Manifest

$ rpki-client -vvvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
File:                     B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft (raw, json)
Hash identifier:          rf+p7fTp1TvRPepmZlxJwsD+x0qFIGiBWKmKVShpLnk=
Subject key identifier:   00:62:CD:30:72:BD:5E:45:41:B3:21:1B:F3:18:07:81:8A:E0:12:8F
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Certificate issuer:       /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial:       0B53C5030527E21EB439DC46B6B75177F36B59A6
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
Manifest number:          0287
Signing time:             Tue 29 Sep 2026 01:53:06 +0000
Manifest this update:     Tue 29 Sep 2026 01:48:06 +0000
Manifest next update:     Wed 30 Sep 2026 04:08:06 +0000
Files and hashes:         1: AS46450.roa (hash: AW1fAZqRGeb7C+0Lf5GhFCE2fgKtW489dTDw3llIxrQ=)
                          2: AS32042.roa (hash: L5UackTaWFMOY7R/iZ5kwmfN7UHanGgIvYckTjandMQ=)
                          3: AS219427.roa (hash: Vo7BCn1ai7SGpFcAaKiOg+Xc71kdegPdnk0sZ+enrg4=)
                          4: AS214467.roa (hash: VvWknrmLSiYc7ThppPq8sMBib3bI4tR2WAdgn2C2jFk=)
                          5: AS393942.roa (hash: kcd0jah1rXd1tdsFz5pHkmF1wjboJpeHOdEGI51x8Ac=)
                          6: AS16509.roa (hash: ITA0uGF6E/rF71LnSGjU3qfhg6CI/yGsrfcaRF17FPw=)
                          7: AS219072.roa (hash: zsveF8jsDKpUC4IEFGITRADUGi2uVXLl+jfey+dqr20=)
                          8: AS12083.roa (hash: OdWRfwKO7R2LUbMJeqoLAaE0sIkLHa0NNjlpCAso89c=)
                          9: AS13537.roa (hash: BJX9yvtxTv1qD+uk4lcpjJOZPevsZWYkZ7/ma15Y19g=)
                          10: AS979.roa (hash: kMNDRYkObyNqrQS7zUUJ4J1R948ldlUeIzuWN+xm5ds=)
                          11: AS7029.roa (hash: k/VHjFDbaukd/BSAQTBPsZ/Zq1YnkgRrzs+vMaHqtDo=)
                          12: AS834.roa (hash: PjgBrRcGvoiALM0M0o9FaYrdRNAVBPasgZ/Q23Em9qM=)
                          13: AS218869.roa (hash: UYukCDnnrTZ/QIyYduxL/zgt/x7RjwORh1YA05gEHew=)
                          14: AS218919.roa (hash: v+NWvT54Znt8pFdZ5ixWjTz0ZIQhGWlUZtWE/6EUOnI=)
                          15: AS64096.roa (hash: RzrmlVAvJWZbYuUba5fh0yyCHGRBtLqFZtDa2nJylIc=)
                          16: AS152179.roa (hash: MAC5MGGURgSvs0Pr/otzSaT9kXHKk2u4zm3CyS9j3QY=)
                          17: AS219233.roa (hash: 5EvVB3A1NhQ3IlKAZBlRTDXG1ZkuxLBMInCKu/o1KMw=)
                          18: AS14618.roa (hash: eeJ/g/6bqR0Zt8wt/C4kilFuzJCJO7RPbKJvnEi+dkk=)
                          19: AS212238.roa (hash: eZiKl0jQNngQx8cgkml/jFKM+Ic/5BPJiV6wbhnP5f8=)
                          20: AS401984.roa (hash: +NPIgfzIC5WDsUEKXlW8ZRcFzJChH9EoobrZfJnt6mU=)
                          21: AS2497.roa (hash: d5F5dmAtuZlaZDF55xZAaf2hX5JGBdVOl+Gch1FK028=)
                          22: AS207267.roa (hash: GOhCbRkdjtQX97JOqgGKmyXJYzpm4Q97QLeQ+VgHGoM=)
                          23: AS25198.roa (hash: AlSLpjEUwVN7SCMQtnuBVfmGpU5A/gx3Yi0lad0OYVA=)
                          24: AS199779.roa (hash: +n/mBqyQxwmzua9vxHehHyg0IpbY8RdDscnCYbJU7M8=)
                          25: AS9304.roa (hash: +3zkvTS5Ohc8aJBeaUhqCjwJtbGIZ6fRUQzaMoV+pX4=)
                          26: AS402133.roa (hash: Gv9Uq31qmPtYVg8QhxbGSDfZotDIDxptBF8q2pbIk70=)
                          27: AS400618.roa (hash: 4R9D7St/ylZkGuJKpH6Ry0d55G3WFF74OwYsce/T69w=)
                          28: AS218702.roa (hash: x3ktFtjTxJEi4iNjhXBLXuR5RqFqMyM5fA9FpanY3o8=)
                          29: AS5650.roa (hash: YFbheRz8rztH6LIXBCXzgqo2KurlrckAFdSTd3ho0D8=)
                          30: AS152868.roa (hash: EEFUPEcSFLjKVleBK/G1esGPZee8qBf8kSURpYNOpxI=)
                          31: B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl (hash: AqfXMYTLsuvVpu8IHGHWKsllCi58HbCx3MDSTwJ/Eww=)
                          32: AS401560.roa (hash: ZEraZ2yQTyhkN9BiC//AazUMFlsfA5K4sQYIT7ihM48=)
                          33: AS215114.roa (hash: Ok4W5+Fj+LOBYOAmSq4H1eNcf8wwNBFFbXF2qvXVwj0=)
                          34: AS42954.roa (hash: Ila4qxLsfvui8mS6gTQNCSFAXPD2iX1EpKiqFQX5CdY=)
                          35: AS9009.roa (hash: uJ7ci88aHntl9oB1r6/WlzKr4lQBoukd4gny4wz9hUw=)
                          36: AS13347.roa (hash: Xga80sx04xen8dVmNgKQXYZlqZBOTiP49n8HV62YjwI=)
                          37: AS219217.roa (hash: UpwSsU7/39sSh4qPhMMNqwKT9DxWmogB9g+bh9keF3E=)
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
                          rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Sep 2026 19:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:53:c5:03:05:27:e2:1e:b4:39:dc:46:b6:b7:51:77:f3:6b:59:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
        Validity
            Not Before: Sep 29 01:48:06 2026 GMT
            Not After : Sep 30 04:08:06 2026 GMT
        Subject: CN=0062CD3072BD5E4541B3211BF31807818AE0128F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:11:6c:4e:7d:1d:9a:38:e8:12:fd:03:41:9e:
                    f7:7c:d4:95:91:65:06:c9:bc:d5:19:ab:6b:bf:f9:
                    0b:a3:c3:25:a5:c4:f8:a5:0a:ad:43:ca:ef:a1:60:
                    32:e0:d2:13:75:16:16:f3:38:73:ca:f6:80:58:2e:
                    3d:e3:a4:76:01:28:35:c5:9a:64:9f:d1:cb:40:06:
                    55:cf:6b:56:84:3c:54:f4:47:a5:cd:27:e4:d6:55:
                    69:91:e2:cf:a1:63:fd:65:0f:fd:cc:65:1a:d1:4c:
                    9b:09:b8:84:f6:c6:31:09:4a:a2:85:c9:ca:7e:81:
                    b0:cf:aa:e1:70:03:ae:7e:0b:9e:9e:03:17:61:25:
                    be:bf:37:8f:61:30:b3:34:30:00:e5:5e:0a:a9:43:
                    08:96:16:e2:b3:67:83:37:e3:e5:cd:37:66:bb:db:
                    dc:68:c3:c8:95:78:78:8f:10:df:f9:52:8e:58:61:
                    ba:b9:31:c0:94:f7:80:2f:1e:07:83:4d:8d:0e:be:
                    c3:4e:ce:96:6e:cb:b2:55:64:92:49:84:a4:05:e9:
                    e9:74:2f:f6:19:59:b9:ba:20:c7:2b:94:1b:ec:c2:
                    07:09:c9:4a:a4:7e:9e:14:4a:95:87:de:56:2d:20:
                    e0:9f:c9:46:7e:db:55:47:b7:56:d6:90:4b:98:98:
                    19:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:62:CD:30:72:BD:5E:45:41:B3:21:1B:F3:18:07:81:8A:E0:12:8F
            X509v3 Authority Key Identifier:
                keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:bb:a5:a1:82:dc:3e:49:34:c8:a9:c9:cd:1f:a2:8c:d6:07:
         28:13:80:9d:c3:a8:54:cc:95:7e:9d:e9:e7:a1:78:79:cc:f0:
         b4:87:c6:bd:4f:ff:2e:3c:74:79:01:5e:74:6e:1f:a7:fc:62:
         78:80:5f:35:90:e8:98:38:75:82:5c:84:69:f3:3d:21:b2:52:
         ad:f7:c2:bc:7c:a6:82:9c:86:c9:cf:c9:4d:97:ee:75:74:7e:
         a3:c3:97:6d:21:c9:d4:60:be:4d:c8:65:9a:1f:81:e0:af:29:
         6d:14:6f:5e:04:4b:25:1e:8b:0f:eb:ea:67:aa:41:14:8a:49:
         ea:21:e4:1e:7a:8b:ba:8c:2d:38:c3:a5:2d:c8:9d:4e:e3:d6:
         fb:d6:8f:58:5a:97:51:3d:16:fb:5e:cc:17:ff:53:ff:9e:35:
         f4:24:d5:27:01:fa:06:cd:a9:02:4c:32:ed:5b:49:2d:70:0d:
         80:a3:78:94:b1:c0:16:0b:88:95:f5:aa:f1:af:bc:e9:dc:6a:
         a5:cd:8f:c1:b9:fb:b2:7e:e3:36:6b:a0:c8:11:89:bc:6b:99:
         26:df:e2:b3:e4:53:bc:1d:a6:dc:fd:f6:3c:0c:86:42:f0:5e:
         f2:ae:06:55:af:47:b2:38:fa:b3:12:1c:ca:00:1c:5f:7f:e8:
         d0:17:4a:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----