Manifest

$ rpki-client -vvf krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft
File:                     80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft (raw, json)
Hash identifier:          60ZXzmBPLdLqHzC5cz3soclOfo+Kdxtys5M7jjt2Gys=
Subject key identifier:   37:48:54:B3:9E:FA:0C:3F:7F:B1:DE:F4:EA:84:41:70:E7:15:E2:DF
Authority key identifier: 80:E4:4F:09:FF:20:1C:B2:BC:67:B1:6D:49:0F:7A:6D:10:CD:9D:F1
Certificate issuer:       /CN=80e44f09ff201cb2bc67b16d490f7a6d10cd9df1
Certificate serial:       7760EFB050767CE404D6D266EE92829244DDA659
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gORPCf8gHLK8Z7FtSQ96bRDNnfE.cer
Subject info access:      rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft
Manifest number:          060E
Signing time:             Sat 28 Mar 2026 20:12:43 +0000
Manifest this update:     Sat 28 Mar 2026 20:07:43 +0000
Manifest next update:     Sun 29 Mar 2026 21:42:43 +0000
Files and hashes:         1: AS212934.asa (hash: 53XShpJ+NB5sf3EXMo5SBl7pYHowfGvfOlp+2zWjCfE=)
                          2: 80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.crl (hash: 2vjCLUdbbGYL7tRQTaat0gfuIOHr9KEZK6qAh+GG9gQ=)
Validation:               OK
Signature path:           rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.crl
                          rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gORPCf8gHLK8Z7FtSQ96bRDNnfE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Mar 2026 21:42:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:60:ef:b0:50:76:7c:e4:04:d6:d2:66:ee:92:82:92:44:dd:a6:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80e44f09ff201cb2bc67b16d490f7a6d10cd9df1
        Validity
            Not Before: Mar 28 20:07:43 2026 GMT
            Not After : Mar 29 21:42:43 2026 GMT
        Subject: CN=374854B39EFA0C3F7FB1DEF4EA844170E715E2DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:23:92:0b:a6:99:2f:62:21:86:fb:d7:89:ae:
                    45:79:f7:0e:84:8b:c7:b7:5b:a3:bc:ea:e5:c4:1b:
                    86:87:71:ee:29:b1:1c:d7:4d:02:fc:22:8f:9f:4b:
                    3c:44:ef:f8:85:d6:46:51:d2:1d:d0:d3:5a:16:0e:
                    45:f0:a7:e7:63:1b:bc:77:29:4d:07:d7:95:09:44:
                    57:af:a3:56:b2:d7:30:3e:8f:2a:ed:ec:85:21:aa:
                    57:cd:7e:79:0e:6f:1d:4b:d6:c4:dc:7e:20:25:11:
                    f6:e1:8e:7a:40:01:b1:92:29:a9:51:20:1f:88:e4:
                    c0:75:b7:b1:3d:bd:ef:e9:d5:cc:b6:ee:5d:58:8c:
                    1f:6e:c7:9a:7f:24:37:58:20:b1:57:1c:52:98:d7:
                    d9:ac:7d:32:ee:ea:d6:f2:60:07:33:47:44:41:37:
                    36:84:eb:fe:87:c6:d4:33:ce:bd:66:d0:d9:93:e3:
                    12:ed:1c:6d:13:04:72:d6:06:bb:ab:3a:99:24:f1:
                    85:2c:95:79:9d:a6:dd:9f:04:72:48:d5:af:ea:dd:
                    53:5d:1d:f9:aa:ce:c8:a5:f1:5c:eb:ae:92:6d:67:
                    7f:6c:50:ea:d1:ed:b8:20:6f:de:ee:ae:03:c0:3e:
                    0b:17:e9:ef:26:83:92:7d:ee:dc:31:56:b8:b2:51:
                    fc:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:48:54:B3:9E:FA:0C:3F:7F:B1:DE:F4:EA:84:41:70:E7:15:E2:DF
            X509v3 Authority Key Identifier:
                keyid:80:E4:4F:09:FF:20:1C:B2:BC:67:B1:6D:49:0F:7A:6D:10:CD:9D:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gORPCf8gHLK8Z7FtSQ96bRDNnfE.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:a2:24:14:03:f5:14:91:c9:31:6e:8e:c1:45:d8:69:e6:64:
         e0:77:4c:21:b7:76:4b:36:9d:69:10:de:ff:07:e3:5c:b5:8a:
         7c:3c:e7:45:d0:31:47:78:cc:3d:40:e3:36:45:4f:4b:b0:f4:
         db:5b:dc:a8:8a:2b:6a:f9:61:6f:a1:27:03:a2:c9:d9:3b:3b:
         a1:78:87:09:d7:38:aa:e6:0a:7f:9f:54:11:02:c7:bd:55:f4:
         24:ba:a0:0c:ca:d3:27:7d:4c:8d:3b:56:fc:e6:a7:6d:87:90:
         88:f3:b3:25:64:1e:a7:be:6c:92:d4:2e:f5:2d:7b:66:d7:53:
         96:52:21:dc:a3:3e:a6:31:35:e4:84:ff:e4:d3:06:89:1f:1b:
         40:b6:94:0d:46:7d:76:79:35:05:f3:a5:6d:58:af:15:cb:cc:
         11:09:87:99:21:87:a9:85:0b:ac:62:0b:4f:0c:7c:ce:49:f3:
         6a:3a:5b:fb:46:2a:fa:19:1e:4e:9b:63:b4:5e:92:73:46:6d:
         8f:2a:74:71:7d:62:68:ad:85:47:16:8b:b9:1f:c3:6b:14:21:
         5f:17:da:bd:a3:fb:55:a3:94:9d:d3:b6:2b:bf:97:f5:cc:d7:
         f4:6d:d7:52:01:ce:40:2f:78:a5:44:62:ed:ad:eb:45:9a:43:
         63:40:ab:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 04:15:16 2026 by rpki-client