Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/467CA131098E1BC8222571EDD2A1800F00015E7F803B88714751949BFEDC3313/0/15A0ECF9986E4ED2D8E703E1C0F76470A6A91F2A.mft
File:                     15A0ECF9986E4ED2D8E703E1C0F76470A6A91F2A.mft (raw, json)
Hash identifier:          QdUF/u9VgJKXBp3umSLZyb709hr8Ar6btMO2jshJWOw=
Subject key identifier:   D7:CB:7E:3D:15:D9:24:66:D2:2B:6C:4D:B3:03:DD:63:17:3B:DC:62
Authority key identifier: 15:A0:EC:F9:98:6E:4E:D2:D8:E7:03:E1:C0:F7:64:70:A6:A9:1F:2A
Certificate issuer:       /CN=15A0ECF9986E4ED2D8E703E1C0F76470A6A91F2A
Certificate serial:       112ED1709BF839DEC1DB9E847C73D1ABCC9C8199
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15A0ECF9986E4ED2D8E703E1C0F76470A6A91F2A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/467CA131098E1BC8222571EDD2A1800F00015E7F803B88714751949BFEDC3313/0/15A0ECF9986E4ED2D8E703E1C0F76470A6A91F2A.mft
Manifest number:          0139
Signing time:             Tue 04 Nov 2025 01:38:27 +0000
Manifest this update:     Tue 04 Nov 2025 01:33:27 +0000
Manifest next update:     Sat 08 Nov 2025 15:54:27 +0000
Files and hashes:         1: 323830333a326230303a3a2f33322d3438203d3e203532343638.roa (hash: hX3Vkw1UI8PH5/nTG3wZXhG5saMXrvbsZnQ3IQH42zM=)
                          2: 3138362e3134382e39362e302f32312d3234203d3e203532343638.roa (hash: e/7cghjlXhSfUzRTz4qZe/f5Bi46Lp/YYoYfOgBPMg8=)
                          3: 3138362e3134382e3130382e302f32322d3234203d3e203532343638.roa (hash: 4toMhzmt+58ISBTUr/y9jtmR61K1uSNch2nXgjnqpck=)
                          4: 15A0ECF9986E4ED2D8E703E1C0F76470A6A91F2A.crl (hash: OgGOgCe8o3bkZxBv2rqrshMyJdNGXc972yx0Dspmqbg=)
                          5: 3138362e3134382e39362e302f32302d3234203d3e203532343638.roa (hash: s9vuo/7+glELequIQw8xm6QNGNirCL1+OcCBQHncE2s=)
                          6: 3138362e3134382e3130362e302f32342d3234203d3e203532343638.roa (hash: hM51paFFFUKn+R7jvR6YR81/lHZTP7fmlHg0qd+f4tg=)
                          7: 3138362e3134382e3130352e302f32342d3234203d3e203532343638.roa (hash: syLM147RV+YLlCIDHITzBApcHzzotyrzTKGBH3u3lUQ=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/467CA131098E1BC8222571EDD2A1800F00015E7F803B88714751949BFEDC3313/0/15A0ECF9986E4ED2D8E703E1C0F76470A6A91F2A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/467CA131098E1BC8222571EDD2A1800F00015E7F803B88714751949BFEDC3313/0/15A0ECF9986E4ED2D8E703E1C0F76470A6A91F2A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15A0ECF9986E4ED2D8E703E1C0F76470A6A91F2A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 08 Nov 2025 15:54:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:2e:d1:70:9b:f8:39:de:c1:db:9e:84:7c:73:d1:ab:cc:9c:81:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15A0ECF9986E4ED2D8E703E1C0F76470A6A91F2A
        Validity
            Not Before: Nov  4 01:33:27 2025 GMT
            Not After : Nov  8 15:54:27 2025 GMT
        Subject: CN=D7CB7E3D15D92466D22B6C4DB303DD63173BDC62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:d2:7a:83:a9:a0:c2:73:a4:a0:5a:09:37:52:
                    dc:7e:7a:5d:96:15:a0:e5:42:80:91:a4:2b:33:cf:
                    0d:34:39:fe:a3:43:8a:6e:17:a8:52:43:bf:f0:df:
                    af:1a:07:9d:93:a1:59:e0:86:8f:2c:b0:0c:47:9e:
                    56:91:ee:62:6e:47:4a:e4:96:df:8f:f2:0f:b0:39:
                    91:6a:f0:f1:b7:ef:c3:29:2c:12:fe:db:50:1e:86:
                    f1:5c:aa:d1:ad:d1:2b:cb:17:06:30:2f:ca:18:99:
                    ee:28:ab:16:51:5d:a8:04:27:6c:5e:00:a7:9b:da:
                    a0:80:1b:f6:36:b0:ad:50:5c:2a:21:a2:c7:30:02:
                    f0:61:c7:97:68:26:77:97:5d:b8:16:56:d1:38:f7:
                    89:43:15:42:bd:fd:13:e1:f7:50:e3:b9:4b:21:e1:
                    c9:76:88:bf:ed:91:4d:1d:2a:ca:29:ca:f0:25:35:
                    36:17:b1:bf:f3:f5:49:3f:b2:0b:2b:1a:9e:8d:9c:
                    7f:55:a0:40:65:ba:0b:15:31:4b:3f:3b:4b:f2:25:
                    5e:b0:fd:30:7f:ec:39:c7:11:ff:c2:0f:47:ea:d4:
                    be:ea:ac:23:dd:c6:85:b5:4b:ab:74:dd:10:e3:fe:
                    dc:3a:aa:01:ec:80:64:cb:4b:e4:f1:01:c5:0f:7f:
                    d4:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:CB:7E:3D:15:D9:24:66:D2:2B:6C:4D:B3:03:DD:63:17:3B:DC:62
            X509v3 Authority Key Identifier:
                keyid:15:A0:EC:F9:98:6E:4E:D2:D8:E7:03:E1:C0:F7:64:70:A6:A9:1F:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/467CA131098E1BC8222571EDD2A1800F00015E7F803B88714751949BFEDC3313/0/15A0ECF9986E4ED2D8E703E1C0F76470A6A91F2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15A0ECF9986E4ED2D8E703E1C0F76470A6A91F2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/467CA131098E1BC8222571EDD2A1800F00015E7F803B88714751949BFEDC3313/0/15A0ECF9986E4ED2D8E703E1C0F76470A6A91F2A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:e4:67:74:23:21:4b:ff:99:ed:9b:aa:c8:9b:a5:d4:fb:41:
         ee:8e:e0:1f:94:34:61:e8:5f:07:77:cb:55:eb:5a:94:db:ee:
         cf:a2:f0:e8:0b:e8:82:3b:a1:14:c1:58:61:37:bd:1f:4e:a7:
         8e:40:67:f5:c3:7c:a6:87:a2:71:5a:36:f1:e9:3a:26:35:c9:
         00:15:15:fc:ee:81:82:c5:f3:73:86:2c:a7:16:3d:63:ba:7f:
         91:6e:af:96:48:bb:84:af:21:a2:67:0b:55:77:06:9b:67:76:
         54:5c:f7:2c:89:44:e4:8a:f5:c8:a1:f1:2d:c0:c8:3a:05:cc:
         f6:cd:73:e4:13:20:45:0b:9c:a7:e1:d3:37:40:9c:00:e3:0b:
         36:24:74:be:d8:82:1a:47:64:39:58:a1:cd:14:06:1e:cb:da:
         d7:12:b4:f6:ee:24:01:14:69:4f:d3:af:46:a7:a9:eb:a4:52:
         fc:4e:42:ee:77:ef:91:65:cd:74:eb:ac:a9:7c:4a:0a:5c:02:
         f7:e2:cb:72:63:e0:32:fb:ff:d4:2f:52:9f:d0:13:37:fa:07:
         12:de:16:14:87:a4:20:02:72:19:b9:99:28:92:25:4a:1f:d3:
         66:ba:1b:4e:12:4d:4c:c6:86:2b:30:fd:9b:95:e3:c4:51:03:
         28:85:74:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:31:16 2025 by rpki-client