Manifest

$ rpki-client -vvf rpki.multacom.com/repo/MCOMCA/1/F827056C07EA5582DB063B6AF62F8F3076237CD7.mft
File:                     F827056C07EA5582DB063B6AF62F8F3076237CD7.mft (raw, json)
Hash identifier:          c0kY7AjBrFFjtg/BxjdkfVFb+hYbbaUuhH6lj4HqrMk=
Subject key identifier:   45:EB:76:A5:A0:C3:53:63:78:9C:35:30:D6:0D:B2:6C:E7:45:8C:16
Authority key identifier: F8:27:05:6C:07:EA:55:82:DB:06:3B:6A:F6:2F:8F:30:76:23:7C:D7
Certificate issuer:       /CN=f827056c07ea5582db063b6af62f8f3076237cd7
Certificate serial:       39C8B65FFDCD186F411B690FCB45830D0C817809
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-CcFbAfqVYLbBjtq9i-PMHYjfNc.cer
Subject info access:      rsync://rpki.multacom.com/repo/MCOMCA/1/F827056C07EA5582DB063B6AF62F8F3076237CD7.mft
Manifest number:          0962
Signing time:             Tue 01 Jul 2025 06:40:51 +0000
Manifest this update:     Tue 01 Jul 2025 06:35:51 +0000
Manifest next update:     Wed 02 Jul 2025 08:15:51 +0000
Files and hashes:         1: 3138352e37372e3232342e302f32322d3234203d3e203335393136.roa (hash: dgkLn/IDTw0/ECfrB36EoKIW6PRgJQi0AK39F8rqOJ4=)
                          2: F827056C07EA5582DB063B6AF62F8F3076237CD7.crl (hash: KVDTn406Fw7N2cICghmaXj7hQY2beWdLf45LmfdnHzE=)
Validation:               OK
Signature path:           rsync://rpki.multacom.com/repo/MCOMCA/1/F827056C07EA5582DB063B6AF62F8F3076237CD7.crl
                          rsync://rpki.multacom.com/repo/MCOMCA/1/F827056C07EA5582DB063B6AF62F8F3076237CD7.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-CcFbAfqVYLbBjtq9i-PMHYjfNc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 02 Jul 2025 08:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:c8:b6:5f:fd:cd:18:6f:41:1b:69:0f:cb:45:83:0d:0c:81:78:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f827056c07ea5582db063b6af62f8f3076237cd7
        Validity
            Not Before: Jul  1 06:35:51 2025 GMT
            Not After : Jul  2 08:15:51 2025 GMT
        Subject: CN=45EB76A5A0C35363789C3530D60DB26CE7458C16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d8:8e:02:e4:f7:aa:44:3c:15:83:0b:3f:f6:
                    ab:d7:07:d8:82:a0:f2:30:54:04:7a:81:37:cd:fb:
                    72:f6:46:ef:23:d2:fb:8f:eb:8b:fe:0f:80:e7:ac:
                    7f:bd:cf:bf:85:0f:af:f0:58:bb:50:a0:a3:cb:ed:
                    df:71:d6:86:fc:e2:aa:2f:10:ae:c5:0c:a1:a3:04:
                    0e:9b:8a:af:dd:67:2d:4c:b2:f2:07:89:13:66:0a:
                    d7:fe:df:8d:b4:89:32:00:93:dd:d4:1f:0f:c7:2f:
                    ed:df:ca:6d:bf:de:f9:66:b8:3d:90:44:c7:65:a4:
                    cf:a2:2c:69:f2:3d:3b:4e:1a:b7:7b:a4:b8:a5:7f:
                    c9:99:af:83:c3:b5:2f:5a:34:e1:0d:2f:d1:44:3e:
                    26:4f:51:6d:75:73:d8:b3:fd:a3:2e:be:c5:d7:cd:
                    62:94:d0:bb:a6:20:de:ec:94:54:26:90:9a:c4:3b:
                    33:1f:93:4d:cf:e6:47:41:d9:b7:41:b4:98:0e:e0:
                    dd:6c:a4:de:be:f6:0d:8e:9e:da:ef:e6:62:25:b8:
                    62:e5:08:fa:21:98:53:9d:45:34:c0:c2:1c:34:02:
                    50:84:3f:be:04:36:ec:4b:80:5d:1c:2c:f6:40:9c:
                    fe:79:84:16:e4:c1:4a:bc:db:06:d5:91:1c:ec:35:
                    51:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:EB:76:A5:A0:C3:53:63:78:9C:35:30:D6:0D:B2:6C:E7:45:8C:16
            X509v3 Authority Key Identifier:
                keyid:F8:27:05:6C:07:EA:55:82:DB:06:3B:6A:F6:2F:8F:30:76:23:7C:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.multacom.com/repo/MCOMCA/1/F827056C07EA5582DB063B6AF62F8F3076237CD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-CcFbAfqVYLbBjtq9i-PMHYjfNc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.multacom.com/repo/MCOMCA/1/F827056C07EA5582DB063B6AF62F8F3076237CD7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:13:f5:8e:12:a8:e2:13:d0:10:79:7d:dd:cc:32:11:8a:26:
         28:22:cf:6e:48:7d:c5:c8:44:3f:87:3b:ff:30:fa:32:0b:84:
         68:9a:b9:26:25:e3:13:63:a1:7c:13:47:9d:75:fb:0d:f7:9f:
         9a:3c:5d:7e:57:f8:5d:a3:18:86:90:b2:9d:25:71:1f:f8:20:
         2a:19:be:c6:26:ba:7e:0c:d8:97:d3:68:5e:7a:83:58:af:c3:
         9c:d2:54:ac:cd:37:70:d9:a9:eb:e8:95:07:ee:26:e6:9f:4a:
         e1:1a:aa:fb:67:51:1a:0e:ff:36:2f:d9:34:75:c5:91:ce:60:
         39:eb:2f:6d:57:28:11:03:10:d9:af:17:cb:43:3f:d8:84:a4:
         5f:a1:6f:60:c8:63:b7:45:85:4e:b2:01:18:74:df:bd:8b:91:
         e8:08:5e:fe:23:39:0c:d7:d8:a8:75:9f:a7:ba:8f:7f:de:62:
         b1:71:e9:c1:54:9c:56:8e:93:fe:5f:1f:13:45:0c:56:d3:e3:
         9c:03:8c:a9:8b:2a:d8:07:9c:ab:ad:60:8c:f9:5c:d7:39:fb:
         df:d0:07:ba:89:85:97:b8:7f:5a:6c:41:71:35:e8:f2:de:d4:
         e4:bf:5c:76:25:d2:67:8e:37:00:99:35:5b:b3:e9:ab:95:a0:
         25:9a:2d:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 13:11:53 2025 by rpki-client