Manifest

$ rpki-client -vvf rpki.multacom.com/repo/MCOMCA/1/F827056C07EA5582DB063B6AF62F8F3076237CD7.mft
File:                     F827056C07EA5582DB063B6AF62F8F3076237CD7.mft (raw, json)
Hash identifier:          ZdMsBmnPo/QVliAQ16On+5xXcv42YUPwe83rd5YaqsA=
Subject key identifier:   C1:8C:23:6C:14:16:E0:86:33:8A:47:3C:28:81:00:D1:77:88:B9:BC
Authority key identifier: F8:27:05:6C:07:EA:55:82:DB:06:3B:6A:F6:2F:8F:30:76:23:7C:D7
Certificate issuer:       /CN=f827056c07ea5582db063b6af62f8f3076237cd7
Certificate serial:       59BF6FF4FDEF81420F77D16D958A1A340FF9C555
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-CcFbAfqVYLbBjtq9i-PMHYjfNc.cer
Subject info access:      rsync://rpki.multacom.com/repo/MCOMCA/1/F827056C07EA5582DB063B6AF62F8F3076237CD7.mft
Manifest number:          091E
Signing time:             Sat 10 May 2025 19:19:49 +0000
Manifest this update:     Sat 10 May 2025 19:14:49 +0000
Manifest next update:     Sun 11 May 2025 22:57:49 +0000
Files and hashes:         1: F827056C07EA5582DB063B6AF62F8F3076237CD7.crl (hash: jVxxOgJBisP8eZE0JxF3J8Hkb2sWKhVmXAdRGiBg2Js=)
                          2: 3138352e37372e3232342e302f32322d3234203d3e203335393136.roa (hash: dgkLn/IDTw0/ECfrB36EoKIW6PRgJQi0AK39F8rqOJ4=)
Validation:               OK
Signature path:           rsync://rpki.multacom.com/repo/MCOMCA/1/F827056C07EA5582DB063B6AF62F8F3076237CD7.crl
                          rsync://rpki.multacom.com/repo/MCOMCA/1/F827056C07EA5582DB063B6AF62F8F3076237CD7.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-CcFbAfqVYLbBjtq9i-PMHYjfNc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 22:57:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:bf:6f:f4:fd:ef:81:42:0f:77:d1:6d:95:8a:1a:34:0f:f9:c5:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f827056c07ea5582db063b6af62f8f3076237cd7
        Validity
            Not Before: May 10 19:14:49 2025 GMT
            Not After : May 11 22:57:49 2025 GMT
        Subject: CN=C18C236C1416E086338A473C288100D17788B9BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:40:11:e7:c4:bb:49:60:66:76:bd:69:aa:45:
                    71:4f:8f:ae:cd:0f:e7:0a:f3:1e:c3:9c:67:fd:a1:
                    7d:4f:0c:ab:66:69:46:64:fd:ca:2d:e5:c5:5b:e1:
                    b3:6a:fe:eb:00:7a:2e:33:1c:c0:4e:1b:37:91:a6:
                    98:e7:c8:20:2b:b6:67:11:9d:fd:c0:c7:32:e4:0d:
                    09:fe:35:4c:54:11:4c:de:1d:16:38:ee:7a:f0:38:
                    9c:d3:88:9d:e0:0c:c9:9a:52:e5:2d:68:71:73:de:
                    36:ab:f9:c2:3b:00:ae:27:5c:0d:76:b9:bb:2e:f0:
                    f3:4d:90:a9:1f:3e:66:68:a8:eb:34:e0:f4:c4:5d:
                    ac:b0:ff:a9:05:1d:6c:41:25:25:1f:96:a4:b8:35:
                    63:48:01:53:74:50:3d:c3:d0:7f:60:b8:3f:8a:59:
                    51:f8:c5:2c:70:c3:9b:6f:7e:80:61:0a:86:38:41:
                    44:d3:bb:8a:41:41:26:f9:ff:e2:8c:79:30:f8:55:
                    8b:2d:ca:d7:37:ad:5e:fb:91:7c:d1:36:f1:f1:03:
                    f2:d1:b0:bc:71:14:b8:41:49:06:a0:c5:36:b5:e8:
                    f3:88:f2:0f:a6:d8:d9:85:12:c4:0e:ac:b9:23:55:
                    9b:17:03:31:5d:f5:45:9e:b2:b1:01:0f:cb:59:40:
                    50:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:8C:23:6C:14:16:E0:86:33:8A:47:3C:28:81:00:D1:77:88:B9:BC
            X509v3 Authority Key Identifier:
                keyid:F8:27:05:6C:07:EA:55:82:DB:06:3B:6A:F6:2F:8F:30:76:23:7C:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.multacom.com/repo/MCOMCA/1/F827056C07EA5582DB063B6AF62F8F3076237CD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-CcFbAfqVYLbBjtq9i-PMHYjfNc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.multacom.com/repo/MCOMCA/1/F827056C07EA5582DB063B6AF62F8F3076237CD7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:de:39:60:ea:08:9c:ba:44:23:ef:a1:9c:4f:40:bc:ee:3b:
         c6:1d:66:df:bd:75:24:ba:81:fc:35:63:0d:84:98:4f:99:f8:
         c4:3c:9b:a1:14:81:39:d9:4f:c7:89:b9:58:66:a4:9c:39:9b:
         34:01:c1:91:62:ef:f2:1e:24:a3:59:49:79:55:11:cf:04:78:
         02:70:a4:a2:22:91:c7:8c:29:64:98:b6:0c:7a:98:01:7e:23:
         a3:fb:b0:04:d3:6d:43:7c:fd:e1:89:79:e7:8a:f9:ad:97:cb:
         06:e6:34:67:f6:5a:0b:91:1a:15:6c:e5:f7:53:17:f7:ba:c5:
         80:48:b4:e0:de:70:74:ea:00:f4:0a:fe:de:ba:12:f8:29:f0:
         fa:26:54:5c:56:53:04:e5:90:52:84:3d:e2:34:e1:85:44:3c:
         30:7b:0e:fd:7a:07:51:c7:23:ae:48:ef:2f:4f:d5:6c:71:85:
         3e:21:1c:87:21:c0:d0:d5:b2:b6:7b:67:d5:b9:3f:bd:1f:f1:
         3f:ff:13:29:ac:f9:66:83:43:72:74:7e:ae:15:e1:78:18:3c:
         03:5b:7f:1b:70:45:7b:93:d2:16:25:5c:db:10:a4:6a:8d:3d:
         52:70:10:39:d4:0b:61:78:91:84:cf:eb:26:b5:c1:b9:98:bc:
         d2:63:f8:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 09:03:55 2025 by rpki-client