Manifest

$ rpki-client -vvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
File:                     B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft (raw, json)
Hash identifier:          +R3JsDn3KBzIT9YaKV1qUX45FRpxHS4df5fun0yWeoc=
Subject key identifier:   2A:3F:50:B1:A5:20:87:24:C9:7A:60:9C:EC:9B:0E:3D:5A:96:EA:8D
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Certificate issuer:       /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial:       14ADEE2D27AF5DF9113E42D09E60DBE0D239D7AC
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
Manifest number:          6D
Signing time:             Fri 17 Apr 2026 15:29:49 +0000
Manifest this update:     Fri 17 Apr 2026 15:24:49 +0000
Manifest next update:     Sat 18 Apr 2026 18:35:49 +0000
Files and hashes:         1: B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl (hash: UqPtWQSAw4K7nb7MPJpAlVQuihDGvwf5tYY4Ntz31lo=)
                          2: 36322e3134342e35362e302f32342d3234203d3e2037303239.roa (hash: 6EbsXwwZ8uuaqSXWQkpLpMhWddBEVlponXMKi1AcaMA=)
                          3: 36322e3134342e35392e302f32342d3234203d3e2035363530.roa (hash: DnN+8MHkHDCl3TEz/gfbnZZDc/9DAviafkxWuN+bqtw=)
                          4: 36322e3134342e35342e302f32342d3234203d3e2037303239.roa (hash: eIChuRBUxSipjTajDAoXIF7QbB1h6tXsGu/RhP4NNvw=)
                          5: 36322e3134342e36332e302f32342d3234203d3e2035363530.roa (hash: NSKMfyje8/GSgwcsMdVddLe+H9bWs9pk4FARLDkhENM=)
                          6: 36322e3134342e36312e302f32342d3234203d3e2037303239.roa (hash: O9mGUvXlRiTPolyhEkkfoTVdFdRsKU6PhvD6j8bjJWk=)
                          7: 36322e3134342e35352e302f32342d3234203d3e2035363530.roa (hash: gdmv9oGLDElpkFJt09heFGbXGEwsiwrROKeejJuH6H8=)
                          8: 36322e3134342e36322e302f32342d3234203d3e2037303239.roa (hash: 39pCnDt/5ysHLVirmDYhrEpMKazUApewwA7C3e2EI8w=)
                          9: 36322e3134342e35332e302f32342d3234203d3e2035363530.roa (hash: zJtMC+wNISDzX6wxEWrdryP3NY3DrPX48CaIhEkX+vE=)
                          10: 36322e3134342e34302e302f32322d3234203d3e2037303239.roa (hash: XrhK/0CDz9Pi590RfVO7rlhtBt7uic/qs/ixnA7Ayu8=)
                          11: 36322e3134342e34342e302f32322d3234203d3e2035363530.roa (hash: mNaREpihdByEBOC7IwgH68cPjk9QyFi+yVOyRWNb0+o=)
                          12: 36322e3134342e36322e302f32342d3234203d3e2035363530.roa (hash: SKbavTCIVLjWHtKdUpoMR1hr5F0vUY7E5xUXD8VnV48=)
                          13: 36322e3134342e34392e302f32342d3234203d3e2037303239.roa (hash: zHCCzn4wOAW/5aPQTrS8ol+9+aZEIunRt+ECIneNJhs=)
                          14: 36322e3134342e35302e302f32342d3234203d3e2035363530.roa (hash: ad+c0baRYU8up12phvQHtKr3IkRcWuLceMTHRAUzWB8=)
                          15: 36322e3134342e33322e302f32322d3234203d3e2035363530.roa (hash: v4ecpAC5rrqVzzxALvbnKzl7siZm3sSiL1FXFHSqHxU=)
                          16: 36322e3134342e35322e302f32342d3234203d3e2037303239.roa (hash: C34NyeHTEOK/yFp9FkFPQLEyFw6UNMcF7Ac5zrTzRX8=)
                          17: 36322e3134342e35362e302f32342d3234203d3e2035363530.roa (hash: k6AXdekgKcBJToldvOCTM7UtV7Io/XZpj6d8HW/ULHI=)
                          18: 36322e3134342e36302e302f32342d3234203d3e2035363530.roa (hash: hdxzaD7W85YLhfFpMO+H0bxYNXhABjC7zDVJy6fQvfk=)
                          19: 36322e3134342e35302e302f32342d3234203d3e2037303239.roa (hash: mNIhgpN0StpDzWKRZc1jHOQLPjKZCw16QB0eZqfYsZU=)
                          20: 36322e3134342e35372e302f32342d3234203d3e2037303239.roa (hash: 6Xp5H5VI+9QiOJjHy2PlSKbj3Vu5wHjtfvfSiSxsou0=)
                          21: 36322e3134342e34382e302f32342d3234203d3e2037303239.roa (hash: on2tP0l1tTD5R8p/ftwlUFw1PRsOnhsZQGicYm4p0X0=)
                          22: 36322e3134342e36312e302f32342d3234203d3e2035363530.roa (hash: XTYUr+nfmCdIIXkpWi2CGat8SgbtvMT6Nz+zpqTewjI=)
                          23: 36322e3134342e34302e302f32322d3234203d3e2035363530.roa (hash: nL/6j332Iz30gdx7HCVqvl21IzY7yg7U8wTZ9mrY5Hk=)
                          24: 36322e3134342e35372e302f32342d3234203d3e2035363530.roa (hash: mB9iZylKYyS8O9XU5KbdNaSnUoObvYeUs0xLAyyACdE=)
                          25: 36322e3134342e33322e302f32322d3234203d3e2037303239.roa (hash: qA9oBPp/1opKX86mVBbs7iwobJ26dXzKWRxp8vP6wMw=)
                          26: 36322e3134342e36302e302f32342d3234203d3e2037303239.roa (hash: DVB2Sml8Vx5U3m3tIvO0UMpiHnl5c+JEMPoZef5gdlE=)
                          27: 36322e3134342e34392e302f32342d3234203d3e2035363530.roa (hash: Vu0FqNKuufPUA7GDwMCz1c633ymZsRjNInkPUFXH8CA=)
                          28: 36322e3134342e36332e302f32342d3234203d3e2037303239.roa (hash: zBvodhzz1qaEIfsy7COFGUByq0jHOfsXyadMoAOiHug=)
                          29: 36322e3134342e35312e302f32342d3234203d3e2037303239.roa (hash: r/dhaQC1P3cnseoc+8IjFLMN3xwsjbI8gHxLerbzG7Y=)
                          30: 36322e3134342e35352e302f32342d3234203d3e2037303239.roa (hash: 49+WmCJDsoZKmWRUqOHuzL5x4FJxuNn7OADolRLm7ZI=)
                          31: 36322e3134342e35332e302f32342d3234203d3e2037303239.roa (hash: 13fNPAdyQROKINu0O9Q1e37HmnSeElc/qUpwn7i5dvc=)
                          32: 36322e3134342e35382e302f32342d3234203d3e2035363530.roa (hash: PrP7sVkdgbZ7Jmb4hBgk4FwS0GW/72brm0iPHqs1YgE=)
                          33: 36322e3134342e35382e302f32342d3234203d3e2037303239.roa (hash: dI/C8yR3S7lQ4K7Yt1J7HTAtPMq4J4is1XZxetAl8/Y=)
                          34: 36322e3134342e34382e302f32342d3234203d3e2035363530.roa (hash: PlYPKmmbOm0Dy0WlstTESSWEWN+VoAGTNQg4J0Nlf+Y=)
                          35: 36322e3134342e35392e302f32342d3234203d3e2037303239.roa (hash: vwEZgRISSxOKAUUmUPPNr2kNrq68d2BmK89YM6cXRiY=)
                          36: 36322e3134342e35312e302f32342d3234203d3e2035363530.roa (hash: LE2rYPW/s7A3aSn231yTTPcLtp5eKGa7zBMZauRl844=)
                          37: 36322e3134342e33362e302f32322d3234203d3e2037303239.roa (hash: 1TNNZyaXXThCvJeYa0uEAWQVfQWHP1hhBfKHciQpVu8=)
                          38: 36322e3134342e33362e302f32322d3234203d3e2035363530.roa (hash: wUF5uNfjsIEbDIrBBh6jcL1pMGH+sbRiV1AaSZ/dNAQ=)
                          39: 36322e3134342e34342e302f32322d3234203d3e2037303239.roa (hash: a+r8kV76eedatO1zIPOR2rQplj0/B+Tcv61pm1rfwvw=)
                          40: 36322e3134342e35342e302f32342d3234203d3e2035363530.roa (hash: 8RUqVcnYPEfKKROujlGpbcfTKcAUnwRafK6MVCWUBiA=)
                          41: 36322e3134342e35322e302f32342d3234203d3e2035363530.roa (hash: /V6cuMUIE9Bn5aLGg/YoiHqX3+ErqmCmK0oYQUOh7oM=)
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
                          rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:ad:ee:2d:27:af:5d:f9:11:3e:42:d0:9e:60:db:e0:d2:39:d7:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
        Validity
            Not Before: Apr 17 15:24:49 2026 GMT
            Not After : Apr 18 18:35:49 2026 GMT
        Subject: CN=2A3F50B1A5208724C97A609CEC9B0E3D5A96EA8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:93:5a:03:0e:6c:47:f3:52:ce:b8:ad:37:32:
                    02:82:f1:77:9c:28:6f:7e:e9:6d:a5:87:a9:9c:5c:
                    25:bf:bb:70:0f:3f:4d:27:2a:a1:4e:dc:06:60:7a:
                    a5:d9:b3:a4:bc:d9:11:ad:93:5c:b7:07:75:95:34:
                    a1:60:8f:c6:7a:59:ba:4f:92:40:45:dd:56:e7:19:
                    66:b0:b3:ef:70:be:b6:5c:bb:cf:f4:8b:22:b6:77:
                    b5:d5:0a:f5:27:75:5b:ec:79:01:04:08:fe:43:8f:
                    a1:67:f7:d3:f4:9e:59:e9:fb:b4:ef:2e:83:d3:f3:
                    e6:d0:80:83:dd:f0:ce:d9:4d:ab:ae:c3:fb:b8:c4:
                    8d:e7:52:78:bf:ac:9b:d3:0b:6b:52:c6:0c:49:1d:
                    77:2c:1a:14:45:cb:87:46:dd:d6:e9:3d:2e:d2:d6:
                    af:92:f8:14:c4:aa:1c:e8:30:14:ec:bb:0e:45:13:
                    b0:58:d2:6b:30:60:c5:e9:79:ac:97:a3:ef:31:d4:
                    63:c0:82:b3:cd:39:ec:d1:62:8c:67:c6:ed:7d:10:
                    5e:37:1d:f5:59:cf:21:28:6b:5a:ed:a9:2e:12:d7:
                    f2:2a:bf:f6:7f:a4:33:ed:ad:aa:5c:0c:79:05:91:
                    cb:4a:ac:f8:53:ce:30:1c:37:87:ec:f1:0f:5e:c2:
                    d6:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:3F:50:B1:A5:20:87:24:C9:7A:60:9C:EC:9B:0E:3D:5A:96:EA:8D
            X509v3 Authority Key Identifier:
                keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:67:b2:20:f9:71:48:e4:89:25:1c:47:6b:e0:f1:48:90:2e:
         8a:28:e5:c1:65:d0:5d:c3:93:77:c7:7c:97:77:01:ab:53:1d:
         81:fb:9c:e0:52:fb:7e:8c:be:61:95:e4:0c:f4:07:d1:dd:94:
         b6:94:cd:7d:d5:d1:cb:ce:09:18:d0:94:37:1c:07:30:15:22:
         0e:ae:f4:cb:f1:05:b6:d1:1c:4c:6d:b3:14:1b:a0:7c:7e:fd:
         29:a8:1c:e0:5d:a9:8f:76:7c:6a:ba:de:1f:2f:a8:4f:d5:6d:
         ea:38:ff:39:db:c5:0d:0d:a6:08:a5:73:4a:66:b8:f2:e5:00:
         d2:4a:d5:9d:c8:67:39:a1:27:15:34:a3:17:8e:9f:fb:74:a7:
         8e:13:8d:06:82:7d:86:3d:88:30:0c:11:fc:ee:ca:d8:0e:d8:
         be:31:5c:7f:6b:4c:19:7c:07:2d:56:38:1f:f7:44:19:7b:c1:
         e8:18:5b:fb:ef:9c:06:fe:a4:6f:ca:83:7c:c3:73:22:e7:4e:
         73:9b:8c:1d:f6:41:ed:b8:ec:9d:68:63:4c:f8:36:f1:01:56:
         6f:7d:5a:be:3e:07:dd:fe:0a:11:67:33:13:76:60:ab:5e:f0:
         4d:c3:02:29:88:2f:f9:8d:ef:63:57:40:3a:40:dd:12:4c:52:
         82:de:57:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:15:51 2026 by rpki-client