Manifest

$ rpki-client -vvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
File:                     B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft (raw, json)
Hash identifier:          pscyxZ64Thy4gj6HyABYv2Ftr99/RvvbJb4oYthEoWQ=
Subject key identifier:   95:E4:C4:25:41:A3:01:04:96:E1:2C:9F:36:8B:B7:13:E9:D3:4C:58
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Certificate issuer:       /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial:       33D8C872FA12BDC4BCCCDE6FC6A0B4A39229F3F9
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
Manifest number:          0171
Signing time:             Thu 23 Jul 2026 16:36:11 +0000
Manifest this update:     Thu 23 Jul 2026 16:31:11 +0000
Manifest next update:     Fri 24 Jul 2026 19:49:11 +0000
Files and hashes:         1: AS12083.roa (hash: 8kH+VonWqycAeWTH9LD8oN6LIvtGbTyKxBhgc6Q0Lvw=)
                          2: AS402221.roa (hash: VpQaH3MzSdffEw+yJpBk4UmV/bouOPG/Kpag3177zFA=)
                          3: AS402257.roa (hash: Aus7zb31e+z3HkzONN4snCNskr7NMcNwBSNT3YZpKe4=)
                          4: AS400308.roa (hash: UlFgzk9llX+WA6E33oU/1Tu2/Vwu0sdUR7EdtktYsU8=)
                          5: AS401650.roa (hash: 7hUJUZw6sDsJMVqmMvdbYcJHQn7TUDe2/Pc5o2ISmCI=)
                          6: AS63793.roa (hash: citOdEXrgmbCiNM3B2vx2wKrnCOjg0TXlIriiMGsOho=)
                          7: AS33355.roa (hash: 2PE7fSJO1G7NZoyVWD3PPAejHMciwOp8f6rBRHhLV9c=)
                          8: AS46450.roa (hash: tIXEtAPLBIyJ6F7GHhJHcerYwgoWmycNHQR784GKx7M=)
                          9: AS7029.roa (hash: 4myOZR8AWN59F75owxqXS4pmozNzZYbYjnYGgByqID8=)
                          10: AS13347.roa (hash: nhXFMjOi9F2PjHGRZbElPPYWmemS2IDC0U0+5wvZ9ZU=)
                          11: AS207343.roa (hash: 1jb3uyZYCt2qGttvoiPGhEAcepdc1zIr3rql6NEzC+M=)
                          12: B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl (hash: oj7oHO3+YJEdAoE5r5HktwOwOlGF56769IxfQTz1T7w=)
                          13: AS5650.roa (hash: 6pbtq8uwIGbltAo+evBqF8CSAwoIYoRYNdBw6sUHuqM=)
                          14: AS402315.roa (hash: MrZCTYKZq1xAPZOQmTS8mFuMfx0E+6GFWf7iOZXig3w=)
                          15: AS402265.roa (hash: i3LbrXADN/SNW5GlAs1I+YbL2Xj1iRZtsIUyRo2fNI0=)
                          16: AS151389.roa (hash: YHZeB4ezQ22qV+jkmlYlNbJ7LSnNSjKzfRFc/GEyjGY=)
                          17: AS402276.roa (hash: NGjsaZ1CnFUiw4ACvuh6gsaw/mYrmfH5DGndSmFnFUQ=)
                          18: AS209888.roa (hash: QGdHT0O1oiu/Md1zgKWZh9Znz0GhLz6AuWmNsdjfDzE=)
                          19: AS31924.roa (hash: udPhpg4mjqWGTdaFFmdpnDmmQuaRMHjfh4Gs3BHFdJ8=)
                          20: AS834.roa (hash: oO+n9LOQfx0MhnTfqjZCp8vJmI/fAuGTvq0dFm14w4Y=)
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
                          rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:d8:c8:72:fa:12:bd:c4:bc:cc:de:6f:c6:a0:b4:a3:92:29:f3:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
        Validity
            Not Before: Jul 23 16:31:11 2026 GMT
            Not After : Jul 24 19:49:11 2026 GMT
        Subject: CN=95E4C42541A3010496E12C9F368BB713E9D34C58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:8e:da:2f:b2:3d:2f:ad:8d:f1:1b:57:fc:31:
                    5d:0d:03:61:6f:43:78:4e:2d:c0:a6:72:37:cb:61:
                    b2:9c:9a:5a:3a:46:2f:b9:a7:9c:3d:15:b4:8a:4f:
                    f7:c1:1b:3e:79:de:fb:f8:e3:ea:21:e5:63:77:23:
                    c3:b4:73:e8:65:0f:62:2e:eb:11:41:d5:61:07:39:
                    6c:a1:d5:db:aa:3c:e4:f0:d7:64:65:9d:13:89:47:
                    3b:b1:cc:ef:f8:d5:32:83:c4:22:be:55:52:f8:3c:
                    67:24:72:48:63:32:4b:2a:43:9d:75:c1:c9:69:6b:
                    1c:19:51:64:b2:bb:33:b1:f6:69:f1:a8:36:ec:cc:
                    05:00:39:31:26:26:f0:19:71:36:db:2d:41:f4:c1:
                    03:36:55:06:c3:c7:93:e4:e8:4c:e8:14:67:5b:43:
                    d6:0d:c0:04:3e:b2:86:73:4a:48:4c:85:a5:a2:44:
                    5e:c8:56:5b:fd:ea:3e:21:d6:80:35:95:b1:c4:55:
                    fe:8c:5f:5a:cb:a0:70:f2:7a:09:c9:56:d1:a0:1c:
                    22:06:53:97:28:84:b9:4d:00:65:39:19:50:e0:12:
                    ca:f7:c4:a1:fa:77:0e:d5:fe:e4:74:02:f9:42:78:
                    ac:93:5f:0e:d4:08:5f:5e:64:8c:07:73:dd:ae:bc:
                    9e:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:E4:C4:25:41:A3:01:04:96:E1:2C:9F:36:8B:B7:13:E9:D3:4C:58
            X509v3 Authority Key Identifier:
                keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:20:5b:a0:30:84:f6:95:ca:d2:88:a5:ea:3f:37:47:5c:fa:
         1f:d9:58:f2:ef:c3:66:3c:9f:27:07:91:3c:93:b9:95:53:9b:
         1e:af:c7:a9:8f:2d:5b:82:11:b3:6d:3c:ff:2f:43:96:06:9c:
         4c:e1:83:1f:b1:9c:71:9f:04:3a:c4:39:af:45:05:dc:ca:c4:
         40:7e:e9:99:2e:8b:bc:4a:81:95:9e:8f:2d:6a:19:6f:ed:f5:
         68:d3:d4:47:e2:45:1d:b0:e8:7a:ec:de:7c:5c:35:7d:da:89:
         1f:3d:52:80:c0:64:c1:9c:cb:91:77:26:b9:66:3d:95:7d:c6:
         f7:fb:e5:e5:e3:dd:7d:bd:45:00:96:d4:aa:5c:14:a1:8c:e6:
         75:eb:e5:16:da:a0:cc:6a:b3:3f:11:cb:a9:39:64:a2:9d:9e:
         82:60:fc:61:10:6b:a4:45:f3:fd:fd:b0:f5:1b:b1:54:3e:ef:
         19:b1:cb:82:80:4b:56:35:83:29:6a:a7:29:ef:0b:ba:ff:0b:
         9e:b9:05:c1:e4:87:67:16:85:bb:1e:fd:84:e0:1e:29:05:0e:
         a5:b7:06:ee:94:91:bd:4c:0e:0d:2f:09:5a:6b:e2:f2:5f:21:
         a6:21:84:f4:cc:68:b0:59:2f:ce:b5:40:fc:30:64:5f:b6:41:
         a3:d2:ac:33
-----BEGIN CERTIFICATE-----
MIIFYjCCBEqgAwIBAgIUM9jIcvoSvcS8zN5vxqC0o5Ip8/kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjM1NEQzMjhDQkJGRDFFRjNDRDI5MjY4QTIzQjBGQ0M2
MEUzQTJDNTAeFw0yNjA3MjMxNjMxMTFaFw0yNjA3MjQxOTQ5MTFaMDMxMTAvBgNV
BAMTKDk1RTRDNDI1NDFBMzAxMDQ5NkUxMkM5RjM2OEJCNzEzRTlEMzRDNTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpjtovsj0vrY3xG1f8MV0NA2Fv
Q3hOLcCmcjfLYbKcmlo6Ri+5p5w9FbSKT/fBGz553vv44+oh5WN3I8O0c+hlD2Iu
6xFB1WEHOWyh1duqPOTw12RlnROJRzuxzO/41TKDxCK+VVL4PGckckhjMksqQ511
wclpaxwZUWSyuzOx9mnxqDbszAUAOTEmJvAZcTbbLUH0wQM2VQbDx5Pk6EzoFGdb
Q9YNwAQ+soZzSkhMhaWiRF7IVlv96j4h1oA1lbHEVf6MX1rLoHDyegnJVtGgHCIG
U5cohLlNAGU5GVDgEsr3xKH6dw7V/uR0AvlCeKyTXw7UCF9eZIwHc92uvJ6DAgMB
AAGjggJsMIICaDAdBgNVHQ4EFgQUleTEJUGjAQSW4SyfNou3E+nTTFgwHwYDVR0j
BBgwFoAUs1TTKMu/0e880pJoojsPzGDjosUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
YTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0MDA4YjE2NTRjLTAvMC9CMzU0RDMy
OENCQkZEMUVGM0NEMjkyNjhBMjNCMEZDQzYwRTNBMkM1LmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj
YzE3ODQ4Yy8wL0IzNTREMzI4Q0JCRkQxRUYzQ0QyOTI2OEEyM0IwRkNDNjBFM0Ey
QzUuY2VyMIGVBggrBgEFBQcBCwSBiDCBhTCBggYIKwYBBQUHMAuGdnJzeW5jOi8v
ci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvL2EwMzc1YjM5LWY5NDktNGNiNS1iNTE5
LWY5NDAwOGIxNjU0Yy0wLzAvQjM1NEQzMjhDQkJGRDFFRjNDRDI5MjY4QTIzQjBG
Q0M2MEUzQTJDNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAC4gW6AwhPaVytKIpeo/N0dc+h/ZWPLvw2Y8
nycHkTyTuZVTmx6vx6mPLVuCEbNtPP8vQ5YGnEzhgx+xnHGfBDrEOa9FBdzKxEB+
6Zkui7xKgZWejy1qGW/t9WjT1EfiRR2w6Hrs3nxcNX3aiR89UoDAZMGcy5F3Jrlm
PZV9xvf75eXj3X29RQCW1KpcFKGM5nXr5RbaoMxqsz8Ry6k5ZKKdnoJg/GEQa6RF
8/39sPUbsVQ+7xmxy4KAS1Y1gylqpynvC7r/C565BcHkh2cWhbse/YTgHikFDqW3
Bu6Ukb1MDg0vCVpr4vJfIaYhhPTMaLBZL861QPwwZF+2QaPSrDM=
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:13:39 2026 by rpki-client