Manifest

$ rpki-client -vvf krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft
File:                     80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft (raw, json)
Hash identifier:          f6z3xcyReTlqCRLebif3cEDymGtP81MDcmrMdyhJexE=
Subject key identifier:   5E:CA:45:2D:C6:58:25:82:91:10:95:96:C6:9B:9E:C5:2B:FB:C6:0E
Authority key identifier: 80:E4:4F:09:FF:20:1C:B2:BC:67:B1:6D:49:0F:7A:6D:10:CD:9D:F1
Certificate issuer:       /CN=80e44f09ff201cb2bc67b16d490f7a6d10cd9df1
Certificate serial:       60B23014AC136D017426C6A5553800589CFCC65D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gORPCf8gHLK8Z7FtSQ96bRDNnfE.cer
Subject info access:      rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft
Manifest number:          05DF
Signing time:             Tue 24 Feb 2026 20:06:44 +0000
Manifest this update:     Tue 24 Feb 2026 20:01:44 +0000
Manifest next update:     Wed 25 Feb 2026 21:38:44 +0000
Files and hashes:         1: AS212934.asa (hash: 53XShpJ+NB5sf3EXMo5SBl7pYHowfGvfOlp+2zWjCfE=)
                          2: 80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.crl (hash: hZMmaNg5LtN6w3sNDmOoBDeOHWFbmdlXQPjSDMSq5Lo=)
Validation:               OK
Signature path:           rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.crl
                          rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gORPCf8gHLK8Z7FtSQ96bRDNnfE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 25 Feb 2026 15:37:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:b2:30:14:ac:13:6d:01:74:26:c6:a5:55:38:00:58:9c:fc:c6:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80e44f09ff201cb2bc67b16d490f7a6d10cd9df1
        Validity
            Not Before: Feb 24 20:01:44 2026 GMT
            Not After : Feb 25 21:38:44 2026 GMT
        Subject: CN=5ECA452DC658258291109596C69B9EC52BFBC60E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:85:dc:3d:59:7f:ab:25:64:f6:63:97:5d:c6:
                    17:e2:59:ae:44:0e:ee:d7:ed:96:3a:68:dd:d6:80:
                    4e:53:b6:e8:51:69:75:f3:58:d3:58:b7:94:bd:dc:
                    7f:cc:a3:f1:ae:95:a2:e6:93:1f:ce:ef:4b:f5:d8:
                    3c:fe:b1:a6:2b:ae:cb:ee:73:25:4c:23:55:f5:34:
                    d3:a6:17:5d:aa:39:b2:1c:29:4d:43:67:13:19:af:
                    cc:0f:31:f3:9f:fe:00:11:1f:5a:56:83:63:ab:97:
                    fd:ca:1d:dc:68:88:7e:f0:97:bd:d6:b0:c4:96:cd:
                    f7:2f:e7:61:62:36:b9:b6:05:8a:9c:84:c5:87:82:
                    04:77:8c:a3:ec:1c:97:a4:4d:58:8d:25:41:98:ed:
                    c3:c3:8c:70:50:ab:49:a2:47:75:94:d2:92:8a:3e:
                    07:db:00:94:97:cb:cf:9e:2c:88:ce:d8:1e:f9:e3:
                    02:78:9c:69:81:f5:99:9e:92:90:57:09:97:63:0d:
                    8a:ff:77:7b:fc:67:f7:e1:00:7b:60:51:bd:92:6b:
                    7d:d9:e8:9b:92:db:bb:eb:c8:0b:c4:23:c0:51:45:
                    4a:0e:94:c6:10:50:7d:3e:df:3f:10:93:6c:18:0d:
                    d8:64:3f:60:d0:3f:67:bd:37:23:63:10:a2:01:62:
                    dc:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:CA:45:2D:C6:58:25:82:91:10:95:96:C6:9B:9E:C5:2B:FB:C6:0E
            X509v3 Authority Key Identifier:
                keyid:80:E4:4F:09:FF:20:1C:B2:BC:67:B1:6D:49:0F:7A:6D:10:CD:9D:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gORPCf8gHLK8Z7FtSQ96bRDNnfE.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:0e:d3:3d:3a:67:04:08:9f:5d:7b:c1:51:7c:9b:fc:ce:87:
         d2:4e:3a:bb:35:b7:77:5d:5b:85:06:4a:ff:6d:6d:20:ba:37:
         19:81:f4:83:74:1d:ec:8e:83:d4:9f:74:9e:a3:aa:0a:ed:15:
         75:6a:2b:81:0d:c5:15:a8:65:fa:78:30:39:56:39:4b:38:5d:
         4f:1d:84:48:46:18:bc:94:07:ad:58:84:30:69:ea:6f:01:d2:
         f3:2c:2e:9b:57:01:58:77:08:5a:2a:bd:b9:fb:11:c3:10:59:
         db:34:fe:3c:50:dd:ec:fc:29:63:99:ff:0b:50:30:22:48:27:
         ab:86:c8:d1:93:c3:3c:d1:25:25:23:f8:6a:42:52:f7:d2:c8:
         60:fb:79:f7:6a:fb:a7:29:e2:aa:59:66:15:f2:26:54:12:39:
         51:97:32:3f:7a:34:7d:ea:1f:f1:14:86:54:3a:f5:0b:4d:25:
         7c:6f:15:8a:0e:72:51:50:82:60:1a:7a:0e:4b:3d:d2:e9:10:
         5f:2a:18:ea:e8:db:a5:9d:ba:f8:d0:1d:cc:3d:9e:59:ff:7c:
         c5:07:6c:17:a1:5b:af:10:57:c0:c6:75:bc:2a:c6:25:18:33:
         a2:42:5f:ba:4c:e2:27:78:a7:1b:97:29:0f:c4:18:5d:b2:c0:
         09:e4:40:31
-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgIUYLIwFKwTbQF0JsalVTgAWJz8xl0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODBlNDRmMDlmZjIwMWNiMmJjNjdiMTZkNDkwZjdhNmQx
MGNkOWRmMTAeFw0yNjAyMjQyMDAxNDRaFw0yNjAyMjUyMTM4NDRaMDMxMTAvBgNV
BAMTKDVFQ0E0NTJEQzY1ODI1ODI5MTEwOTU5NkM2OUI5RUM1MkJGQkM2MEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5hdw9WX+rJWT2Y5ddxhfiWa5E
Du7X7ZY6aN3WgE5TtuhRaXXzWNNYt5S93H/Mo/GulaLmkx/O70v12Dz+saYrrsvu
cyVMI1X1NNOmF12qObIcKU1DZxMZr8wPMfOf/gARH1pWg2Orl/3KHdxoiH7wl73W
sMSWzfcv52FiNrm2BYqchMWHggR3jKPsHJekTViNJUGY7cPDjHBQq0miR3WU0pKK
PgfbAJSXy8+eLIjO2B754wJ4nGmB9ZmekpBXCZdjDYr/d3v8Z/fhAHtgUb2Sa33Z
6JuS27vryAvEI8BRRUoOlMYQUH0+3z8Qk2wYDdhkP2DQP2e9NyNjEKIBYtxBAgMB
AAGjggIaMIICFjAdBgNVHQ4EFgQUXspFLcZYJYKREJWWxpuexSv7xg4wHwYDVR0j
BBgwFoAUgORPCf8gHLK8Z7FtSQ96bRDNnfEwDgYDVR0PAQH/BAQDAgeAMH4GA1Ud
HwR3MHUwc6BxoG+GbXJzeW5jOi8va3JpbGwuYWNjdXJpc3RlY2hub2xvZ2llcy5j
YS9yZXBvL0FjY3VyaXMtVGVjaG5vbG9naWVzLzMvODBFNDRGMDlGRjIwMUNCMkJD
NjdCMTZENDkwRjdBNkQxMENEOURGMS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2dPUlBDZjhnSExLOFo3RnRTUTk2YlJETm5mRS5jZXIwgYkGCCsGAQUFBwELBH0w
ezB5BggrBgEFBQcwC4ZtcnN5bmM6Ly9rcmlsbC5hY2N1cmlzdGVjaG5vbG9naWVz
LmNhL3JlcG8vQWNjdXJpcy1UZWNobm9sb2dpZXMvMy84MEU0NEYwOUZGMjAxQ0Iy
QkM2N0IxNkQ0OTBGN0E2RDEwQ0Q5REYxLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG
AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhg7TPTpnBAifXXvB
UXyb/M6H0k46uzW3d11bhQZK/21tILo3GYH0g3Qd7I6D1J90nqOqCu0VdWorgQ3F
Fahl+ngwOVY5SzhdTx2ESEYYvJQHrViEMGnqbwHS8ywum1cBWHcIWiq9ufsRwxBZ
2zT+PFDd7PwpY5n/C1AwIkgnq4bI0ZPDPNElJSP4akJS99LIYPt592r7pyniqllm
FfImVBI5UZcyP3o0feof8RSGVDr1C00lfG8Vig5yUVCCYBp6Dks90ukQXyoY6ujb
pZ26+NAdzD2eWf98xQdsF6FbrxBXwMZ1vCrGJRgzokJfukziJ3inG5cpD8QYXbLA
CeRAMQ==
-----END CERTIFICATE-----
Generated at Tue Feb 24 21:10:29 2026 by rpki-client