Manifest

$ rpki-client -vvf krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft
File:                     80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft (raw, json)
Hash identifier:          R8oXM9AlZnbrtlGNY8EivRyhdTKhqDONb3TIhdCfOJ0=
Subject key identifier:   B2:6D:4D:46:C2:AF:A6:EA:E1:0E:7F:24:F3:1E:A6:3D:D1:92:B0:C5
Authority key identifier: 80:E4:4F:09:FF:20:1C:B2:BC:67:B1:6D:49:0F:7A:6D:10:CD:9D:F1
Certificate issuer:       /CN=80e44f09ff201cb2bc67b16d490f7a6d10cd9df1
Certificate serial:       2E531745F2D26A6F1C4A41ED4E7F7E021362DA80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gORPCf8gHLK8Z7FtSQ96bRDNnfE.cer
Subject info access:      rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft
Manifest number:          05F1
Signing time:             Tue 10 Mar 2026 14:37:02 +0000
Manifest this update:     Tue 10 Mar 2026 14:32:02 +0000
Manifest next update:     Wed 11 Mar 2026 17:22:02 +0000
Files and hashes:         1: AS212934.asa (hash: 53XShpJ+NB5sf3EXMo5SBl7pYHowfGvfOlp+2zWjCfE=)
                          2: 80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.crl (hash: xy9e5VuDEOrOXPqZXDuYJewTEHwNUo6NQyGRGVFPXDk=)
Validation:               OK
Signature path:           rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.crl
                          rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gORPCf8gHLK8Z7FtSQ96bRDNnfE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Mar 2026 17:22:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:53:17:45:f2:d2:6a:6f:1c:4a:41:ed:4e:7f:7e:02:13:62:da:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80e44f09ff201cb2bc67b16d490f7a6d10cd9df1
        Validity
            Not Before: Mar 10 14:32:02 2026 GMT
            Not After : Mar 11 17:22:02 2026 GMT
        Subject: CN=B26D4D46C2AFA6EAE10E7F24F31EA63DD192B0C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:35:d8:63:50:de:72:85:db:1f:da:57:a2:25:
                    2e:56:79:1c:ff:18:32:b3:ae:0f:0d:e4:bb:6d:b2:
                    d7:ee:0a:a5:44:31:2e:4c:66:4a:b2:92:f3:1b:3a:
                    c5:9a:7e:97:99:c2:c7:c7:bc:36:2d:ce:55:15:0f:
                    2b:15:fe:43:46:a5:ce:e7:89:bf:88:da:2f:3f:96:
                    73:e9:06:4f:cb:cf:24:c4:fa:a6:bb:31:b3:61:d8:
                    87:a9:e5:a8:27:c3:c8:b9:1d:51:89:cb:3f:45:a8:
                    62:6d:ed:4c:21:ba:22:42:38:c7:6c:f7:bd:15:7d:
                    fd:c6:5d:80:5f:6c:55:89:b8:d0:87:29:44:3b:ad:
                    3f:18:e1:c8:b7:6a:43:c8:c0:04:ad:af:66:d4:36:
                    56:a1:0f:e3:4e:14:6f:62:4a:52:c7:ca:74:53:31:
                    a9:06:5d:f9:f9:c5:7c:ce:18:3e:4a:01:20:06:65:
                    cc:68:ea:94:94:0a:a6:a2:8d:56:36:ac:20:57:fb:
                    52:bf:3e:e6:f3:74:0e:2d:21:68:3c:78:49:b7:5d:
                    08:ae:8d:7a:aa:ac:4d:58:8d:b5:ce:75:8d:18:33:
                    ed:ac:ab:4f:88:9f:f4:75:f5:6f:54:11:95:d2:f6:
                    0e:8a:bb:6d:be:83:e0:77:e9:45:b0:78:9c:49:4d:
                    a8:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:6D:4D:46:C2:AF:A6:EA:E1:0E:7F:24:F3:1E:A6:3D:D1:92:B0:C5
            X509v3 Authority Key Identifier:
                keyid:80:E4:4F:09:FF:20:1C:B2:BC:67:B1:6D:49:0F:7A:6D:10:CD:9D:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gORPCf8gHLK8Z7FtSQ96bRDNnfE.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:23:9a:16:cd:16:5f:f3:33:61:b4:12:69:2f:56:bc:1a:88:
         98:ee:1e:44:bd:0c:cd:6e:36:b3:a5:a6:80:0c:52:db:11:d0:
         02:3b:9b:da:83:4e:04:66:b7:0b:39:c2:ed:52:cf:98:de:84:
         73:3f:3a:60:42:d8:64:3a:d2:1e:c0:29:e3:fb:a5:5d:91:02:
         bb:ba:2e:e4:a8:71:71:d5:66:bc:62:c8:1b:42:0d:3d:49:5a:
         2f:d5:87:52:e0:28:54:8e:ea:dc:26:eb:bc:a3:ed:91:a6:b9:
         30:28:c6:3b:27:09:a3:e4:2a:26:98:c7:e0:93:95:dd:77:dd:
         03:de:7f:c2:bc:8e:4a:5c:98:e4:21:89:c2:ae:19:a5:18:0a:
         8b:b7:a3:37:b5:af:06:99:14:99:95:1c:c3:c5:0f:69:aa:1b:
         a6:8f:91:ea:f9:f8:9f:63:46:e2:d4:ae:f1:15:2a:0a:fc:0b:
         7d:fb:d4:2b:68:b0:74:16:a7:f8:b1:c2:12:0d:59:49:22:42:
         7e:10:a0:be:27:07:52:c8:e3:56:42:bf:01:00:b2:3b:a2:1e:
         bf:77:33:b5:32:09:ec:85:6e:e1:7a:10:1a:40:8e:00:f9:1d:
         d0:ef:44:98:ca:0a:a3:e7:92:1c:be:5c:31:e5:85:9b:6e:01:
         ce:87:61:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 11 09:16:45 2026 by rpki-client