Manifest

$ rpki-client -vvf rpki.multacom.com/repo/MCOMCA/1/F827056C07EA5582DB063B6AF62F8F3076237CD7.mft
File:                     F827056C07EA5582DB063B6AF62F8F3076237CD7.mft (raw, json)
Hash identifier:          DTZN5yZ7Lkodjopc8mq4IiLGnMk0EVbxPaK2/9DCelk=
Subject key identifier:   AA:7C:99:75:6E:8D:6B:FA:1C:CB:C9:FC:6D:1E:C5:1C:0D:07:98:10
Authority key identifier: F8:27:05:6C:07:EA:55:82:DB:06:3B:6A:F6:2F:8F:30:76:23:7C:D7
Certificate issuer:       /CN=f827056c07ea5582db063b6af62f8f3076237cd7
Certificate serial:       5E3C9B0DDC81235A4481EC9EB807352B88723A5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-CcFbAfqVYLbBjtq9i-PMHYjfNc.cer
Subject info access:      rsync://rpki.multacom.com/repo/MCOMCA/1/F827056C07EA5582DB063B6AF62F8F3076237CD7.mft
Manifest number:          0B0B
Signing time:             Sat 16 May 2026 04:40:08 +0000
Manifest this update:     Sat 16 May 2026 04:35:08 +0000
Manifest next update:     Sun 17 May 2026 04:44:08 +0000
Files and hashes:         1: 3138352e37372e3232342e302f32322d3234203d3e203335393136.roa (hash: 8gWLg8Th9wmqQpUsrE3rnTGXsfsUBsQHJFqgwdfcIv8=)
                          2: F827056C07EA5582DB063B6AF62F8F3076237CD7.crl (hash: ySicXlX+hHUlFWz1G45ky8eniFHXkedSGtrrNfdwkdg=)
Validation:               OK
Signature path:           rsync://rpki.multacom.com/repo/MCOMCA/1/F827056C07EA5582DB063B6AF62F8F3076237CD7.crl
                          rsync://rpki.multacom.com/repo/MCOMCA/1/F827056C07EA5582DB063B6AF62F8F3076237CD7.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-CcFbAfqVYLbBjtq9i-PMHYjfNc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 04:44:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:3c:9b:0d:dc:81:23:5a:44:81:ec:9e:b8:07:35:2b:88:72:3a:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f827056c07ea5582db063b6af62f8f3076237cd7
        Validity
            Not Before: May 16 04:35:08 2026 GMT
            Not After : May 17 04:44:08 2026 GMT
        Subject: CN=AA7C99756E8D6BFA1CCBC9FC6D1EC51C0D079810
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:8f:e3:ca:43:35:a4:47:b0:ab:62:1c:f6:b5:
                    ac:96:95:03:12:f8:8f:38:00:26:5f:99:fa:19:67:
                    19:36:1d:93:93:23:9b:3f:5d:75:49:bb:36:ba:1b:
                    24:dd:78:ca:04:f6:63:93:bb:7c:a4:89:84:e8:f7:
                    77:c8:b4:e1:b0:0f:c1:1f:d4:bd:a3:84:a4:c7:b9:
                    24:06:17:00:25:80:5e:27:54:53:e8:84:90:0c:42:
                    63:02:17:84:de:a6:97:60:13:45:51:b1:26:07:c4:
                    8d:33:a0:c0:d1:fa:57:6e:3f:97:88:ab:09:bb:ec:
                    c1:f2:79:06:b7:d5:d2:af:10:c9:cc:c8:e3:5d:d5:
                    b8:c5:46:8c:c7:e7:e7:67:43:b2:b2:d9:14:c9:f4:
                    44:2f:59:f1:fc:17:39:e3:1d:02:62:87:93:da:e5:
                    2a:f5:bc:b6:e7:c0:26:97:ad:1d:6a:27:03:a7:cd:
                    38:ff:71:9c:71:88:b6:11:9d:0e:b0:6e:23:8d:98:
                    0b:a2:e9:7c:d2:f4:bd:c9:f5:76:25:48:54:39:12:
                    3a:a8:a5:42:e6:5c:a8:3d:27:44:0e:fe:60:76:26:
                    db:15:8b:db:70:34:53:22:7e:2d:71:ce:39:cc:a4:
                    ca:0f:02:a7:aa:c5:e4:5c:c8:bd:22:98:ab:d6:7c:
                    53:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:7C:99:75:6E:8D:6B:FA:1C:CB:C9:FC:6D:1E:C5:1C:0D:07:98:10
            X509v3 Authority Key Identifier:
                keyid:F8:27:05:6C:07:EA:55:82:DB:06:3B:6A:F6:2F:8F:30:76:23:7C:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.multacom.com/repo/MCOMCA/1/F827056C07EA5582DB063B6AF62F8F3076237CD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-CcFbAfqVYLbBjtq9i-PMHYjfNc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.multacom.com/repo/MCOMCA/1/F827056C07EA5582DB063B6AF62F8F3076237CD7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:87:88:6f:ba:36:22:e7:f9:a4:48:62:09:94:72:50:88:76:
         40:9c:20:14:d6:fa:44:f0:d9:8d:e3:df:76:83:6f:7c:63:1f:
         20:ec:a0:4b:49:ae:8a:bb:eb:35:cd:09:2e:9a:cb:e8:a3:4e:
         ea:af:10:4d:8f:78:ed:ba:74:34:24:3e:3e:80:72:e9:48:24:
         aa:08:32:bd:fa:b5:fe:aa:f2:eb:d8:ab:ef:1a:a0:2b:0e:b5:
         30:37:89:ce:7a:8d:fa:b3:99:c8:2c:ec:58:6b:73:2e:95:e6:
         11:f1:89:d6:31:67:90:c3:3d:b8:cc:d9:18:74:7f:4f:90:89:
         48:ec:b4:8f:99:a6:e0:92:d3:15:9b:b7:e2:4f:71:a5:2f:fc:
         93:40:4c:22:e3:c1:36:57:b6:f3:84:26:63:57:4d:32:9a:51:
         3e:e6:0d:38:b8:12:9e:06:b4:1d:1d:0c:fd:d2:80:d4:a3:c5:
         20:27:1f:9d:81:0b:28:3b:98:13:1c:65:2a:4a:6c:27:23:42:
         a4:a8:3b:9e:a9:9a:c7:98:d6:42:df:e5:39:f9:c1:a1:bc:5b:
         b6:68:ed:bc:e8:08:60:b2:d0:4d:2f:bb:9d:1c:84:c2:1e:bf:
         7f:78:ff:9e:ff:ab:e9:0f:ea:1d:bd:2b:8c:10:2b:07:18:ca:
         cb:75:4c:ef
-----BEGIN CERTIFICATE-----
MIIE3jCCA8agAwIBAgIUXjybDdyBI1pEgeyeuAc1K4hyOlwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZjgyNzA1NmMwN2VhNTU4MmRiMDYzYjZhZjYyZjhmMzA3
NjIzN2NkNzAeFw0yNjA1MTYwNDM1MDhaFw0yNjA1MTcwNDQ0MDhaMDMxMTAvBgNV
BAMTKEFBN0M5OTc1NkU4RDZCRkExQ0NCQzlGQzZEMUVDNTFDMEQwNzk4MTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCj+PKQzWkR7CrYhz2tayWlQMS
+I84ACZfmfoZZxk2HZOTI5s/XXVJuza6GyTdeMoE9mOTu3ykiYTo93fItOGwD8Ef
1L2jhKTHuSQGFwAlgF4nVFPohJAMQmMCF4TeppdgE0VRsSYHxI0zoMDR+lduP5eI
qwm77MHyeQa31dKvEMnMyONd1bjFRozH5+dnQ7Ky2RTJ9EQvWfH8FznjHQJih5Pa
5Sr1vLbnwCaXrR1qJwOnzTj/cZxxiLYRnQ6wbiONmAui6XzS9L3J9XYlSFQ5Ejqo
pULmXKg9J0QO/mB2JtsVi9twNFMifi1xzjnMpMoPAqeqxeRcyL0imKvWfFM1AgMB
AAGjggHoMIIB5DAdBgNVHQ4EFgQUqnyZdW6Na/ocy8n8bR7FHA0HmBAwHwYDVR0j
BBgwFoAU+CcFbAfqVYLbBjtq9i+PMHYjfNcwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud
HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraS5tdWx0YWNvbS5jb20vcmVwby9NQ09N
Q0EvMS9GODI3MDU2QzA3RUE1NTgyREIwNjNCNkFGNjJGOEYzMDc2MjM3Q0Q3LmNy
bDBlBggrBgEFBQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMS1DY0ZiQWZxVllMYkJqdHE5aS1QTUhZ
amZOYy5jZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jw
a2kubXVsdGFjb20uY29tL3JlcG8vTUNPTUNBLzEvRjgyNzA1NkMwN0VBNTU4MkRC
MDYzQjZBRjYyRjhGMzA3NjIzN0NENy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF
BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAG+HiG+6NiLn+aRIYgmU
clCIdkCcIBTW+kTw2Y3j33aDb3xjHyDsoEtJroq76zXNCS6ay+ijTuqvEE2PeO26
dDQkPj6AculIJKoIMr36tf6q8uvYq+8aoCsOtTA3ic56jfqzmcgs7Fhrcy6V5hHx
idYxZ5DDPbjM2Rh0f0+QiUjstI+ZpuCS0xWbt+JPcaUv/JNATCLjwTZXtvOEJmNX
TTKaUT7mDTi4Ep4GtB0dDP3SgNSjxSAnH52BCyg7mBMcZSpKbCcjQqSoO56pmseY
1kLf5Tn5waG8W7Zo7bzoCGCy0E0vu50chMIev394/57/q+kP6h29K4wQKwcYyst1
TO8=
-----END CERTIFICATE-----
Generated at Sat May 16 15:35:26 2026 by rpki-client