Manifest

$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
File:                     AEF766F103B2EF99DF8C71978A7FE519D730B155.mft (raw, json)
Hash identifier:          OuHe1qa1yfff7spJ0eCnswuGiVeRK9/fL3gXnQtwzLc=
Subject key identifier:   F6:69:46:21:0B:03:44:58:5C:8A:FA:FD:DD:00:2B:E4:BB:B5:08:CD
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       02EC28CF1A107D9D97C0C20C28B7842E87ED6138
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
Manifest number:          04FB
Signing time:             Tue 04 Nov 2025 04:17:06 +0000
Manifest this update:     Tue 04 Nov 2025 04:12:06 +0000
Manifest next update:     Wed 05 Nov 2025 06:55:06 +0000
Files and hashes:         1: AEF766F103B2EF99DF8C71978A7FE519D730B155.crl (hash: H54UjohZZxlNT4qw3bMEZts+dV70kGtAwFQLwZbn45E=)
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 06:55:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:ec:28:cf:1a:10:7d:9d:97:c0:c2:0c:28:b7:84:2e:87:ed:61:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Nov  4 04:12:06 2025 GMT
            Not After : Nov  5 06:55:06 2025 GMT
        Subject: CN=F66946210B0344585C8AFAFDDD002BE4BBB508CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:a1:bb:38:b6:07:a4:7c:66:cb:c8:84:74:2f:
                    f0:29:9d:cf:2d:b2:59:c8:02:ec:76:08:7e:b5:f2:
                    d2:56:c3:7d:32:3b:d7:08:6a:5e:c4:d8:d0:cb:28:
                    fb:40:37:ee:cc:4a:5b:52:07:d4:05:f1:6c:ec:da:
                    94:5a:96:fb:17:71:ad:07:c4:58:2b:bd:d0:3f:e3:
                    5c:79:21:49:df:ae:44:88:a0:49:39:b6:6d:13:7c:
                    27:46:4e:b8:11:de:83:20:72:a0:08:45:d1:30:31:
                    cd:39:0b:05:42:97:a4:94:03:b5:7c:0a:a7:3e:8e:
                    6b:64:10:cc:18:05:f2:e3:1e:01:de:ea:a5:ee:0f:
                    60:cc:03:0e:9a:47:76:c8:47:9c:4a:9f:3f:55:97:
                    fd:ba:cc:a5:70:25:16:4e:7a:0a:c2:9d:19:e4:2a:
                    13:9b:c0:10:d5:59:da:07:54:f0:e2:42:1d:fa:88:
                    50:95:53:71:a8:ae:49:ee:fd:52:e5:52:42:f4:3b:
                    34:b0:76:a6:8d:b6:cc:56:1b:c7:4e:55:0e:30:e0:
                    08:18:95:78:62:a4:3d:fd:02:71:51:cf:e2:4d:83:
                    9f:fd:21:39:6a:f2:b2:1e:b0:18:17:2e:f6:1d:16:
                    ee:13:e3:92:cb:c2:dc:18:4d:dc:58:cf:17:e5:f9:
                    a4:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:69:46:21:0B:03:44:58:5C:8A:FA:FD:DD:00:2B:E4:BB:B5:08:CD
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:72:8c:cd:0c:4a:da:00:12:ee:ad:8b:51:3c:62:ff:90:ad:
         4d:b5:2e:54:f9:be:47:7d:92:c5:66:c2:cc:6f:fc:6a:82:0a:
         c3:a9:16:54:a0:ba:92:b5:66:37:54:ad:ce:b7:c9:ca:51:f9:
         83:58:1d:4d:6a:c3:c9:3c:54:7e:59:a8:a8:81:80:9a:9b:9d:
         b4:39:2e:26:e6:cf:19:27:0a:e9:a3:17:80:9c:78:06:35:f6:
         14:ae:2f:df:19:35:0a:89:f6:de:a1:c3:33:bb:d7:df:93:9e:
         43:d7:6e:14:83:40:67:30:14:d9:51:7e:ea:64:70:a9:67:6a:
         39:d0:18:14:b4:89:fc:3d:cb:5c:60:cc:5c:3a:cd:47:4d:22:
         f5:d6:26:44:61:e9:b8:cb:0e:40:bf:d9:54:80:54:fb:06:45:
         23:56:31:74:c8:98:7d:62:5f:ee:8c:dd:6a:21:8b:f8:20:7a:
         ea:66:0a:51:40:91:b4:3b:61:ee:de:21:9a:d5:75:ff:0d:5b:
         c2:aa:79:1e:b8:4f:fd:b6:8c:eb:c8:a2:70:c0:bf:75:52:49:
         61:5f:2f:3d:9d:ec:05:9d:f1:82:54:78:c7:3a:89:88:ed:d5:
         c3:94:80:a9:29:5a:26:32:a5:c0:22:44:b0:4a:82:b8:73:0b:
         6d:d0:19:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:06:17 2025 by rpki-client