FD2BC970D21FAE11B92497391E79D8A864EC930F7D8EB6F/0/259C857FBBE3D174F02EFBE0681691812000149A.mft
File:                     259C857FBBE3D174F02EFBE0681691812000149A.mft (raw, json)
Hash identifier:          Ksk8EjseELIJV0vrge27TQgeeavgN4uPS+kfY2sCmCM=
Subject key identifier:   15:D5:8E:3D:B0:27:05:95:C9:B6:53:81:E6:E7:66:22:D4:6D:F3:2A
Authority key identifier: 25:9C:85:7F:BB:E3:D1:74:F0:2E:FB:E0:68:16:91:81:20:00:14:9A
Certificate issuer:       /CN=259C857FBBE3D174F02EFBE0681691812000149A
Certificate serial:       7CBFA87C8F044DD135F79C17CF64C6305439F416
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/259C857FBBE3D174F02EFBE0681691812000149A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/41723B0679130F659FD2BC970D21FAE11B92497391E79D8A864EC930F7D8EB6F/0/259C857FBBE3D174F02EFBE0681691812000149A.mft
Manifest number:          0172
Signing time:             Sun 01 Mar 2026 16:55:12 +0000
Manifest this update:     Sun 01 Mar 2026 16:50:12 +0000
Manifest next update:     Sat 07 Mar 2026 06:52:12 +0000
Files and hashes:         1: 3137302e3234372e39362e302f32342d3234203d3e20323635363539.roa (hash: 6vj8aS6SeoD0tMc6O64D2iLeio74vWdXZGNLvxImxwU=)
                          2: 259C857FBBE3D174F02EFBE0681691812000149A.crl (hash: mdXHEr27JQHTcEpeH8PK5U4Goj/2cev1wuA02r+dY+E=)
                          3: 323830333a623663303a3a2f33322d3332203d3e20323635363539.roa (hash: tz5NGBbZHlJHFvrDG6X8bD9kTiTR/hw957UUKkztHD4=)
                          4: 3137302e3234372e39362e302f32322d3234203d3e20323635363539.roa (hash: RUg/NavMR/fFlcFoDBKqN3kRoM/mJ6zdR46g8rINTRM=)
                          5: 3137302e3234372e39382e302f32342d3234203d3e20323635363539.roa (hash: w9Xsr1lsIJ01m0TfJWAnkQ15dYGYuXOP4zNKMwlfH/o=)
                          6: 3137302e3234372e39392e302f32342d3234203d3e20323635363539.roa (hash: VTNhT0kJ+lDZDdF3WslmaL35DJm3Mz68viSaUh2R4+A=)
                          7: 3137302e3234372e39372e302f32342d3234203d3e20323635363539.roa (hash: Lxxl/OWDbs4znPmRnlWYgjHy7w0b44TCsegOcuzvwYA=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/41723B0679130F659FD2BC970D21FAE11B92497391E79D8A864EC930F7D8EB6F/0/259C857FBBE3D174F02EFBE0681691812000149A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/41723B0679130F659FD2BC970D21FAE11B92497391E79D8A864EC930F7D8EB6F/0/259C857FBBE3D174F02EFBE0681691812000149A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/259C857FBBE3D174F02EFBE0681691812000149A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 04:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:bf:a8:7c:8f:04:4d:d1:35:f7:9c:17:cf:64:c6:30:54:39:f4:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=259C857FBBE3D174F02EFBE0681691812000149A
        Validity
            Not Before: Mar  1 16:50:12 2026 GMT
            Not After : Mar  7 06:52:12 2026 GMT
        Subject: CN=15D58E3DB0270595C9B65381E6E76622D46DF32A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c6:67:c7:92:5f:93:3e:81:24:6f:63:64:a4:
                    e0:73:de:d7:05:64:c9:67:53:41:25:b9:3a:5b:00:
                    0b:1d:eb:b4:42:ae:7c:ee:2a:0f:c9:2f:7d:2b:b6:
                    07:05:9f:a4:c7:83:13:d4:65:8a:a1:a1:b7:af:e3:
                    e4:8e:97:e4:70:aa:f6:61:48:ae:9e:73:5a:5b:7e:
                    a3:2e:8e:05:35:d9:a4:85:7e:5e:04:c6:b5:e8:8b:
                    0c:87:c5:a8:d4:32:3a:f9:82:33:9f:ab:f4:03:f4:
                    ef:d1:20:2b:62:b9:a7:36:c9:aa:fe:2b:bc:4a:eb:
                    cc:4d:5a:2f:43:00:1a:43:2c:7b:f8:f8:65:9b:d9:
                    45:59:19:67:7f:12:bc:13:64:f5:f1:ce:8a:0c:b5:
                    17:c4:04:ca:3a:cd:8c:f8:2c:4d:cd:d0:a2:65:80:
                    a5:cb:b9:f9:2b:fc:9b:41:ab:8d:91:9d:0d:15:38:
                    37:d6:d3:0e:60:49:3d:f9:ee:e5:e8:ec:4e:74:e2:
                    63:41:b0:de:15:92:a2:de:8c:41:54:27:41:3e:df:
                    b7:2e:1d:87:f6:ba:c3:0a:6c:60:cf:16:e7:76:f3:
                    96:14:5f:4d:dc:c0:88:78:f4:a0:f5:95:c6:b0:ad:
                    95:f7:a1:57:1a:66:b6:cc:9b:ba:04:2d:04:3b:2d:
                    4c:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:D5:8E:3D:B0:27:05:95:C9:B6:53:81:E6:E7:66:22:D4:6D:F3:2A
            X509v3 Authority Key Identifier:
                keyid:25:9C:85:7F:BB:E3:D1:74:F0:2E:FB:E0:68:16:91:81:20:00:14:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/41723B0679130F659FD2BC970D21FAE11B92497391E79D8A864EC930F7D8EB6F/0/259C857FBBE3D174F02EFBE0681691812000149A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/259C857FBBE3D174F02EFBE0681691812000149A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/41723B0679130F659FD2BC970D21FAE11B92497391E79D8A864EC930F7D8EB6F/0/259C857FBBE3D174F02EFBE0681691812000149A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:63:a5:bb:fa:13:ea:ba:2f:88:62:e2:b5:20:71:65:b9:8e:
         86:bf:c4:13:d2:94:bf:4e:ac:91:20:18:25:6a:75:03:4e:ed:
         89:02:36:9b:64:4e:4b:b3:9d:98:de:21:47:d2:ab:f1:6b:9a:
         8c:42:6c:be:d8:f4:6a:6f:ca:0f:b9:2f:38:1c:de:70:7a:0b:
         56:70:97:c6:8c:0a:ec:f7:ce:20:13:5f:25:72:67:1e:5e:13:
         72:6f:24:d8:d2:7d:fb:3d:32:fc:2f:8f:a9:33:63:9e:de:e9:
         be:c6:bd:c6:62:dd:0d:df:71:68:10:3d:06:e0:fe:54:4c:67:
         3e:7e:ce:8a:1a:b2:99:35:ea:a8:2d:e6:4f:d6:c7:ed:9c:59:
         85:6f:98:a0:9e:01:13:0c:ef:db:44:c5:c7:57:10:7e:82:40:
         15:49:20:42:a3:91:12:16:d2:02:da:af:43:8f:a3:be:6f:ac:
         7f:ba:9d:fc:3f:78:b3:3a:a9:70:c6:43:06:78:f4:7d:50:d7:
         34:62:14:be:07:76:5e:27:eb:42:63:b4:99:f2:d3:f1:b8:53:
         56:cd:b5:70:54:42:cd:26:59:14:91:74:09:79:4b:37:4f:4a:
         fe:0b:d9:de:59:de:3a:1a:76:85:1d:48:9e:33:dd:76:a5:b9:
         93:dd:1d:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:42:19 2026 by rpki-client