Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3B60C03C0834984570E58DB9BDE5D3DD976B0717.mft
File:                     3B60C03C0834984570E58DB9BDE5D3DD976B0717.mft (raw, json)
Hash identifier:          Xbehj4q/REAsslZxXH/jNjq1tW+z80/mbO6MX9ZCmhM=
Subject key identifier:   13:34:B2:5C:E8:49:96:90:29:6F:13:03:63:4A:85:21:D0:4C:3A:78
Authority key identifier: 3B:60:C0:3C:08:34:98:45:70:E5:8D:B9:BD:E5:D3:DD:97:6B:07:17
Certificate issuer:       /CN=3B60C03C0834984570E58DB9BDE5D3DD976B0717
Certificate serial:       45DE39C7CC9083A362F8E75751CC45542E34D184
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B60C03C0834984570E58DB9BDE5D3DD976B0717.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3B60C03C0834984570E58DB9BDE5D3DD976B0717.mft
Manifest number:          0391
Signing time:             Mon 26 Oct 2026 16:02:19 +0000
Manifest this update:     Mon 26 Oct 2026 15:57:19 +0000
Manifest next update:     Tue 27 Oct 2026 19:22:19 +0000
Files and hashes:         1: 3137392e3130382e38302e302f32312d3234203d3e203533313538.roa (hash: sX4nwgj6vaW5wQpaVI4ldqCkek+S5X5o9t8noKRD1ag=)
                          2: 323830343a6433383a3a2f33322d3438203d3e203533313538.roa (hash: ixVfGjOAuGJZVaOPOHqjLsdG60dhgkgolPMWrR0XXRg=)
                          3: 3230302e3232392e38382e302f32322d3234203d3e203533313538.roa (hash: lOCawNxT5mf6+GPq54yH9MFBwDMl7colTClYKLgG+8Q=)
                          4: 34352e3138352e34382e302f32322d3234203d3e20323639333538.roa (hash: NUtXQFaOeVTxrDiCpchmBbF+gu+nGbOOEjVHUYb1Oy4=)
                          5: 3B60C03C0834984570E58DB9BDE5D3DD976B0717.crl (hash: ECT2A+Whq5OmSIBf1YHUeJmphYF9WpLU3ZYJbARxfWc=)
                          6: 323830343a363336343a3a2f33322d3438203d3e20323639333538.roa (hash: cbxyLWgpmLiHC4GGgm8SHB2pdo9dUEQ+e+ej/QwoIyk=)
                          7: 3138362e3230392e33322e302f32302d3234203d3e203533313538.roa (hash: EI/jZJKs9MwVcIJiqMb/v/hdEaqR4OTb0tVWuqjlBIk=)
                          8: 3138362e3230392e34382e302f32302d3234203d3e203533313538.roa (hash: 3VqfusRjAnAsnD8zyS0Xyhv6qhCCn/MsQ6b92yVASG4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3B60C03C0834984570E58DB9BDE5D3DD976B0717.crl
                          rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3B60C03C0834984570E58DB9BDE5D3DD976B0717.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B60C03C0834984570E58DB9BDE5D3DD976B0717.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 27 Oct 2026 17:58:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:de:39:c7:cc:90:83:a3:62:f8:e7:57:51:cc:45:54:2e:34:d1:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B60C03C0834984570E58DB9BDE5D3DD976B0717
        Validity
            Not Before: Oct 26 15:57:19 2026 GMT
            Not After : Oct 27 19:22:19 2026 GMT
        Subject: CN=1334B25CE8499690296F1303634A8521D04C3A78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c9:bd:8c:fb:2e:7e:f2:f4:a7:67:a5:7a:d1:
                    cf:c8:5e:ca:ba:0a:a2:af:2d:bf:9d:00:a3:05:2c:
                    e8:b8:9b:c6:13:47:e1:c8:03:fc:5a:7b:32:19:aa:
                    5d:0e:2c:63:d5:17:8c:01:12:03:8c:81:d5:7a:f1:
                    99:cb:ee:7b:0d:4b:11:2e:19:eb:92:60:8d:23:48:
                    6b:31:30:e6:7e:91:0e:f3:12:b5:3f:c9:20:25:47:
                    8a:2c:37:8e:e6:f0:90:89:c5:28:f8:a3:c9:07:29:
                    db:e1:f1:f5:d7:7a:5d:86:89:b7:a2:1d:b4:ec:19:
                    6b:f6:58:9e:28:93:e3:ac:8e:b5:5c:96:56:80:6b:
                    01:46:72:ca:8c:2e:ff:c3:eb:03:82:49:3b:54:bc:
                    98:70:bf:d4:92:ce:14:f2:95:e5:9b:75:4c:da:f7:
                    a7:b2:ca:47:3b:42:80:14:6b:01:09:86:ec:f3:8e:
                    d1:dd:f7:0b:a9:46:dc:8a:f4:16:7b:ab:24:d4:9d:
                    c5:45:1f:1c:5b:d6:9a:59:05:d1:30:8a:a3:a3:69:
                    8e:80:d6:fb:9b:58:aa:96:e3:e8:a6:5b:7a:28:ea:
                    61:47:13:12:8d:e6:24:5a:99:ae:6a:83:b8:c5:a7:
                    13:fe:9b:d3:a5:b4:9b:78:19:00:6a:75:31:f1:72:
                    c0:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:34:B2:5C:E8:49:96:90:29:6F:13:03:63:4A:85:21:D0:4C:3A:78
            X509v3 Authority Key Identifier:
                keyid:3B:60:C0:3C:08:34:98:45:70:E5:8D:B9:BD:E5:D3:DD:97:6B:07:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3B60C03C0834984570E58DB9BDE5D3DD976B0717.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B60C03C0834984570E58DB9BDE5D3DD976B0717.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3B60C03C0834984570E58DB9BDE5D3DD976B0717.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:06:16:cb:a4:82:19:b1:b6:0d:ba:aa:0b:95:fc:fd:49:33:
         8b:0e:fc:9f:29:47:fc:86:c0:99:c9:c9:44:5d:36:57:39:c5:
         d5:d0:b6:c9:c5:71:da:77:91:3e:f2:fd:b8:e7:bb:c8:bd:40:
         f7:5a:d3:a0:98:7f:09:05:7a:71:a1:14:bb:31:71:e9:54:b6:
         e3:fd:e7:98:c6:21:8d:b5:bf:41:e0:6c:7e:fa:4d:02:79:dc:
         17:ab:4b:2b:d3:15:44:50:61:fb:10:98:11:78:f6:b7:6a:42:
         4f:dd:a0:14:8d:5e:d1:23:39:30:4a:51:12:04:11:61:08:15:
         ba:77:cb:f2:42:09:5d:48:c2:a4:56:86:f5:d4:90:0a:67:ab:
         3f:97:54:7a:d6:8b:1d:3d:39:79:cc:37:40:a4:a4:08:0c:2b:
         6d:b5:31:bd:7a:ed:1f:87:9f:9c:6d:06:86:1f:ed:71:b3:6b:
         c2:64:5c:bf:45:a1:6e:e5:cb:10:89:59:fe:a0:5f:47:68:21:
         47:d5:d6:95:8b:ff:db:0c:d9:f7:d6:3b:bb:db:14:7b:b3:54:
         93:09:52:03:3a:9c:1f:cc:13:0a:78:91:54:53:d4:d1:a0:6e:
         af:57:6b:f3:b3:b4:dc:e5:89:3b:f9:07:15:bb:bd:c3:15:0a:
         89:58:3a:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 19:48:54 2026 by rpki-client