Manifest

$ rpki-client -vvf krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft
File:                     80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft (raw, json)
Hash identifier:          uw5XqBLK0K9FlsP4NV4sG9mLTeYgxMjv0QIvDSpIshI=
Subject key identifier:   13:CC:13:34:C8:8D:8F:2B:B9:42:27:8E:91:63:6C:63:DC:B6:11:2D
Authority key identifier: 80:E4:4F:09:FF:20:1C:B2:BC:67:B1:6D:49:0F:7A:6D:10:CD:9D:F1
Certificate issuer:       /CN=80e44f09ff201cb2bc67b16d490f7a6d10cd9df1
Certificate serial:       6CF4AA00EFAC8605DD57CEEF71E93AA07BBB629F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gORPCf8gHLK8Z7FtSQ96bRDNnfE.cer
Subject info access:      rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft
Manifest number:          065C
Signing time:             Sun 10 May 2026 09:08:19 +0000
Manifest this update:     Sun 10 May 2026 09:03:19 +0000
Manifest next update:     Mon 11 May 2026 10:02:19 +0000
Files and hashes:         1: AS212934.asa (hash: 53XShpJ+NB5sf3EXMo5SBl7pYHowfGvfOlp+2zWjCfE=)
                          2: 80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.crl (hash: jUU+Xy/k5vF+nNMV6EKV8jGXZ5KlpjIIpnTh4iWx6XE=)
Validation:               OK
Signature path:           rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.crl
                          rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gORPCf8gHLK8Z7FtSQ96bRDNnfE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 May 2026 10:02:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:f4:aa:00:ef:ac:86:05:dd:57:ce:ef:71:e9:3a:a0:7b:bb:62:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80e44f09ff201cb2bc67b16d490f7a6d10cd9df1
        Validity
            Not Before: May 10 09:03:19 2026 GMT
            Not After : May 11 10:02:19 2026 GMT
        Subject: CN=13CC1334C88D8F2BB942278E91636C63DCB6112D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:af:6a:3a:a6:5f:35:36:e7:84:06:d7:54:6d:
                    18:42:94:99:b3:f7:cf:88:e0:6e:a5:e6:38:a8:01:
                    ee:a7:6b:c0:71:f8:0e:3e:f7:ee:f9:c0:78:0b:1f:
                    cc:ae:5e:6b:5a:66:98:08:9d:2a:17:63:54:4b:9c:
                    c8:cf:bb:f9:4a:5a:0f:27:9d:8a:58:05:f2:d7:da:
                    0b:ab:ad:1a:2d:77:8d:f7:94:c5:63:55:9e:81:58:
                    31:f7:36:22:c8:d7:1b:94:46:eb:bb:11:1b:2e:d2:
                    a9:2b:97:e0:3e:53:a4:9b:bf:16:59:6f:2a:91:e6:
                    e8:08:d7:60:2b:c8:a0:88:2b:16:30:0b:b0:c9:7d:
                    85:b5:e9:e9:3b:e3:ab:8b:fe:e7:4a:cb:fb:55:26:
                    22:1a:8e:70:bb:d0:6c:cc:3f:94:b9:70:7d:8c:3e:
                    78:a7:ac:01:d3:d6:b7:92:d5:e7:13:b8:ac:0f:c3:
                    e8:6b:d5:a4:61:28:4a:e0:88:5a:9d:07:19:bc:77:
                    6c:aa:e0:e6:d5:5d:03:53:49:3e:30:99:af:2e:2d:
                    f7:5e:1d:1c:19:f9:7f:e7:5e:18:86:32:a3:23:aa:
                    00:59:5e:7d:51:7c:ae:61:34:4b:92:3c:34:84:19:
                    9f:85:05:40:5b:e0:c1:d3:c5:0e:cf:c5:95:42:29:
                    b6:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:CC:13:34:C8:8D:8F:2B:B9:42:27:8E:91:63:6C:63:DC:B6:11:2D
            X509v3 Authority Key Identifier:
                keyid:80:E4:4F:09:FF:20:1C:B2:BC:67:B1:6D:49:0F:7A:6D:10:CD:9D:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gORPCf8gHLK8Z7FtSQ96bRDNnfE.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ec:c2:9d:93:28:8f:a4:16:bb:4f:ba:97:b7:db:73:48:cc:a4:
         9f:f9:85:c6:f8:d0:1a:fa:e9:03:cb:e7:60:93:e6:c2:94:04:
         e6:72:3a:27:2b:67:5a:0a:c0:6c:83:24:5a:55:55:c7:73:44:
         09:7e:f2:74:be:ad:e0:20:a5:c1:79:4c:6f:f8:82:21:85:81:
         94:54:e1:48:a0:8b:57:df:6e:8a:65:2f:bb:fa:d4:6f:17:18:
         11:de:c4:41:f5:eb:e9:83:62:ff:73:40:62:4e:05:01:6a:0c:
         bf:38:33:fa:2d:f9:25:f7:d7:05:84:c2:96:9c:2e:6e:ae:65:
         b7:43:53:47:22:41:65:27:41:a7:5e:25:19:eb:5a:49:90:28:
         aa:d9:81:67:17:15:9c:16:6d:d9:47:ed:4b:9c:99:59:89:fa:
         41:8c:af:13:54:32:a7:c9:08:7a:f9:ad:4a:13:6c:ab:75:36:
         6c:63:d1:6c:8b:33:9d:9d:0e:b1:c5:e2:7f:02:44:19:28:9f:
         87:ce:75:3e:0a:5b:f2:1c:2a:c5:1a:dd:e1:28:a6:cc:2b:f0:
         8f:ae:5f:fd:35:5f:dd:41:53:35:9e:b6:aa:88:2f:0d:6c:a9:
         a0:2e:d3:2c:95:79:f1:35:f5:76:34:d1:23:b3:9c:33:df:8c:
         eb:1b:7f:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 10 17:58:21 2026 by rpki-client