Manifest

$ rpki-client -vvf rpki.multacom.com/repo/MCOMCA/1/F827056C07EA5582DB063B6AF62F8F3076237CD7.mft
File:                     F827056C07EA5582DB063B6AF62F8F3076237CD7.mft (raw, json)
Hash identifier:          NtcUAQfmNHJWZuVk0xuYYmPEg8r8naVARY/+xu5weng=
Subject key identifier:   2A:A7:E4:F8:48:EE:7A:18:6A:15:4F:28:AD:33:D4:C9:25:E9:BB:5B
Authority key identifier: F8:27:05:6C:07:EA:55:82:DB:06:3B:6A:F6:2F:8F:30:76:23:7C:D7
Certificate issuer:       /CN=f827056c07ea5582db063b6af62f8f3076237cd7
Certificate serial:       2A102FFC30060633FC8CD7E2E5A596B92C00BE1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-CcFbAfqVYLbBjtq9i-PMHYjfNc.cer
Subject info access:      rsync://rpki.multacom.com/repo/MCOMCA/1/F827056C07EA5582DB063B6AF62F8F3076237CD7.mft
Manifest number:          0AE4
Signing time:             Fri 17 Apr 2026 03:32:00 +0000
Manifest this update:     Fri 17 Apr 2026 03:27:00 +0000
Manifest next update:     Sat 18 Apr 2026 05:36:00 +0000
Files and hashes:         1: F827056C07EA5582DB063B6AF62F8F3076237CD7.crl (hash: KRg9VCr+3iErMYGC1MdqQqKthruvZi47glsN2aT6c3M=)
                          2: 3138352e37372e3232342e302f32322d3234203d3e203335393136.roa (hash: 8gWLg8Th9wmqQpUsrE3rnTGXsfsUBsQHJFqgwdfcIv8=)
Validation:               OK
Signature path:           rsync://rpki.multacom.com/repo/MCOMCA/1/F827056C07EA5582DB063B6AF62F8F3076237CD7.crl
                          rsync://rpki.multacom.com/repo/MCOMCA/1/F827056C07EA5582DB063B6AF62F8F3076237CD7.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-CcFbAfqVYLbBjtq9i-PMHYjfNc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:10:2f:fc:30:06:06:33:fc:8c:d7:e2:e5:a5:96:b9:2c:00:be:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f827056c07ea5582db063b6af62f8f3076237cd7
        Validity
            Not Before: Apr 17 03:27:00 2026 GMT
            Not After : Apr 18 05:36:00 2026 GMT
        Subject: CN=2AA7E4F848EE7A186A154F28AD33D4C925E9BB5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:39:2f:a0:32:2c:cd:95:8f:d4:3f:df:77:d3:
                    97:8b:ef:d6:be:46:8d:cb:d0:8f:59:4d:23:e1:c5:
                    d3:34:26:bf:d2:fd:9e:58:be:4d:54:6d:d8:fe:ff:
                    d4:6d:97:67:59:2f:de:55:1a:e3:95:a6:9d:7c:9b:
                    f3:13:76:59:27:70:bf:a5:02:24:c6:ec:39:73:65:
                    e7:9e:f0:d6:05:28:10:41:15:db:5f:6e:64:a3:ee:
                    f2:da:92:e1:09:ef:03:2c:85:9b:15:50:98:c3:2d:
                    84:ed:10:0a:eb:1c:cd:e1:79:41:bb:3a:3b:39:b1:
                    a9:7d:88:a9:af:fc:2d:cc:29:52:fe:5a:54:f7:d2:
                    fa:ed:20:ae:4b:71:11:53:87:87:fc:e6:04:f2:67:
                    2d:f8:1d:c6:bb:77:24:d5:7e:56:ab:08:9d:0f:c9:
                    4f:f0:e6:03:b9:8f:05:7e:e6:26:de:d2:ab:18:89:
                    b7:a8:3f:6f:ea:01:63:fa:05:bd:ac:73:67:da:f6:
                    c4:1f:b0:cc:5b:08:57:62:37:1e:89:7e:eb:42:81:
                    1f:9e:99:32:76:7f:1a:88:72:bc:a0:1b:d6:61:db:
                    4d:84:e7:b9:d1:43:0d:74:45:66:b7:9e:3c:1b:c0:
                    a6:aa:12:7f:a1:cd:f1:bd:e1:63:93:2f:bb:dd:39:
                    d6:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:A7:E4:F8:48:EE:7A:18:6A:15:4F:28:AD:33:D4:C9:25:E9:BB:5B
            X509v3 Authority Key Identifier:
                keyid:F8:27:05:6C:07:EA:55:82:DB:06:3B:6A:F6:2F:8F:30:76:23:7C:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.multacom.com/repo/MCOMCA/1/F827056C07EA5582DB063B6AF62F8F3076237CD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-CcFbAfqVYLbBjtq9i-PMHYjfNc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.multacom.com/repo/MCOMCA/1/F827056C07EA5582DB063B6AF62F8F3076237CD7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:c6:b4:4d:53:9b:f0:17:37:45:5a:db:f1:88:ab:e0:d8:38:
         dc:e9:2e:bd:fb:d2:50:ed:8c:3b:28:96:6c:dd:ab:64:df:fa:
         25:a1:ce:b4:82:be:01:02:a9:85:22:1f:19:8b:6f:cb:c0:52:
         29:0f:f3:4f:81:3e:9d:a7:b8:76:7f:cb:50:96:6e:63:37:4a:
         0d:ff:17:87:30:34:7c:de:4b:31:4a:b3:92:3f:18:23:d3:33:
         97:ba:94:4a:fc:14:be:16:f7:27:6f:08:55:51:56:6f:d3:d2:
         6a:ce:32:48:b9:e0:5b:7e:3b:60:a7:bf:8a:7b:1b:25:48:20:
         56:5b:3a:dc:f1:ec:99:c4:20:8a:cb:9a:99:d1:7f:35:6e:75:
         93:a0:82:2f:b4:10:c4:80:8e:6c:c4:f2:84:98:9b:e3:96:04:
         87:7c:08:ea:11:2d:b6:da:c6:42:cc:0b:0e:b5:13:b2:60:33:
         0c:8d:e3:3a:ad:7d:82:65:a0:4f:7f:f6:9e:fd:16:f9:f7:cc:
         36:bd:90:8a:e7:31:e4:88:d9:2f:33:f7:1f:45:63:ac:4b:c5:
         b9:54:5b:f4:f8:19:a3:49:bd:19:fb:c0:95:85:84:7c:6e:40:
         ce:5e:e9:7e:f2:f7:1c:1a:48:80:24:c9:18:23:3d:a6:fc:6e:
         f0:f2:fe:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:05:48 2026 by rpki-client