Manifest

$ rpki-client -vvf krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft
File:                     80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft (raw, json)
Hash identifier:          +govsdEQH9ZF2LeN8caGOU5eGTUbKx2y9CuhBZHj/94=
Subject key identifier:   21:D5:55:F9:18:DB:7A:18:28:5C:DC:FE:3B:D2:5B:54:94:CE:AB:73
Authority key identifier: 80:E4:4F:09:FF:20:1C:B2:BC:67:B1:6D:49:0F:7A:6D:10:CD:9D:F1
Certificate issuer:       /CN=80e44f09ff201cb2bc67b16d490f7a6d10cd9df1
Certificate serial:       4D29ED6E9CE24ADEAB685557AD1D322C10FAB6A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gORPCf8gHLK8Z7FtSQ96bRDNnfE.cer
Subject info access:      rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft
Manifest number:          0643
Signing time:             Mon 27 Apr 2026 16:48:13 +0000
Manifest this update:     Mon 27 Apr 2026 16:43:13 +0000
Manifest next update:     Tue 28 Apr 2026 19:52:13 +0000
Files and hashes:         1: AS212934.asa (hash: 53XShpJ+NB5sf3EXMo5SBl7pYHowfGvfOlp+2zWjCfE=)
                          2: 80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.crl (hash: GO7/iXvX7KusHynyUYGYBrJQD9UP3TtFW+jAGuZDH2g=)
Validation:               OK
Signature path:           rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.crl
                          rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gORPCf8gHLK8Z7FtSQ96bRDNnfE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Apr 2026 19:52:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:29:ed:6e:9c:e2:4a:de:ab:68:55:57:ad:1d:32:2c:10:fa:b6:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80e44f09ff201cb2bc67b16d490f7a6d10cd9df1
        Validity
            Not Before: Apr 27 16:43:13 2026 GMT
            Not After : Apr 28 19:52:13 2026 GMT
        Subject: CN=21D555F918DB7A18285CDCFE3BD25B5494CEAB73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:1f:86:2e:67:a6:e6:24:1a:22:76:9c:75:f7:
                    21:8e:d9:a0:aa:d3:9a:c9:7c:02:3f:26:14:ce:f7:
                    68:a2:f8:4b:4c:1e:5d:c6:c4:3e:0d:cf:25:33:ca:
                    ac:81:ef:2e:cc:44:d1:47:66:0f:63:61:c4:2a:6f:
                    15:90:05:84:8d:ce:a2:85:a6:a0:01:f3:26:7a:44:
                    af:0e:2f:3d:9d:d3:e8:0e:52:83:ea:b7:30:3a:aa:
                    ae:47:f0:17:05:c1:05:63:f9:37:0f:18:a6:70:64:
                    7e:e0:90:76:e0:80:a4:70:cd:43:ea:58:31:f9:88:
                    4a:a1:cb:81:5c:58:a2:86:88:a7:dd:35:82:76:fc:
                    a1:78:81:e2:b9:55:23:1f:e2:e5:03:55:fc:c9:f0:
                    af:81:29:74:85:59:8e:53:17:68:81:ab:67:4f:07:
                    42:3c:0b:a9:b6:06:76:da:2c:4a:bc:54:7e:fe:7e:
                    1d:46:5f:06:bf:ca:60:c8:14:82:e1:ce:c1:a9:48:
                    71:21:39:06:af:c7:c6:76:c1:40:b3:27:ba:1c:10:
                    2e:c9:f1:e3:12:3f:e6:a9:71:4a:fc:16:82:e4:0f:
                    d3:58:df:72:a0:a0:30:6c:db:f1:d3:d0:c3:46:ec:
                    08:01:d5:5a:2b:be:f5:09:08:43:58:2a:b0:69:eb:
                    86:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:D5:55:F9:18:DB:7A:18:28:5C:DC:FE:3B:D2:5B:54:94:CE:AB:73
            X509v3 Authority Key Identifier:
                keyid:80:E4:4F:09:FF:20:1C:B2:BC:67:B1:6D:49:0F:7A:6D:10:CD:9D:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gORPCf8gHLK8Z7FtSQ96bRDNnfE.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:cb:4b:db:d1:1a:1b:63:cd:db:f5:0d:f8:c6:f4:a4:73:9b:
         8f:4b:77:6e:96:b8:cd:6b:f4:26:ea:7b:2a:a3:38:85:9d:50:
         58:0e:99:38:c3:c4:bd:ff:a5:71:db:8b:92:7a:eb:d5:33:07:
         3b:fd:e4:67:69:d2:4f:9f:97:e4:7f:eb:50:7c:40:0b:1a:1e:
         4d:2a:e1:3c:dc:86:dc:4f:6e:79:81:aa:63:9f:b9:8c:15:47:
         a2:c9:08:b3:cd:c4:95:b9:ee:56:f0:0f:75:61:b4:e2:cf:7e:
         ac:0e:b2:3f:0c:b4:96:b4:09:0b:db:4a:e6:4b:fd:a3:dc:a0:
         be:cc:3c:e0:88:93:41:4f:ec:57:eb:6e:24:c4:46:63:4f:41:
         d7:62:cc:cf:88:95:45:d7:a7:51:19:1f:39:61:a6:a4:0a:6e:
         25:a3:4e:56:da:35:db:aa:5a:5c:c1:18:e1:72:97:64:23:5f:
         34:d3:57:e4:02:f1:f8:f2:c3:b9:ac:e7:16:47:cc:9e:c2:34:
         66:74:b0:27:9b:db:42:13:9a:bb:fe:e9:ba:60:01:40:94:1b:
         a2:85:40:db:f8:d3:c5:c5:5c:3d:9f:a2:90:12:93:13:51:a9:
         78:58:59:dc:7e:42:3a:ea:3c:e3:2d:c6:39:2b:fc:cb:44:04:
         ea:e2:3d:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 11:53:13 2026 by rpki-client