Manifest

$ rpki-client -vvf krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft
File:                     80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft (raw, json)
Hash identifier:          Eqh8knIQeh8k1uJeJdZ91CyXOCtLRbqSP0lcvhsGg6k=
Subject key identifier:   95:2C:B7:F4:AA:D8:9A:25:48:23:C4:DD:32:B4:7B:DA:49:A1:35:F1
Authority key identifier: 80:E4:4F:09:FF:20:1C:B2:BC:67:B1:6D:49:0F:7A:6D:10:CD:9D:F1
Certificate issuer:       /CN=80e44f09ff201cb2bc67b16d490f7a6d10cd9df1
Certificate serial:       337BD4439DA5FD2B4AE81498A02A9045B4C5B7AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gORPCf8gHLK8Z7FtSQ96bRDNnfE.cer
Subject info access:      rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft
Manifest number:          06C3
Signing time:             Thu 09 Jul 2026 10:53:21 +0000
Manifest this update:     Thu 09 Jul 2026 10:48:21 +0000
Manifest next update:     Fri 10 Jul 2026 13:45:21 +0000
Files and hashes:         1: AS212934.asa (hash: bxywXTpfuPNrOoUU79RmyXiyMRfkgoFX9hq7TKTgZGE=)
                          2: 80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.crl (hash: g8/v9GoZiY0UGoiLppsmHPHHgOyGC3zEncoh7vAEbQY=)
Validation:               OK
Signature path:           rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.crl
                          rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gORPCf8gHLK8Z7FtSQ96bRDNnfE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 10 Jul 2026 13:45:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:7b:d4:43:9d:a5:fd:2b:4a:e8:14:98:a0:2a:90:45:b4:c5:b7:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80e44f09ff201cb2bc67b16d490f7a6d10cd9df1
        Validity
            Not Before: Jul  9 10:48:21 2026 GMT
            Not After : Jul 10 13:45:21 2026 GMT
        Subject: CN=952CB7F4AAD89A254823C4DD32B47BDA49A135F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:36:95:61:18:16:08:58:8d:d9:04:9a:66:23:
                    54:9c:36:65:7c:15:12:f0:cc:f7:7c:e7:ee:34:35:
                    43:68:12:f5:07:97:56:50:82:a6:ec:8f:20:7f:db:
                    a3:ec:5d:89:e1:67:0b:27:73:d0:47:93:bb:ff:60:
                    65:fc:7e:64:2f:b0:6d:b5:9f:f0:9a:05:e0:a7:46:
                    b4:f5:98:28:09:0e:05:38:f2:34:b9:e0:9b:7a:6d:
                    e5:84:91:83:f1:4b:9a:cc:b5:1e:1c:3a:28:9f:e4:
                    6f:20:f5:67:4a:79:eb:4b:2f:b4:c3:1d:78:6c:89:
                    0e:78:a1:ef:96:77:fc:33:95:c2:a2:3b:90:20:1d:
                    f0:d1:29:0b:2e:62:6f:66:f4:30:9a:c3:e1:22:2d:
                    e6:5e:44:fb:8e:ce:b5:13:5e:28:06:70:97:40:a1:
                    43:1e:3e:72:9f:01:33:d2:60:5e:51:3b:d0:34:4a:
                    d6:84:ec:c3:0f:0b:49:bb:63:d2:f6:c1:b2:71:5d:
                    30:46:87:4a:e9:9e:b2:3b:4e:58:f4:db:e7:bf:48:
                    d0:01:fd:80:c1:e0:9f:5c:dc:7b:72:9e:b2:8d:6e:
                    70:95:d9:70:1b:c1:ff:db:2c:e6:27:8e:02:26:64:
                    cc:d7:31:d2:10:25:57:e6:0e:42:91:02:b7:6d:29:
                    c0:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:2C:B7:F4:AA:D8:9A:25:48:23:C4:DD:32:B4:7B:DA:49:A1:35:F1
            X509v3 Authority Key Identifier:
                keyid:80:E4:4F:09:FF:20:1C:B2:BC:67:B1:6D:49:0F:7A:6D:10:CD:9D:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gORPCf8gHLK8Z7FtSQ96bRDNnfE.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:b0:25:64:59:33:0c:a3:fa:11:94:5a:8d:65:c8:bd:2e:94:
         0c:f9:cc:00:74:d0:a6:b0:cc:58:07:33:ec:7f:d1:41:4c:2c:
         56:d1:11:b5:34:fd:b9:01:8f:9f:5c:52:8b:26:4c:59:08:83:
         55:e0:33:db:2e:3d:bf:fd:93:9a:6b:c2:5f:75:fb:d9:36:57:
         ae:e2:2c:7a:c1:d7:9f:fd:84:98:fe:8f:c5:bf:55:2b:0d:6b:
         19:1e:70:b4:99:2e:42:b9:3b:d8:cc:58:97:14:f5:fa:8d:57:
         33:45:16:3f:fb:93:e6:42:cc:d7:45:5a:ff:2b:5e:a9:c6:1f:
         f5:fd:30:3c:55:cb:54:dc:ce:dd:46:9e:83:5f:1d:4b:5f:d8:
         40:51:2e:dc:b8:97:20:87:20:83:70:4d:57:b1:92:5e:d0:b9:
         fd:01:1e:a8:d6:4d:ea:30:e5:32:6f:e8:22:b2:a3:8e:96:41:
         0e:c6:f1:ac:5b:e3:26:e4:57:a3:46:17:2c:4e:75:7d:5a:36:
         2d:d9:2b:c3:81:77:3d:eb:31:5d:65:9c:19:99:51:5c:cf:e7:
         d4:08:50:e7:ae:4b:8d:22:13:ed:52:37:b4:27:2a:63:4b:c1:
         2b:bb:d4:3f:41:f8:15:0b:12:5f:3c:48:92:db:ed:5f:22:a3:
         24:36:91:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 02:56:36 2026 by rpki-client