Manifest

$ rpki-client -vvf krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft
File:                     80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft (raw, json)
Hash identifier:          fYIeAHuMYIukvyTpXORGi5iW9UMRFoA/6WLfbZyenxI=
Subject key identifier:   A1:2E:B3:36:EC:C1:EA:AA:F7:18:6C:0B:29:DD:97:87:F1:1E:49:69
Authority key identifier: 80:E4:4F:09:FF:20:1C:B2:BC:67:B1:6D:49:0F:7A:6D:10:CD:9D:F1
Certificate issuer:       /CN=80e44f09ff201cb2bc67b16d490f7a6d10cd9df1
Certificate serial:       2C83A7462403B84CFB95E35066FBD6FA095D137F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gORPCf8gHLK8Z7FtSQ96bRDNnfE.cer
Subject info access:      rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft
Manifest number:          05F7
Signing time:             Sat 14 Mar 2026 15:22:03 +0000
Manifest this update:     Sat 14 Mar 2026 15:17:03 +0000
Manifest next update:     Sun 15 Mar 2026 16:45:03 +0000
Files and hashes:         1: AS212934.asa (hash: 53XShpJ+NB5sf3EXMo5SBl7pYHowfGvfOlp+2zWjCfE=)
                          2: 80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.crl (hash: 9O3Gq6pHf9Jw0LE45tL6qRC1nITEvZS0ZRVko9tcEZY=)
Validation:               OK
Signature path:           rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.crl
                          rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gORPCf8gHLK8Z7FtSQ96bRDNnfE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Mar 2026 12:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:83:a7:46:24:03:b8:4c:fb:95:e3:50:66:fb:d6:fa:09:5d:13:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80e44f09ff201cb2bc67b16d490f7a6d10cd9df1
        Validity
            Not Before: Mar 14 15:17:03 2026 GMT
            Not After : Mar 15 16:45:03 2026 GMT
        Subject: CN=A12EB336ECC1EAAAF7186C0B29DD9787F11E4969
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:5a:0e:f6:e3:2d:4c:5e:18:51:08:96:b5:b1:
                    c7:cb:c9:bb:2c:1e:79:ac:b3:b2:13:e7:a1:35:54:
                    48:6b:2c:2f:c3:7a:5a:01:72:65:dc:ce:e8:c9:30:
                    46:db:67:e6:bf:f8:7a:5b:16:1f:23:8a:d4:cd:3c:
                    d5:96:aa:09:c9:7f:ad:50:6a:64:98:62:fd:b3:c9:
                    8b:1e:61:5e:a1:23:44:d7:a8:43:72:72:8e:d6:20:
                    17:5a:d9:94:4f:3a:c8:b6:23:ae:7e:fe:ec:75:ba:
                    6e:0b:0a:6e:f1:89:a1:86:3e:07:cf:42:95:ca:50:
                    13:10:f6:6b:e7:82:0a:c7:2e:41:3e:9f:59:6e:3d:
                    de:d2:98:2f:0b:09:fc:8a:3a:9e:d6:b5:42:38:42:
                    98:22:2a:cb:a0:50:82:d1:d4:f9:1d:be:31:9f:9f:
                    1c:06:6d:f6:d8:fc:3f:1b:8b:55:75:32:50:3e:2e:
                    bc:fa:e0:30:70:86:ab:9a:d3:73:26:26:b1:ab:50:
                    e6:e9:89:3b:78:54:ab:6a:69:41:e4:d8:09:a4:0d:
                    04:72:20:dd:c7:73:8e:87:6e:66:03:b1:1b:bb:78:
                    5b:ac:3f:a7:9e:6b:20:a9:34:f9:d6:b9:10:0d:d4:
                    37:d4:d0:80:2a:1e:3e:c3:00:5d:97:d9:04:83:6c:
                    24:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:2E:B3:36:EC:C1:EA:AA:F7:18:6C:0B:29:DD:97:87:F1:1E:49:69
            X509v3 Authority Key Identifier:
                keyid:80:E4:4F:09:FF:20:1C:B2:BC:67:B1:6D:49:0F:7A:6D:10:CD:9D:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gORPCf8gHLK8Z7FtSQ96bRDNnfE.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:fa:7b:a3:62:8f:8e:a1:4e:1d:e2:7b:85:f0:27:b4:1f:f0:
         32:51:80:ff:22:dd:6e:c6:00:06:00:b7:86:ac:0b:7b:bb:7a:
         9b:1d:87:3e:e8:87:14:59:21:01:31:76:f9:92:75:1e:f2:be:
         37:f7:25:9d:c8:7b:d4:8e:04:9b:bc:13:a5:f3:23:69:17:3a:
         b0:04:86:ff:a7:5a:95:81:93:20:8d:14:bd:97:ef:63:27:77:
         81:39:c0:e1:10:1c:c2:1f:c6:26:a7:56:2e:ff:34:80:50:9a:
         e9:cb:54:22:71:44:d7:0c:c9:37:78:de:12:5d:2e:c1:18:2e:
         17:a0:a4:99:95:63:2c:6d:83:0b:3c:b3:64:27:84:bd:65:a8:
         fc:cc:dc:aa:92:91:ff:ee:0d:4b:64:49:f4:f8:59:97:ac:c9:
         0b:29:3a:31:27:3b:a3:46:16:ed:bc:b1:06:92:62:e9:89:23:
         e7:7c:6b:94:5f:27:35:3f:ad:e9:f7:be:70:d4:13:a0:bf:8a:
         3c:fc:c7:24:99:c1:45:0d:64:27:7d:27:49:76:a9:48:9a:56:
         5b:97:1c:e0:8b:e7:23:14:ee:8c:bf:81:c4:da:7b:dd:96:d6:
         4c:0e:39:ca:98:3a:45:74:20:06:c1:98:b8:97:4d:6f:93:c5:
         6e:38:25:ef
-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgIULIOnRiQDuEz7leNQZvvW+gldE38wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODBlNDRmMDlmZjIwMWNiMmJjNjdiMTZkNDkwZjdhNmQx
MGNkOWRmMTAeFw0yNjAzMTQxNTE3MDNaFw0yNjAzMTUxNjQ1MDNaMDMxMTAvBgNV
BAMTKEExMkVCMzM2RUNDMUVBQUFGNzE4NkMwQjI5REQ5Nzg3RjExRTQ5NjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSWg724y1MXhhRCJa1scfLybss
Hnmss7IT56E1VEhrLC/DeloBcmXczujJMEbbZ+a/+HpbFh8jitTNPNWWqgnJf61Q
amSYYv2zyYseYV6hI0TXqENyco7WIBda2ZRPOsi2I65+/ux1um4LCm7xiaGGPgfP
QpXKUBMQ9mvnggrHLkE+n1luPd7SmC8LCfyKOp7WtUI4QpgiKsugUILR1PkdvjGf
nxwGbfbY/D8bi1V1MlA+Lrz64DBwhqua03MmJrGrUObpiTt4VKtqaUHk2AmkDQRy
IN3Hc46HbmYDsRu7eFusP6eeayCpNPnWuRAN1DfU0IAqHj7DAF2X2QSDbCS3AgMB
AAGjggIaMIICFjAdBgNVHQ4EFgQUoS6zNuzB6qr3GGwLKd2Xh/EeSWkwHwYDVR0j
BBgwFoAUgORPCf8gHLK8Z7FtSQ96bRDNnfEwDgYDVR0PAQH/BAQDAgeAMH4GA1Ud
HwR3MHUwc6BxoG+GbXJzeW5jOi8va3JpbGwuYWNjdXJpc3RlY2hub2xvZ2llcy5j
YS9yZXBvL0FjY3VyaXMtVGVjaG5vbG9naWVzLzMvODBFNDRGMDlGRjIwMUNCMkJD
NjdCMTZENDkwRjdBNkQxMENEOURGMS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2dPUlBDZjhnSExLOFo3RnRTUTk2YlJETm5mRS5jZXIwgYkGCCsGAQUFBwELBH0w
ezB5BggrBgEFBQcwC4ZtcnN5bmM6Ly9rcmlsbC5hY2N1cmlzdGVjaG5vbG9naWVz
LmNhL3JlcG8vQWNjdXJpcy1UZWNobm9sb2dpZXMvMy84MEU0NEYwOUZGMjAxQ0Iy
QkM2N0IxNkQ0OTBGN0E2RDEwQ0Q5REYxLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG
AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOPp7o2KPjqFOHeJ7
hfAntB/wMlGA/yLdbsYABgC3hqwLe7t6mx2HPuiHFFkhATF2+ZJ1HvK+N/clnch7
1I4Em7wTpfMjaRc6sASG/6dalYGTII0UvZfvYyd3gTnA4RAcwh/GJqdWLv80gFCa
6ctUInFE1wzJN3jeEl0uwRguF6CkmZVjLG2DCzyzZCeEvWWo/MzcqpKR/+4NS2RJ
9PhZl6zJCyk6MSc7o0YW7byxBpJi6Ykj53xrlF8nNT+t6fe+cNQToL+KPPzHJJnB
RQ1kJ30nSXapSJpWW5cc4IvnIxTujL+BxNp73ZbWTA45ypg6RXQgBsGYuJdNb5PF
bjgl7w==
-----END CERTIFICATE-----
Generated at Sat Mar 14 19:55:32 2026 by rpki-client