Manifest

$ rpki-client -vvf krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft
File:                     80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft (raw, json)
Hash identifier:          FcGx4AYNLgh17xkx26WC8GSDmUTwHlq6vl0DqdKpCxk=
Subject key identifier:   F6:40:F7:FB:EC:B5:FA:02:54:FD:05:A1:5A:E6:7F:54:72:16:09:D0
Authority key identifier: 80:E4:4F:09:FF:20:1C:B2:BC:67:B1:6D:49:0F:7A:6D:10:CD:9D:F1
Certificate issuer:       /CN=80e44f09ff201cb2bc67b16d490f7a6d10cd9df1
Certificate serial:       6AD72609CF77F2F10D5DBF1CB8B23740DC70626B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gORPCf8gHLK8Z7FtSQ96bRDNnfE.cer
Subject info access:      rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft
Manifest number:          068D
Signing time:             Mon 08 Jun 2026 20:07:47 +0000
Manifest this update:     Mon 08 Jun 2026 20:02:47 +0000
Manifest next update:     Tue 09 Jun 2026 21:39:47 +0000
Files and hashes:         1: AS212934.asa (hash: 53XShpJ+NB5sf3EXMo5SBl7pYHowfGvfOlp+2zWjCfE=)
                          2: 80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.crl (hash: KFyOCYJSk+84Z85z7bfLU23hkYH9xMQsuAkne4AT9Sk=)
Validation:               OK
Signature path:           rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.crl
                          rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gORPCf8gHLK8Z7FtSQ96bRDNnfE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 09 Jun 2026 21:39:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:d7:26:09:cf:77:f2:f1:0d:5d:bf:1c:b8:b2:37:40:dc:70:62:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80e44f09ff201cb2bc67b16d490f7a6d10cd9df1
        Validity
            Not Before: Jun  8 20:02:47 2026 GMT
            Not After : Jun  9 21:39:47 2026 GMT
        Subject: CN=F640F7FBECB5FA0254FD05A15AE67F54721609D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:34:ef:6d:18:d5:ef:17:06:58:ae:56:22:d3:
                    b2:f5:9b:f8:9b:c7:51:8f:4f:20:c1:b5:f9:b7:27:
                    eb:4a:6d:cd:8a:0f:0a:fd:36:47:58:46:45:18:75:
                    9c:5e:19:da:91:7c:37:a3:95:8e:38:0e:35:84:27:
                    e0:e7:f5:4d:e9:d3:a1:2b:5d:d0:0a:97:c9:9f:bb:
                    76:28:36:83:82:e6:f4:34:f0:2b:be:d7:4b:2d:c9:
                    01:40:fe:61:49:16:13:08:b3:91:f4:ba:0c:40:d2:
                    57:9d:4b:82:a5:dd:a4:75:e1:f6:9f:94:7f:14:fd:
                    38:10:a5:d2:72:71:e4:65:50:66:76:46:5a:12:50:
                    08:85:1e:65:9f:9e:8e:ac:2a:f3:d5:8e:2a:4f:a6:
                    98:ea:20:c8:25:53:e0:f6:45:2b:82:0e:1b:95:72:
                    80:bd:ca:80:31:ba:0b:60:38:4f:4c:d8:d9:b2:2b:
                    19:d9:a1:94:09:01:7b:ad:76:aa:04:56:ca:74:72:
                    9d:6c:e9:4a:87:27:57:7b:57:40:68:72:95:65:13:
                    b9:f3:c5:10:0b:84:7a:bc:e9:cb:2e:95:af:b3:69:
                    1c:f2:ee:16:dd:5f:d8:42:5d:8f:53:64:8e:2e:04:
                    ce:9c:19:fa:d0:d3:6f:82:8f:87:67:b6:26:42:51:
                    9c:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:40:F7:FB:EC:B5:FA:02:54:FD:05:A1:5A:E6:7F:54:72:16:09:D0
            X509v3 Authority Key Identifier:
                keyid:80:E4:4F:09:FF:20:1C:B2:BC:67:B1:6D:49:0F:7A:6D:10:CD:9D:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gORPCf8gHLK8Z7FtSQ96bRDNnfE.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:e6:e5:4a:b1:d1:49:3e:f9:a4:ff:d1:9b:45:e1:2a:4a:d0:
         69:a1:e0:27:5b:ae:ba:e2:9a:c8:69:e0:b3:2a:8e:b8:f8:ec:
         fc:b8:e1:b1:96:cb:cb:a0:6a:a0:45:16:3b:5d:38:7a:a0:19:
         f0:04:6d:0e:a0:6b:14:a6:fa:33:75:cd:32:56:dd:a4:3a:f1:
         78:d2:8c:f2:10:3d:f1:84:d0:ff:c0:13:4d:ac:c5:39:1e:00:
         01:84:81:d3:6b:e3:43:83:e6:b0:ea:f4:02:cc:0a:39:a5:35:
         8d:2b:53:26:24:30:ba:69:d4:26:bf:7d:b5:37:10:5a:89:9f:
         e7:0f:23:8f:03:1e:9f:2e:56:b6:f1:88:14:f3:e7:b4:8f:e5:
         60:ca:73:3d:23:c6:f3:f3:ea:49:d0:18:f6:c5:dd:1b:dd:df:
         14:f9:82:60:3d:15:8a:17:e8:e7:dc:b0:bc:19:37:8f:d9:1c:
         b2:9c:d1:08:69:a3:dc:84:5e:40:6f:07:1b:81:21:59:ec:4f:
         74:72:b5:8e:b6:8d:b0:a9:06:62:60:c4:e7:cf:fb:c7:c1:50:
         e3:83:97:c6:1b:43:9b:a9:83:58:24:ae:55:c9:d3:2d:09:7c:
         15:6b:d4:41:70:2f:db:3d:05:38:f7:e7:96:1f:c9:bd:28:66:
         37:8e:df:b1
-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgIUatcmCc938vENXb8cuLI3QNxwYmswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODBlNDRmMDlmZjIwMWNiMmJjNjdiMTZkNDkwZjdhNmQx
MGNkOWRmMTAeFw0yNjA2MDgyMDAyNDdaFw0yNjA2MDkyMTM5NDdaMDMxMTAvBgNV
BAMTKEY2NDBGN0ZCRUNCNUZBMDI1NEZEMDVBMTVBRTY3RjU0NzIxNjA5RDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfNO9tGNXvFwZYrlYi07L1m/ib
x1GPTyDBtfm3J+tKbc2KDwr9NkdYRkUYdZxeGdqRfDejlY44DjWEJ+Dn9U3p06Er
XdAKl8mfu3YoNoOC5vQ08Cu+10styQFA/mFJFhMIs5H0ugxA0ledS4Kl3aR14faf
lH8U/TgQpdJyceRlUGZ2RloSUAiFHmWfno6sKvPVjipPppjqIMglU+D2RSuCDhuV
coC9yoAxugtgOE9M2NmyKxnZoZQJAXutdqoEVsp0cp1s6UqHJ1d7V0BocpVlE7nz
xRALhHq86csula+zaRzy7hbdX9hCXY9TZI4uBM6cGfrQ02+Cj4dntiZCUZwFAgMB
AAGjggIaMIICFjAdBgNVHQ4EFgQU9kD3++y1+gJU/QWhWuZ/VHIWCdAwHwYDVR0j
BBgwFoAUgORPCf8gHLK8Z7FtSQ96bRDNnfEwDgYDVR0PAQH/BAQDAgeAMH4GA1Ud
HwR3MHUwc6BxoG+GbXJzeW5jOi8va3JpbGwuYWNjdXJpc3RlY2hub2xvZ2llcy5j
YS9yZXBvL0FjY3VyaXMtVGVjaG5vbG9naWVzLzMvODBFNDRGMDlGRjIwMUNCMkJD
NjdCMTZENDkwRjdBNkQxMENEOURGMS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2dPUlBDZjhnSExLOFo3RnRTUTk2YlJETm5mRS5jZXIwgYkGCCsGAQUFBwELBH0w
ezB5BggrBgEFBQcwC4ZtcnN5bmM6Ly9rcmlsbC5hY2N1cmlzdGVjaG5vbG9naWVz
LmNhL3JlcG8vQWNjdXJpcy1UZWNobm9sb2dpZXMvMy84MEU0NEYwOUZGMjAxQ0Iy
QkM2N0IxNkQ0OTBGN0E2RDEwQ0Q5REYxLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG
AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFublSrHRST75pP/R
m0XhKkrQaaHgJ1uuuuKayGngsyqOuPjs/LjhsZbLy6BqoEUWO104eqAZ8ARtDqBr
FKb6M3XNMlbdpDrxeNKM8hA98YTQ/8ATTazFOR4AAYSB02vjQ4PmsOr0AswKOaU1
jStTJiQwumnUJr99tTcQWomf5w8jjwMeny5WtvGIFPPntI/lYMpzPSPG8/PqSdAY
9sXdG93fFPmCYD0Vihfo59ywvBk3j9kcspzRCGmj3IReQG8HG4EhWexPdHK1jraN
sKkGYmDE58/7x8FQ44OXxhtDm6mDWCSuVcnTLQl8FWvUQXAv2z0FOPfnlh/JvShm
N47fsQ==
-----END CERTIFICATE-----
Generated at Tue Jun 9 12:21:36 2026 by rpki-client