Manifest

$ rpki-client -vvf rpki.multacom.com/repo/MCOMCA/1/F827056C07EA5582DB063B6AF62F8F3076237CD7.mft
File:                     F827056C07EA5582DB063B6AF62F8F3076237CD7.mft (raw, json)
Hash identifier:          xZNTyEXhdoscmgfdKSpKrsuXVNJrVNJ1By924F755RQ=
Subject key identifier:   27:CC:00:5D:C2:B5:70:8E:2F:D0:34:D3:22:E2:3A:12:88:70:D1:49
Authority key identifier: F8:27:05:6C:07:EA:55:82:DB:06:3B:6A:F6:2F:8F:30:76:23:7C:D7
Certificate issuer:       /CN=f827056c07ea5582db063b6af62f8f3076237cd7
Certificate serial:       3946ECE349754838A39A5024339D08EEF94718CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-CcFbAfqVYLbBjtq9i-PMHYjfNc.cer
Subject info access:      rsync://rpki.multacom.com/repo/MCOMCA/1/F827056C07EA5582DB063B6AF62F8F3076237CD7.mft
Manifest number:          0AC8
Signing time:             Fri 27 Mar 2026 03:09:34 +0000
Manifest this update:     Fri 27 Mar 2026 03:04:34 +0000
Manifest next update:     Sat 28 Mar 2026 05:43:34 +0000
Files and hashes:         1: F827056C07EA5582DB063B6AF62F8F3076237CD7.crl (hash: W1Djijgi3lZMv3R5LkrnJs7kI9q5WZ/lqAgKsofQWgc=)
                          2: 3138352e37372e3232342e302f32322d3234203d3e203335393136.roa (hash: 8gWLg8Th9wmqQpUsrE3rnTGXsfsUBsQHJFqgwdfcIv8=)
Validation:               OK
Signature path:           rsync://rpki.multacom.com/repo/MCOMCA/1/F827056C07EA5582DB063B6AF62F8F3076237CD7.crl
                          rsync://rpki.multacom.com/repo/MCOMCA/1/F827056C07EA5582DB063B6AF62F8F3076237CD7.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-CcFbAfqVYLbBjtq9i-PMHYjfNc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Mar 2026 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:46:ec:e3:49:75:48:38:a3:9a:50:24:33:9d:08:ee:f9:47:18:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f827056c07ea5582db063b6af62f8f3076237cd7
        Validity
            Not Before: Mar 27 03:04:34 2026 GMT
            Not After : Mar 28 05:43:34 2026 GMT
        Subject: CN=27CC005DC2B5708E2FD034D322E23A128870D149
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:6f:8f:12:9d:6f:f7:fa:05:a8:99:7e:d6:49:
                    48:f9:e4:dd:38:e9:b3:9c:a5:9b:c2:1c:4d:7b:5d:
                    31:9e:78:90:9e:33:45:14:22:34:a0:43:b2:6f:a0:
                    19:f8:b7:22:5b:7e:e2:2d:f4:aa:39:c1:60:84:54:
                    f6:d0:99:ca:5d:25:4d:65:fb:11:01:de:d2:0d:b8:
                    76:65:19:55:8a:00:a4:4c:f0:c1:53:13:c9:8e:b5:
                    59:4a:ac:db:cb:3f:ed:1c:43:c4:31:fe:7d:41:83:
                    3d:30:56:56:e6:ec:b6:f7:e1:60:af:e9:89:b6:8a:
                    a3:3c:28:b5:2f:04:a0:19:07:2c:14:6e:64:a0:2c:
                    0c:6d:2c:87:49:43:5b:43:5b:07:2c:1e:40:b8:e6:
                    a4:9f:eb:b1:4d:bc:8a:ed:d1:a4:38:df:2c:b7:8e:
                    a9:cf:ed:b5:e9:fb:a9:1b:c1:3f:77:aa:0a:b4:26:
                    db:c0:98:5a:5f:63:3a:e9:92:e4:c6:4d:f9:96:70:
                    9e:1e:4e:39:b5:8f:f6:b1:58:6d:8e:4d:77:0e:5f:
                    5d:32:48:77:62:27:8b:26:b7:b9:fe:8f:dd:fc:23:
                    7a:7a:ca:49:85:88:9b:49:bb:87:a6:92:0d:e9:81:
                    e6:03:5d:f4:a6:be:b3:bb:40:d6:14:75:14:ad:fa:
                    36:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:CC:00:5D:C2:B5:70:8E:2F:D0:34:D3:22:E2:3A:12:88:70:D1:49
            X509v3 Authority Key Identifier:
                keyid:F8:27:05:6C:07:EA:55:82:DB:06:3B:6A:F6:2F:8F:30:76:23:7C:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.multacom.com/repo/MCOMCA/1/F827056C07EA5582DB063B6AF62F8F3076237CD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-CcFbAfqVYLbBjtq9i-PMHYjfNc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.multacom.com/repo/MCOMCA/1/F827056C07EA5582DB063B6AF62F8F3076237CD7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:c8:3b:fc:b9:ec:5c:e7:85:d6:c9:75:b4:3d:8c:ad:52:60:
         9a:8b:3f:30:d6:df:9a:b2:e4:5e:20:10:0c:ea:3a:89:b5:8f:
         c3:7f:ea:2f:3e:53:32:20:4f:81:77:54:49:5b:21:21:f3:4c:
         17:78:3c:40:2b:e4:00:cf:ec:60:a3:09:76:ca:ac:e2:68:ff:
         8b:b4:d1:1f:b0:5b:9b:84:95:90:c6:67:6f:ed:18:b3:01:24:
         ba:c6:aa:4a:b2:3e:f6:27:42:3b:a2:fe:7d:6f:66:22:83:67:
         2b:a4:db:18:14:d2:45:0e:a5:4c:c8:69:0a:1f:fd:f3:3b:1f:
         f5:ad:dc:cd:73:8b:b6:10:cb:99:7c:c6:2b:40:63:69:4f:ff:
         b3:7d:27:0d:b1:6a:18:ac:1d:31:46:c8:7f:a5:94:ce:e2:35:
         f7:02:9a:a7:ec:dc:39:15:cf:a5:2f:b1:fb:5e:f6:d2:9b:8d:
         41:41:96:dc:72:1f:13:76:1e:ed:cd:e1:45:06:20:80:46:fe:
         1a:73:24:7d:e4:87:76:72:48:25:c1:1d:f9:a0:99:f7:59:b0:
         65:24:58:55:f6:a6:76:41:6f:85:a3:6d:b7:9c:ef:53:9b:a4:
         56:7e:75:32:67:50:46:e1:47:bf:92:85:37:81:6c:9f:d2:90:
         83:fe:71:d0
-----BEGIN CERTIFICATE-----
MIIE3jCCA8agAwIBAgIUOUbs40l1SDijmlAkM50I7vlHGM8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZjgyNzA1NmMwN2VhNTU4MmRiMDYzYjZhZjYyZjhmMzA3
NjIzN2NkNzAeFw0yNjAzMjcwMzA0MzRaFw0yNjAzMjgwNTQzMzRaMDMxMTAvBgNV
BAMTKDI3Q0MwMDVEQzJCNTcwOEUyRkQwMzREMzIyRTIzQTEyODg3MEQxNDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsb48SnW/3+gWomX7WSUj55N04
6bOcpZvCHE17XTGeeJCeM0UUIjSgQ7JvoBn4tyJbfuIt9Ko5wWCEVPbQmcpdJU1l
+xEB3tINuHZlGVWKAKRM8MFTE8mOtVlKrNvLP+0cQ8Qx/n1Bgz0wVlbm7Lb34WCv
6Ym2iqM8KLUvBKAZBywUbmSgLAxtLIdJQ1tDWwcsHkC45qSf67FNvIrt0aQ43yy3
jqnP7bXp+6kbwT93qgq0JtvAmFpfYzrpkuTGTfmWcJ4eTjm1j/axWG2OTXcOX10y
SHdiJ4smt7n+j938I3p6ykmFiJtJu4emkg3pgeYDXfSmvrO7QNYUdRSt+jaBAgMB
AAGjggHoMIIB5DAdBgNVHQ4EFgQUJ8wAXcK1cI4v0DTTIuI6Eohw0UkwHwYDVR0j
BBgwFoAU+CcFbAfqVYLbBjtq9i+PMHYjfNcwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud
HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraS5tdWx0YWNvbS5jb20vcmVwby9NQ09N
Q0EvMS9GODI3MDU2QzA3RUE1NTgyREIwNjNCNkFGNjJGOEYzMDc2MjM3Q0Q3LmNy
bDBlBggrBgEFBQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMS1DY0ZiQWZxVllMYkJqdHE5aS1QTUhZ
amZOYy5jZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jw
a2kubXVsdGFjb20uY29tL3JlcG8vTUNPTUNBLzEvRjgyNzA1NkMwN0VBNTU4MkRC
MDYzQjZBRjYyRjhGMzA3NjIzN0NENy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF
BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAFjIO/y57FznhdbJdbQ9
jK1SYJqLPzDW35qy5F4gEAzqOom1j8N/6i8+UzIgT4F3VElbISHzTBd4PEAr5ADP
7GCjCXbKrOJo/4u00R+wW5uElZDGZ2/tGLMBJLrGqkqyPvYnQjui/n1vZiKDZyuk
2xgU0kUOpUzIaQof/fM7H/Wt3M1zi7YQy5l8xitAY2lP/7N9Jw2xahisHTFGyH+l
lM7iNfcCmqfs3DkVz6Uvsfte9tKbjUFBltxyHxN2Hu3N4UUGIIBG/hpzJH3kh3Zy
SCXBHfmgmfdZsGUkWFX2pnZBb4Wjbbec71ObpFZ+dTJnUEbhR7+ShTeBbJ/SkIP+
cdA=
-----END CERTIFICATE-----
Generated at Fri Mar 27 10:13:46 2026 by rpki-client