Manifest

$ rpki-client -vvf krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft
File:                     80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft (raw, json)
Hash identifier:          9qM2tBPyVHaT2lpB0BI3uILov4r6FEPezX7541LW23I=
Subject key identifier:   69:A9:FE:C1:D0:7F:56:E4:4F:A2:69:A4:61:02:A7:D9:36:22:4A:A1
Authority key identifier: 80:E4:4F:09:FF:20:1C:B2:BC:67:B1:6D:49:0F:7A:6D:10:CD:9D:F1
Certificate issuer:       /CN=80e44f09ff201cb2bc67b16d490f7a6d10cd9df1
Certificate serial:       37D952EECBD3883A9ADD5B29794391575477CE03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gORPCf8gHLK8Z7FtSQ96bRDNnfE.cer
Subject info access:      rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft
Manifest number:          0549
Signing time:             Fri 07 Nov 2025 14:38:12 +0000
Manifest this update:     Fri 07 Nov 2025 14:33:12 +0000
Manifest next update:     Sat 08 Nov 2025 15:03:12 +0000
Files and hashes:         1: AS212934.asa (hash: 53XShpJ+NB5sf3EXMo5SBl7pYHowfGvfOlp+2zWjCfE=)
                          2: 80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.crl (hash: lcOHFhRVaY7Xj0losLmd3Dal1EDPHucs5oZZTSuyQoA=)
Validation:               OK
Signature path:           rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.crl
                          rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gORPCf8gHLK8Z7FtSQ96bRDNnfE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 08 Nov 2025 15:03:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:d9:52:ee:cb:d3:88:3a:9a:dd:5b:29:79:43:91:57:54:77:ce:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80e44f09ff201cb2bc67b16d490f7a6d10cd9df1
        Validity
            Not Before: Nov  7 14:33:12 2025 GMT
            Not After : Nov  8 15:03:12 2025 GMT
        Subject: CN=69A9FEC1D07F56E44FA269A46102A7D936224AA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b4:33:27:77:57:2a:ae:78:bc:13:44:09:60:
                    62:bf:4a:a8:56:96:a4:48:0f:32:5d:cb:ca:09:ee:
                    96:db:03:c5:42:fd:e8:38:f3:8b:0a:0f:d0:dd:be:
                    6c:8f:b9:de:84:e7:c2:95:27:90:59:a3:e4:2a:4e:
                    19:da:85:4b:b8:c6:16:e2:f3:81:d7:b3:5f:9c:0f:
                    dd:02:a0:36:a5:da:2a:e1:3c:74:39:c7:57:22:9c:
                    1e:0c:b2:17:17:09:6d:51:cc:c9:fd:27:47:85:a1:
                    2c:9b:aa:92:34:cd:f3:d4:4e:a8:18:c2:21:2f:33:
                    26:68:d8:bf:49:7f:94:ed:e9:38:da:7b:58:ff:99:
                    8b:8a:d9:c2:d7:d8:78:41:5e:ff:6a:75:4c:62:b3:
                    fa:68:f2:81:34:6f:da:b8:c8:a9:b8:07:59:79:63:
                    2c:fd:53:95:83:cf:a7:87:4d:f0:8b:97:f6:fa:de:
                    8b:8b:57:94:5c:e3:17:f3:fa:c0:b7:db:44:78:f2:
                    18:6c:9b:35:76:c8:1b:b0:7a:bc:2e:6e:3f:3f:c1:
                    b2:9d:a6:ad:2a:8d:12:d5:9b:e2:23:25:c7:a6:63:
                    ae:a0:14:ef:e9:3d:b9:dd:9f:7a:c1:07:89:44:a4:
                    c3:0b:75:39:2e:46:87:43:c6:77:c0:98:95:8d:4b:
                    aa:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:A9:FE:C1:D0:7F:56:E4:4F:A2:69:A4:61:02:A7:D9:36:22:4A:A1
            X509v3 Authority Key Identifier:
                keyid:80:E4:4F:09:FF:20:1C:B2:BC:67:B1:6D:49:0F:7A:6D:10:CD:9D:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gORPCf8gHLK8Z7FtSQ96bRDNnfE.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         f3:b4:0f:a5:76:e3:5d:f8:82:ec:c8:84:5a:96:4f:92:af:90:
         85:b7:d2:ed:7c:cf:ed:3a:d9:53:96:41:35:50:68:ff:7b:9e:
         b4:ee:2b:5d:ef:57:68:6a:c0:22:58:26:b5:ac:f9:b2:ca:17:
         88:c4:ef:fa:a7:0f:47:65:59:f8:b1:7c:f0:45:5c:ff:3b:c4:
         b3:37:c2:8f:79:67:19:3b:41:3a:d9:c9:4d:c1:bb:5a:93:ae:
         0a:f8:54:ad:aa:58:ab:4f:a3:69:e8:67:21:94:b0:d0:55:eb:
         cc:92:81:37:c3:81:34:cc:ca:8d:4d:6d:bb:70:0f:5b:b8:4a:
         0f:5b:4c:72:c2:f7:a7:cb:c2:63:b7:7c:e0:4e:41:84:a6:c4:
         ac:f8:38:f8:13:22:ff:e3:be:54:10:30:81:ac:c5:f3:da:26:
         18:7c:b1:b0:13:3a:59:35:52:e2:60:6b:af:d9:36:24:d9:cc:
         b1:c6:8b:a7:cc:0f:c5:ed:3a:65:45:90:93:0a:86:7a:c9:25:
         de:4d:94:89:a1:6b:b2:c0:07:7c:87:0d:fd:4c:ca:b2:9c:2a:
         e6:2f:18:e4:24:5c:3d:03:8c:19:99:dc:ff:37:34:02:8e:e7:
         89:4a:9c:21:88:9e:77:6b:6a:0b:5f:c1:88:04:32:28:3a:74:
         f1:40:bd:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 8 01:38:07 2025 by rpki-client