
$ rpki-client -vvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
File: B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft (raw, json)
Hash identifier: pscyxZ64Thy4gj6HyABYv2Ftr99/RvvbJb4oYthEoWQ=
Subject key identifier: 95:E4:C4:25:41:A3:01:04:96:E1:2C:9F:36:8B:B7:13:E9:D3:4C:58
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Certificate issuer: /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial: 33D8C872FA12BDC4BCCCDE6FC6A0B4A39229F3F9
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
Manifest number: 0171
Signing time: Thu 23 Jul 2026 16:36:11 +0000
Manifest this update: Thu 23 Jul 2026 16:31:11 +0000
Manifest next update: Fri 24 Jul 2026 19:49:11 +0000
Files and hashes: 1: AS12083.roa (hash: 8kH+VonWqycAeWTH9LD8oN6LIvtGbTyKxBhgc6Q0Lvw=)
2: AS402221.roa (hash: VpQaH3MzSdffEw+yJpBk4UmV/bouOPG/Kpag3177zFA=)
3: AS402257.roa (hash: Aus7zb31e+z3HkzONN4snCNskr7NMcNwBSNT3YZpKe4=)
4: AS400308.roa (hash: UlFgzk9llX+WA6E33oU/1Tu2/Vwu0sdUR7EdtktYsU8=)
5: AS401650.roa (hash: 7hUJUZw6sDsJMVqmMvdbYcJHQn7TUDe2/Pc5o2ISmCI=)
6: AS63793.roa (hash: citOdEXrgmbCiNM3B2vx2wKrnCOjg0TXlIriiMGsOho=)
7: AS33355.roa (hash: 2PE7fSJO1G7NZoyVWD3PPAejHMciwOp8f6rBRHhLV9c=)
8: AS46450.roa (hash: tIXEtAPLBIyJ6F7GHhJHcerYwgoWmycNHQR784GKx7M=)
9: AS7029.roa (hash: 4myOZR8AWN59F75owxqXS4pmozNzZYbYjnYGgByqID8=)
10: AS13347.roa (hash: nhXFMjOi9F2PjHGRZbElPPYWmemS2IDC0U0+5wvZ9ZU=)
11: AS207343.roa (hash: 1jb3uyZYCt2qGttvoiPGhEAcepdc1zIr3rql6NEzC+M=)
12: B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl (hash: oj7oHO3+YJEdAoE5r5HktwOwOlGF56769IxfQTz1T7w=)
13: AS5650.roa (hash: 6pbtq8uwIGbltAo+evBqF8CSAwoIYoRYNdBw6sUHuqM=)
14: AS402315.roa (hash: MrZCTYKZq1xAPZOQmTS8mFuMfx0E+6GFWf7iOZXig3w=)
15: AS402265.roa (hash: i3LbrXADN/SNW5GlAs1I+YbL2Xj1iRZtsIUyRo2fNI0=)
16: AS151389.roa (hash: YHZeB4ezQ22qV+jkmlYlNbJ7LSnNSjKzfRFc/GEyjGY=)
17: AS402276.roa (hash: NGjsaZ1CnFUiw4ACvuh6gsaw/mYrmfH5DGndSmFnFUQ=)
18: AS209888.roa (hash: QGdHT0O1oiu/Md1zgKWZh9Znz0GhLz6AuWmNsdjfDzE=)
19: AS31924.roa (hash: udPhpg4mjqWGTdaFFmdpnDmmQuaRMHjfh4Gs3BHFdJ8=)
20: AS834.roa (hash: oO+n9LOQfx0MhnTfqjZCp8vJmI/fAuGTvq0dFm14w4Y=)
Validation: OK
Signature path: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:d8:c8:72:fa:12:bd:c4:bc:cc:de:6f:c6:a0:b4:a3:92:29:f3:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Validity
Not Before: Jul 23 16:31:11 2026 GMT
Not After : Jul 24 19:49:11 2026 GMT
Subject: CN=95E4C42541A3010496E12C9F368BB713E9D34C58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:8e:da:2f:b2:3d:2f:ad:8d:f1:1b:57:fc:31:
5d:0d:03:61:6f:43:78:4e:2d:c0:a6:72:37:cb:61:
b2:9c:9a:5a:3a:46:2f:b9:a7:9c:3d:15:b4:8a:4f:
f7:c1:1b:3e:79:de:fb:f8:e3:ea:21:e5:63:77:23:
c3:b4:73:e8:65:0f:62:2e:eb:11:41:d5:61:07:39:
6c:a1:d5:db:aa:3c:e4:f0:d7:64:65:9d:13:89:47:
3b:b1:cc:ef:f8:d5:32:83:c4:22:be:55:52:f8:3c:
67:24:72:48:63:32:4b:2a:43:9d:75:c1:c9:69:6b:
1c:19:51:64:b2:bb:33:b1:f6:69:f1:a8:36:ec:cc:
05:00:39:31:26:26:f0:19:71:36:db:2d:41:f4:c1:
03:36:55:06:c3:c7:93:e4:e8:4c:e8:14:67:5b:43:
d6:0d:c0:04:3e:b2:86:73:4a:48:4c:85:a5:a2:44:
5e:c8:56:5b:fd:ea:3e:21:d6:80:35:95:b1:c4:55:
fe:8c:5f:5a:cb:a0:70:f2:7a:09:c9:56:d1:a0:1c:
22:06:53:97:28:84:b9:4d:00:65:39:19:50:e0:12:
ca:f7:c4:a1:fa:77:0e:d5:fe:e4:74:02:f9:42:78:
ac:93:5f:0e:d4:08:5f:5e:64:8c:07:73:dd:ae:bc:
9e:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:E4:C4:25:41:A3:01:04:96:E1:2C:9F:36:8B:B7:13:E9:D3:4C:58
X509v3 Authority Key Identifier:
keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:20:5b:a0:30:84:f6:95:ca:d2:88:a5:ea:3f:37:47:5c:fa:
1f:d9:58:f2:ef:c3:66:3c:9f:27:07:91:3c:93:b9:95:53:9b:
1e:af:c7:a9:8f:2d:5b:82:11:b3:6d:3c:ff:2f:43:96:06:9c:
4c:e1:83:1f:b1:9c:71:9f:04:3a:c4:39:af:45:05:dc:ca:c4:
40:7e:e9:99:2e:8b:bc:4a:81:95:9e:8f:2d:6a:19:6f:ed:f5:
68:d3:d4:47:e2:45:1d:b0:e8:7a:ec:de:7c:5c:35:7d:da:89:
1f:3d:52:80:c0:64:c1:9c:cb:91:77:26:b9:66:3d:95:7d:c6:
f7:fb:e5:e5:e3:dd:7d:bd:45:00:96:d4:aa:5c:14:a1:8c:e6:
75:eb:e5:16:da:a0:cc:6a:b3:3f:11:cb:a9:39:64:a2:9d:9e:
82:60:fc:61:10:6b:a4:45:f3:fd:fd:b0:f5:1b:b1:54:3e:ef:
19:b1:cb:82:80:4b:56:35:83:29:6a:a7:29:ef:0b:ba:ff:0b:
9e:b9:05:c1:e4:87:67:16:85:bb:1e:fd:84:e0:1e:29:05:0e:
a5:b7:06:ee:94:91:bd:4c:0e:0d:2f:09:5a:6b:e2:f2:5f:21:
a6:21:84:f4:cc:68:b0:59:2f:ce:b5:40:fc:30:64:5f:b6:41:
a3:d2:ac:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:13:39 2026 by rpki-client