Manifest

$ rpki-client -vvf krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft
File:                     80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft (raw, json)
Hash identifier:          Vu053/3qbSNSi/Pon/NZMHIKLz84VYL490fmExYBnXk=
Subject key identifier:   C2:4E:66:9D:11:10:F4:DF:43:97:0D:12:A9:77:21:43:60:0E:B4:82
Authority key identifier: 80:E4:4F:09:FF:20:1C:B2:BC:67:B1:6D:49:0F:7A:6D:10:CD:9D:F1
Certificate issuer:       /CN=80e44f09ff201cb2bc67b16d490f7a6d10cd9df1
Certificate serial:       77D279613FB8D42776F6D7B5B2A85758A1E68A31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gORPCf8gHLK8Z7FtSQ96bRDNnfE.cer
Subject info access:      rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft
Manifest number:          05FB
Signing time:             Mon 16 Mar 2026 23:57:04 +0000
Manifest this update:     Mon 16 Mar 2026 23:52:04 +0000
Manifest next update:     Wed 18 Mar 2026 00:17:04 +0000
Files and hashes:         1: 80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.crl (hash: l9Uqdq1IR0idilXCEN/eAFmluhddLRHeA6Ot5a/U3m4=)
                          2: AS212934.asa (hash: 53XShpJ+NB5sf3EXMo5SBl7pYHowfGvfOlp+2zWjCfE=)
Validation:               OK
Signature path:           rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.crl
                          rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gORPCf8gHLK8Z7FtSQ96bRDNnfE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 18 Mar 2026 00:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:d2:79:61:3f:b8:d4:27:76:f6:d7:b5:b2:a8:57:58:a1:e6:8a:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80e44f09ff201cb2bc67b16d490f7a6d10cd9df1
        Validity
            Not Before: Mar 16 23:52:04 2026 GMT
            Not After : Mar 18 00:17:04 2026 GMT
        Subject: CN=C24E669D1110F4DF43970D12A9772143600EB482
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:fd:98:6c:d3:05:27:08:a3:f3:42:6b:e2:e9:
                    5c:86:0c:1b:6d:05:d9:ed:b2:ff:f7:83:e7:f6:5b:
                    19:3d:6e:ae:55:37:bd:dc:69:c6:ef:be:24:56:30:
                    cd:6b:e9:49:3d:4f:d5:94:10:1a:f3:da:e9:28:6e:
                    8f:ee:59:66:b0:d9:f8:5a:22:74:35:84:c2:17:f4:
                    97:62:0a:48:9f:d5:6e:10:6d:8b:24:36:60:8f:39:
                    79:63:a2:25:75:31:f5:28:45:46:01:25:6d:f7:01:
                    01:08:9e:bf:d5:4c:d2:54:01:3c:d2:9f:e3:81:dc:
                    67:64:cc:23:84:1b:bf:f4:b7:7d:f3:02:5d:99:bb:
                    e9:b8:81:60:86:57:ad:8c:35:dc:97:25:15:6b:1f:
                    2b:f5:5f:ce:27:68:4f:68:8e:27:0e:ca:10:75:0a:
                    18:21:1d:0b:6a:23:03:9d:ac:a1:1e:54:28:c1:cb:
                    f3:c7:c0:8f:f1:de:0d:35:8d:50:a0:0f:41:4c:74:
                    b9:3a:6d:03:30:fa:ad:35:44:e1:0a:c3:f5:b7:e2:
                    05:ca:af:71:e4:39:3d:9d:4a:f6:54:6d:1f:47:d6:
                    4f:41:e9:93:e6:e7:98:b1:72:13:7a:0d:75:8f:af:
                    ae:99:2d:95:8d:3e:55:62:ec:76:b0:65:a4:fa:1d:
                    cd:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:4E:66:9D:11:10:F4:DF:43:97:0D:12:A9:77:21:43:60:0E:B4:82
            X509v3 Authority Key Identifier:
                keyid:80:E4:4F:09:FF:20:1C:B2:BC:67:B1:6D:49:0F:7A:6D:10:CD:9D:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gORPCf8gHLK8Z7FtSQ96bRDNnfE.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:48:e9:36:0a:9f:2e:ef:f6:3a:ec:eb:41:49:74:c6:0f:e2:
         f0:e8:15:bf:c5:7f:82:31:c2:86:a0:83:ba:23:e4:fd:30:ae:
         4b:5a:a4:a1:a8:b6:bf:51:ce:ec:34:f9:02:42:f0:b0:de:97:
         fc:4a:97:83:e9:eb:6d:07:16:5c:2c:8d:24:0d:e8:fa:c0:e4:
         ef:b1:c6:f8:4f:6e:5a:e9:f0:11:8a:8b:18:d7:36:95:1f:63:
         48:7e:22:93:bf:be:28:2a:45:aa:82:09:95:9c:c0:fa:58:1b:
         6f:2a:18:71:23:70:de:f6:fd:9f:00:03:ee:d9:b5:96:14:01:
         c3:9b:7c:ec:8f:45:2f:64:fd:3d:b4:bc:7c:fa:b2:b9:f9:4b:
         40:bc:2d:06:6c:3a:bf:2d:95:be:53:da:4f:08:42:e7:6d:6b:
         06:ba:96:12:65:7f:9f:3e:a1:20:6c:7b:d0:3a:7c:c6:61:a2:
         d3:fd:b9:ed:12:16:87:92:02:b2:fb:00:e4:16:01:4c:e5:f1:
         3f:fc:73:5d:88:ca:4c:2f:9a:6b:61:4c:1f:6a:b0:73:e4:ad:
         f3:c6:47:c0:f3:04:4c:b0:f8:62:5f:9d:f5:73:51:59:85:b3:
         f5:bf:c3:d7:45:e1:87:c7:f4:97:4d:95:17:26:c4:7c:db:8d:
         f6:6e:86:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 17 07:29:35 2026 by rpki-client