Manifest

$ rpki-client -vvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
File:                     B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft (raw, json)
Hash identifier:          Qawfm/YjozTn9Y7OfecINdO1lEiW+PZ+iHHv+LvhlYI=
Subject key identifier:   89:02:82:C0:AD:64:84:22:FF:BD:06:7C:80:5A:49:F0:46:A7:77:27
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Certificate issuer:       /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial:       06F58EF601D347EA0D08F527E5A57C21109C0DDC
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
Manifest number:          AA
Signing time:             Tue 02 Jun 2026 20:19:10 +0000
Manifest this update:     Tue 02 Jun 2026 20:14:10 +0000
Manifest next update:     Wed 03 Jun 2026 21:59:10 +0000
Files and hashes:         1: 36322e3134342e33362e302f32322d3234203d3e2035363530.roa (hash: wUF5uNfjsIEbDIrBBh6jcL1pMGH+sbRiV1AaSZ/dNAQ=)
                          2: 36322e3134342e35352e302f32342d3234203d3e2035363530.roa (hash: gdmv9oGLDElpkFJt09heFGbXGEwsiwrROKeejJuH6H8=)
                          3: 36322e3134342e36322e302f32342d3234203d3e2035363530.roa (hash: SKbavTCIVLjWHtKdUpoMR1hr5F0vUY7E5xUXD8VnV48=)
                          4: 36322e3134342e35312e302f32342d3234203d3e2037303239.roa (hash: r/dhaQC1P3cnseoc+8IjFLMN3xwsjbI8gHxLerbzG7Y=)
                          5: 36322e3134342e35372e302f32342d3234203d3e2035363530.roa (hash: mB9iZylKYyS8O9XU5KbdNaSnUoObvYeUs0xLAyyACdE=)
                          6: 36322e3134342e36302e302f32342d3234203d3e2035363530.roa (hash: hdxzaD7W85YLhfFpMO+H0bxYNXhABjC7zDVJy6fQvfk=)
                          7: 36322e3134342e35302e302f32342d3234203d3e2035363530.roa (hash: ad+c0baRYU8up12phvQHtKr3IkRcWuLceMTHRAUzWB8=)
                          8: 36322e3134342e36312e302f32342d3234203d3e2037303239.roa (hash: O9mGUvXlRiTPolyhEkkfoTVdFdRsKU6PhvD6j8bjJWk=)
                          9: 36322e3134342e35382e302f32342d3234203d3e2035363530.roa (hash: PrP7sVkdgbZ7Jmb4hBgk4FwS0GW/72brm0iPHqs1YgE=)
                          10: 36322e3134342e35352e302f32342d3234203d3e2037303239.roa (hash: 49+WmCJDsoZKmWRUqOHuzL5x4FJxuNn7OADolRLm7ZI=)
                          11: 36322e3134342e35322e302f32342d3234203d3e2035363530.roa (hash: /V6cuMUIE9Bn5aLGg/YoiHqX3+ErqmCmK0oYQUOh7oM=)
                          12: 36322e3134342e36322e302f32342d3234203d3e2037303239.roa (hash: 39pCnDt/5ysHLVirmDYhrEpMKazUApewwA7C3e2EI8w=)
                          13: 36322e3134342e35342e302f32342d3234203d3e2037303239.roa (hash: eIChuRBUxSipjTajDAoXIF7QbB1h6tXsGu/RhP4NNvw=)
                          14: 36322e3134342e35332e302f32342d3234203d3e2037303239.roa (hash: 13fNPAdyQROKINu0O9Q1e37HmnSeElc/qUpwn7i5dvc=)
                          15: 36322e3134342e34342e302f32322d3234203d3e2037303239.roa (hash: a+r8kV76eedatO1zIPOR2rQplj0/B+Tcv61pm1rfwvw=)
                          16: 36322e3134342e36302e302f32342d3234203d3e2037303239.roa (hash: DVB2Sml8Vx5U3m3tIvO0UMpiHnl5c+JEMPoZef5gdlE=)
                          17: 36322e3134342e35382e302f32342d3234203d3e2037303239.roa (hash: dI/C8yR3S7lQ4K7Yt1J7HTAtPMq4J4is1XZxetAl8/Y=)
                          18: 36322e3134342e33322e302f32322d3234203d3e2037303239.roa (hash: qA9oBPp/1opKX86mVBbs7iwobJ26dXzKWRxp8vP6wMw=)
                          19: 36322e3134342e35372e302f32342d3234203d3e2037303239.roa (hash: 6Xp5H5VI+9QiOJjHy2PlSKbj3Vu5wHjtfvfSiSxsou0=)
                          20: 36322e3134342e34302e302f32322d3234203d3e2035363530.roa (hash: nL/6j332Iz30gdx7HCVqvl21IzY7yg7U8wTZ9mrY5Hk=)
                          21: 36322e3134342e34392e302f32342d3234203d3e2035363530.roa (hash: Vu0FqNKuufPUA7GDwMCz1c633ymZsRjNInkPUFXH8CA=)
                          22: 36322e3134342e33362e302f32322d3234203d3e2037303239.roa (hash: 1TNNZyaXXThCvJeYa0uEAWQVfQWHP1hhBfKHciQpVu8=)
                          23: 36322e3134342e35312e302f32342d3234203d3e2035363530.roa (hash: LE2rYPW/s7A3aSn231yTTPcLtp5eKGa7zBMZauRl844=)
                          24: 36322e3134342e36332e302f32342d3234203d3e2037303239.roa (hash: zBvodhzz1qaEIfsy7COFGUByq0jHOfsXyadMoAOiHug=)
                          25: B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl (hash: fRLzsDwUNYKYizISomVeg//1lSTAFIKEtLj1euM/mrE=)
                          26: 36322e3134342e35302e302f32342d3234203d3e2037303239.roa (hash: mNIhgpN0StpDzWKRZc1jHOQLPjKZCw16QB0eZqfYsZU=)
                          27: 36322e3134342e33322e302f32322d3234203d3e2035363530.roa (hash: v4ecpAC5rrqVzzxALvbnKzl7siZm3sSiL1FXFHSqHxU=)
                          28: 36322e3134342e35332e302f32342d3234203d3e2035363530.roa (hash: zJtMC+wNISDzX6wxEWrdryP3NY3DrPX48CaIhEkX+vE=)
                          29: 36322e3134342e36332e302f32342d3234203d3e2035363530.roa (hash: NSKMfyje8/GSgwcsMdVddLe+H9bWs9pk4FARLDkhENM=)
                          30: 36322e3134342e35342e302f32342d3234203d3e2035363530.roa (hash: 8RUqVcnYPEfKKROujlGpbcfTKcAUnwRafK6MVCWUBiA=)
                          31: 36322e3134342e35362e302f32342d3234203d3e2035363530.roa (hash: k6AXdekgKcBJToldvOCTM7UtV7Io/XZpj6d8HW/ULHI=)
                          32: 36322e3134342e35392e302f32342d3234203d3e2037303239.roa (hash: vwEZgRISSxOKAUUmUPPNr2kNrq68d2BmK89YM6cXRiY=)
                          33: 36322e3134342e34382e302f32342d3234203d3e2037303239.roa (hash: on2tP0l1tTD5R8p/ftwlUFw1PRsOnhsZQGicYm4p0X0=)
                          34: 36322e3134342e34392e302f32342d3234203d3e2037303239.roa (hash: zHCCzn4wOAW/5aPQTrS8ol+9+aZEIunRt+ECIneNJhs=)
                          35: 36322e3134342e34382e302f32342d3234203d3e2035363530.roa (hash: PlYPKmmbOm0Dy0WlstTESSWEWN+VoAGTNQg4J0Nlf+Y=)
                          36: 36322e3134342e34302e302f32322d3234203d3e2037303239.roa (hash: XrhK/0CDz9Pi590RfVO7rlhtBt7uic/qs/ixnA7Ayu8=)
                          37: 36322e3134342e35392e302f32342d3234203d3e2035363530.roa (hash: DnN+8MHkHDCl3TEz/gfbnZZDc/9DAviafkxWuN+bqtw=)
                          38: 36322e3134342e35322e302f32342d3234203d3e2037303239.roa (hash: C34NyeHTEOK/yFp9FkFPQLEyFw6UNMcF7Ac5zrTzRX8=)
                          39: 36322e3134342e36312e302f32342d3234203d3e2035363530.roa (hash: XTYUr+nfmCdIIXkpWi2CGat8SgbtvMT6Nz+zpqTewjI=)
                          40: 36322e3134342e34342e302f32322d3234203d3e2035363530.roa (hash: mNaREpihdByEBOC7IwgH68cPjk9QyFi+yVOyRWNb0+o=)
                          41: 36322e3134342e35362e302f32342d3234203d3e2037303239.roa (hash: 6EbsXwwZ8uuaqSXWQkpLpMhWddBEVlponXMKi1AcaMA=)
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
                          rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 03 Jun 2026 15:55:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:f5:8e:f6:01:d3:47:ea:0d:08:f5:27:e5:a5:7c:21:10:9c:0d:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
        Validity
            Not Before: Jun  2 20:14:10 2026 GMT
            Not After : Jun  3 21:59:10 2026 GMT
        Subject: CN=890282C0AD648422FFBD067C805A49F046A77727
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:40:d4:a0:81:64:b4:3d:ca:96:37:46:52:97:
                    fa:13:fb:42:e6:dc:f9:e4:02:3c:eb:b7:bd:37:48:
                    bb:85:8a:d4:aa:de:fc:ab:eb:86:61:d2:57:bd:a6:
                    79:e0:07:ef:6c:9b:5e:22:b8:a0:c7:1b:cc:bc:95:
                    ff:66:9e:ab:ba:1f:03:37:02:c5:09:c8:34:10:80:
                    9e:73:2e:8f:22:58:d8:17:af:64:d3:ea:12:05:46:
                    ba:bc:86:8f:cd:3a:bb:06:e8:50:a1:22:69:4e:f6:
                    24:cb:b9:6d:19:14:68:21:ea:ce:6a:51:08:2a:ab:
                    61:13:4f:59:08:4a:ec:6f:e3:fe:ef:bd:a3:8c:d9:
                    18:42:04:1f:f1:b8:42:de:4a:01:e0:f0:7f:9f:7c:
                    88:be:ea:c1:df:7a:10:06:e7:ef:0b:0e:1a:1a:ce:
                    05:df:64:5c:39:ab:46:c9:d7:36:59:fe:3a:7f:6d:
                    1f:28:66:0e:26:c4:e1:8f:d4:a8:5f:d6:40:5d:49:
                    9c:f9:73:fa:17:f1:61:24:e8:f1:96:81:69:28:72:
                    6a:2e:e2:b2:a2:8d:3a:fb:30:64:12:07:9d:64:ab:
                    af:06:3c:17:21:72:63:4a:f3:cd:47:aa:8a:9c:01:
                    06:39:af:27:11:ae:3c:f7:10:48:0c:e1:f6:d8:8c:
                    b6:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:02:82:C0:AD:64:84:22:FF:BD:06:7C:80:5A:49:F0:46:A7:77:27
            X509v3 Authority Key Identifier:
                keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:bc:21:a0:15:a8:de:16:69:9e:aa:b0:3f:56:b8:2b:fe:3d:
         ed:c4:f5:8a:0d:d2:25:40:34:93:0b:60:8f:51:a4:b0:26:54:
         c4:7b:a8:2d:44:c9:d6:b4:12:53:1d:8d:7d:22:19:f7:b1:72:
         8b:a0:7e:5e:c3:78:b6:48:17:99:83:a9:f3:c6:16:e8:54:f3:
         ba:ea:1b:2e:fb:7b:f9:86:75:ad:c8:f7:6c:b4:91:21:c7:f6:
         fe:2f:58:2e:d0:30:3c:86:a9:4b:5d:19:92:14:09:77:22:98:
         fa:80:94:8c:74:de:49:6a:7c:8a:4f:57:95:45:f3:43:10:5e:
         c3:d8:6c:45:d2:7e:b0:0f:c6:85:d1:da:c4:f9:e1:e2:3c:d2:
         76:20:00:20:27:6d:79:95:19:6a:dc:e4:1e:1a:4d:5a:6d:c5:
         18:79:91:1a:b5:da:89:c9:46:07:2c:69:aa:75:96:6e:39:88:
         a4:e6:1c:c4:e9:ea:fb:25:4e:52:c7:67:8f:19:2a:28:9a:d7:
         07:78:97:b7:5c:a2:f3:61:57:69:d1:d0:24:e2:d2:02:f5:e3:
         1d:3c:d2:fb:a5:c4:f7:d1:92:3b:ea:d2:c9:93:5f:67:88:11:
         d4:c6:af:ea:e2:e9:08:f9:5a:c8:a5:74:49:57:49:2b:4a:f9:
         a2:79:3b:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:51:20 2026 by rpki-client