Manifest

$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft
File:                     2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft (raw, json)
Hash identifier:          CJh97EpXWvEXS4SJcWonbL34rTx4L3yZ6KP3rqLQsBA=
Subject key identifier:   1C:1E:31:8E:5E:C5:42:42:36:34:B1:FA:E8:4A:B1:26:D6:0C:DB:F8
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       59915A003AA8AA987C231CC5C323ED7F5AAC7EF3
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft
Manifest number:          0393
Signing time:             Sat 26 Apr 2025 01:34:57 +0000
Manifest this update:     Sat 26 Apr 2025 01:29:57 +0000
Manifest next update:     Sun 27 Apr 2025 04:07:57 +0000
Files and hashes:         1: 33372e3233302e35362e302f32332d3234203d3e20323730303532.roa (hash: dPfzyKc96+BpmrFiAZOB5TQ6c+509Gey7/6U3tpIibE=)
                          2: 33372e312e3232382e302f32342d3234203d3e203631333137.roa (hash: r/CWwCEm+DNdv0i3Khq29UfT41m1eyngkWFtChD1fCU=)
                          3: 37372e37352e3139352e302f32342d3234203d3e203136323736.roa (hash: 4DS22zaVE3ZWcXwK7nTDP0LWt+y5Gvk68+2K81bCqoI=)
                          4: 33372e312e3232342e302f32342d3234203d3e203231383539.roa (hash: LAEITFtgqb+6/JUmoSdVM1sY+GlPlreVQgQaKE6V320=)
                          5: 352e38332e3231382e302f32342d3234203d3e20333936333536.roa (hash: gnx1tlvtNxZvXXwvMf1AfuRDIVQ0iQp7FLUFUP17EhI=)
                          6: 33372e312e3232362e302f32342d3234203d3e20323134383238.roa (hash: lI7+2GGYEmWOIqPeCKm4J1Or58k9jZ1kcbn4yPCC8Fs=)
                          7: 33372e3233302e36302e302f32342d3234203d3e20323134333832.roa (hash: 9kp0RSY8IUh8ho6SJGHyGIPebU82vQeo9j2rXfSpuwo=)
                          8: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl (hash: Oizvbzr7Q7DqsgkD40APSJl6RFZwmrkmORlK88zXWGg=)
                          9: 37372e37352e3139322e302f32342d3234203d3e2036323034.roa (hash: VnIQ2LLbX9NDNLgkNQbSghKVILqlOqnlrUXslmaIUt4=)
                          10: 352e38332e3231322e302f32342d3234203d3e2037303138.roa (hash: ZFJZQaD5Oxw98HZo/a1zXMcFSPEgVE/G6dl9AHKlZ2w=)
                          11: 33372e312e3233312e302f32342d3234203d3e203631333137.roa (hash: WCk+PpHECj5y9IFNmHZfDwAMViTxmHEdmumkRuGKUCg=)
                          12: 352e38332e3231332e302f32342d3234203d3e2037303138.roa (hash: bk5Av5ZRytRHp3SG5Zts8V55G5zl2FDOq5AuQ3XDjxY=)
                          13: 352e38332e3230382e302f32332d3234203d3e20383334.roa (hash: f1fJgNeP0WxUtFS9wqpileyX6RFefIuYgw1EYrj9Jqo=)
                          14: 352e38332e3231302e302f32342d3234203d3e203538303631.roa (hash: cC+8YOnlwJLZmkmT8UFK36X5i2lMEFvmSUiob5DS7tE=)
                          15: 33372e312e3232352e302f32342d3234203d3e203631333137.roa (hash: bKc2AYuuS9T6I/ElMj6CpWBpUuhvY8QZ29MkQGQfKcQ=)
                          16: 352e38332e3231312e302f32342d3234203d3e203538303631.roa (hash: ksbl5+sgqod4P8W0q80OX2n6H5q2FqNKDHuWoU/iEzY=)
                          17: 33372e312e3232392e302f32342d3234203d3e203631333137.roa (hash: tycDoiBrW6cTXq1Jdcx7b5B2dOE19OXakMkIuSuwTuE=)
                          18: 33372e3233302e35362e302f32342d3234203d3e20323730303532.roa (hash: a8UDPxRmubJlUsGMk+c81+/K5KPrgE3Lu5GElPeMWpQ=)
                          19: 33372e3233302e35362e302f32322d3234203d3e20323730303532.roa (hash: fgcbIMNAB7h/wnC77ng8A1h8W2Fuy1969OmFhQzR17U=)
                          20: 33372e3233302e35302e302f32342d3234203d3e203634323637.roa (hash: jcGuqmTYh3+7ariLsf0H+W6k+VM92RICcIEDoozmDRM=)
                          21: 33372e3233302e34382e302f32342d3234203d3e203136323736.roa (hash: m4idgY/CmYjr1Cyo/w7eqqU8XM2Y09OCNk4B7+Z0neU=)
                          22: 352e38332e3231372e302f32342d3234203d3e20313939363134.roa (hash: cDN+SbI6NZwZDVyXfeyKe2nobYgTF6uMF16pMM6UdVg=)
                          23: 37372e37352e3139342e302f32342d3234203d3e20383334.roa (hash: ZNkqjHmn4rp1TIbac0kYSVlnVMRABQDXguo+UYKZaDQ=)
                          24: 352e38332e3232312e302f32342d3234203d3e20323135363732.roa (hash: XrhRThrBXnZ5m3cQXcFXspVP/D3hOZ3bcg+wRs9krWM=)
                          25: 33372e3233302e34392e302f32342d3234203d3e20323132333335.roa (hash: 20GlAyhFZA1wGf26uEbFr0glV8vahrCKEcmDDHVriRU=)
                          26: 33372e3233302e34392e302f32342d3234203d3e20323131343135.roa (hash: ODSO6PE8lHsObtnFXP3qH2bSrsIJl4YlLmx16DoyJ/A=)
                          27: 352e38332e3139322e302f32302d3230203d3e20323037363435.roa (hash: VbLAW9rpMB9gq+pl+Mb6UXJ72VfekgTcLixDBG6SrdU=)
                          28: 37372e37352e3139362e302f32342d3234203d3e20383334.roa (hash: vtwlTEXfEsoO2Ldra2LYdgf5kIuODGhmPdsE6e+GblQ=)
                          29: 33372e3233302e34392e302f32342d3234203d3e20323131343339.roa (hash: 3I19XVs5bt1Ch6I2xHWBn1mEW6XG7M4SeQNqyhVZMEs=)
                          30: 33372e3233302e35312e302f32342d3234203d3e203631333137.roa (hash: dP5qSFfyvnVd9mBalYOAeVAd2nNNAz77P3i8KevvCqk=)
                          31: 33372e3233302e36322e302f32342d3234203d3e20333936333536.roa (hash: /gM2R+LpSe6Xmg3vJtpfqfeHGSFlToDzm5KXtZvGjGI=)
                          32: 33372e312e3233302e302f32342d3234203d3e203631333137.roa (hash: icURZCczxDzw0K7PBvoYMhS0uXp68lL7XhVp6wN4zhQ=)
                          33: 37372e37352e3139332e302f32342d3234203d3e2035353131.roa (hash: /csPivmeHTINxaWIOzfV4PYQnZPgOQAxRZYggiwdbkA=)
                          34: 33372e3233302e35372e302f32342d3234203d3e20323730303532.roa (hash: r3qDLlHexuwHuLNsr7oHugyHt3OY9zrD8XGJ6Ew+tHQ=)
                          35: 352e38332e3231342e302f32342d3234203d3e20323134373739.roa (hash: 5acKWlc3tNOz39XdLqSmCjJXIOFtA+vLZ9fyXymsl+E=)
                          36: 352e38332e3231362e302f32342d3234203d3e20313939363134.roa (hash: 8Q/x+EWEBBwA5TkssPQUQlFGqq0tR07CeeXNyTmVHPw=)
                          37: 352e38332e3232302e302f32342d3234203d3e20313939363134.roa (hash: ZuYNMRGd/hC4kRiuob80tK8kFTlv7M7MDGYKQifgmoY=)
                          38: 33372e3233302e35322e302f32342d3234203d3e203634323637.roa (hash: 6DJKyHpZD4Sv+t5NeksmxbSjsP747ey2vzAt+RSXw+A=)
                          39: 33372e3233302e35342e302f32342d3234203d3e203634323637.roa (hash: XFykwoX84I2erf1RHfv9NByauLjl3SDDMJRcXFy3LVg=)
                          40: 37372e37352e3139382e302f32342d3234203d3e203432383331.roa (hash: KZlAdmIfkrZfOsQL52z6MjCWqzNoC86ajQi+dkn782g=)
                          41: 37372e37352e3139392e302f32342d3234203d3e20323039323432.roa (hash: vP1na6BDZ12XpjUY3AIr7U989rzxykiejrHnhhhzWHI=)
                          42: 33372e3233302e35382e302f32332d3234203d3e20323730303532.roa (hash: 5lX245HqihwdZ5+nzRqJ+fLDnChtq1dBRkVGIwyTwQE=)
                          43: 33372e3233302e35392e302f32342d3234203d3e20323730303532.roa (hash: Cw9FEPjUNv0GKfMoX1hEOfaBqNgZduwfgeK1dJZR9co=)
                          44: 33372e3233302e35382e302f32342d3234203d3e20323730303532.roa (hash: NrnHz8+8esy6Fpz9dTZ7NvRwelJcvZd1VXhTQO8/1YI=)
                          45: 352e38332e3231352e302f32342d3234203d3e203432383331.roa (hash: k77yUKu5LRhZ2tCvQLqzsXa7ILaN3sKf63PxvKG4DCA=)
                          46: 352e38332e3232332e302f32342d3234203d3e203538303631.roa (hash: ahKD/kaJEtpDNbPii/k57UseDtDnb1sleQxDVRYsjVs=)
                          47: 33372e3233302e36332e302f32342d3234203d3e203136323736.roa (hash: Ak2iOyzYPVx1U2Y4aafCzk3EVWcPPFdLy4DeVbBgxpA=)
                          48: 33372e3233302e35332e302f32342d3234203d3e203634323637.roa (hash: Pkv9jDCjyNjQ/UoBOJR7pUfU/aSuuL6BMV/91HxtON8=)
                          49: 33372e3233302e35352e302f32342d3234203d3e203634323637.roa (hash: ixocADuVylFxrbQyd67L1SlgMHAhSfSxMkqXrOoAjTs=)
                          50: 33372e3233302e36312e302f32342d3234203d3e2033333230.roa (hash: b+vFJ8Sug+u8FU7b40hZko1AQt+ncKPDrFE6Zf4NMVI=)
                          51: 352e38332e3231392e302f32342d3234203d3e20313939363134.roa (hash: 2Wtt/lW4SXo5PeW03SMtiO54PNwAjlL33RwBmYsNpDQ=)
                          52: 352e38332e3232322e302f32342d3234203d3e203239383032.roa (hash: zEAWXnPCTxeyK6NuaP21d2FThuIjh/Gso5xInRjuDHs=)
                          53: 37372e37352e3139372e302f32342d3234203d3e20323130353432.roa (hash: QB96alCKK0djvxe4HTuscalvcDfYkZVyA+YlPMyzdP4=)
                          54: 33372e312e3232372e302f32342d3234203d3e20333933393432.roa (hash: tT49HwPs0awdX3JzswQhWnPydG5somERG5gp25N4gp0=)
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
                          rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 04:07:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:91:5a:00:3a:a8:aa:98:7c:23:1c:c5:c3:23:ed:7f:5a:ac:7e:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: Apr 26 01:29:57 2025 GMT
            Not After : Apr 27 04:07:57 2025 GMT
        Subject: CN=1C1E318E5EC542423634B1FAE84AB126D60CDBF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:db:a1:48:69:bf:b1:42:49:c7:dd:a7:c9:58:
                    40:41:18:bd:95:b5:35:57:48:33:e2:41:ce:16:ee:
                    6a:ab:d4:ef:58:30:8f:c3:3d:d3:03:0c:08:6f:22:
                    8f:07:77:d5:eb:e0:e2:62:16:6e:63:b6:2f:74:37:
                    dc:ac:75:30:18:a1:49:7f:b4:ea:e8:31:37:51:3f:
                    4c:fb:9a:f9:b2:04:14:42:fc:d9:2f:7b:68:28:31:
                    6b:91:ce:15:a8:5b:0f:b4:f1:6a:3c:00:37:1e:02:
                    9f:42:1e:19:e7:5d:47:20:fa:33:70:46:8c:46:4e:
                    31:1c:f2:6c:48:93:75:29:68:d4:df:9f:bb:5b:83:
                    d8:7f:d4:46:b6:bb:41:da:77:74:4e:d8:f6:60:13:
                    25:8a:cb:37:6c:3f:9c:56:bb:c7:b2:e5:d0:72:b6:
                    ae:51:02:90:12:8c:02:6d:21:07:ac:ba:24:90:13:
                    c3:ba:3a:ae:34:32:7d:dc:0f:72:bb:79:99:a7:57:
                    e0:6f:72:0a:bf:53:e9:67:31:95:76:e9:71:0d:22:
                    61:7b:d7:c0:bf:6e:28:39:b4:5d:6a:55:f3:cf:49:
                    59:fe:4a:9c:cb:c5:15:de:c2:ed:30:7f:ab:a3:44:
                    60:69:e1:03:b4:66:ed:21:fd:da:53:d2:10:d3:e7:
                    a7:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:1E:31:8E:5E:C5:42:42:36:34:B1:FA:E8:4A:B1:26:D6:0C:DB:F8
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:fd:92:31:58:e2:bb:01:f0:ac:69:7a:38:e8:c0:91:27:88:
         55:39:18:4d:93:17:40:73:6a:fc:1b:31:3f:7f:5e:a5:d1:5f:
         bc:19:c5:84:30:51:1a:6a:74:f2:43:2e:14:53:8c:42:55:bf:
         89:54:55:0a:8e:b2:2a:34:72:bb:49:d4:dd:f2:62:d1:e3:3d:
         02:3c:98:6d:ba:f1:8b:00:ed:5f:46:ee:69:7b:d9:42:2f:cb:
         a3:ff:cb:d0:00:6b:78:8e:a3:9d:4a:a8:28:fe:32:79:4a:0c:
         9d:23:bb:34:85:b7:e9:a6:4e:67:17:bc:71:ff:ff:e0:50:8e:
         5a:51:66:f4:32:6e:88:43:b0:eb:e8:a9:43:68:06:01:a4:1f:
         a2:57:14:3f:38:f9:25:05:06:eb:64:e3:d5:38:23:a0:81:c9:
         c9:b6:b9:95:f8:15:ee:b6:c6:cc:51:53:82:dd:dd:7d:8a:b8:
         9a:48:45:f5:66:01:cc:57:f2:2d:19:8e:96:6d:4a:6c:11:21:
         e1:fe:e5:51:df:6f:82:69:5b:e1:b5:c9:b5:1a:16:8a:79:c2:
         3f:ee:e3:fc:da:49:61:f5:68:75:b0:e3:53:85:3a:a3:14:ac:
         68:18:dd:9c:c3:d0:cb:d5:6d:b9:2d:39:33:2b:b0:57:bc:b6:
         09:dc:57:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:27:57 2025 by rpki-client