Manifest

$ rpki-client -vvvf krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft
File:                     80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft (raw, json)
Hash identifier:          6zP0AOthOMx78qc+akmRAmBZO1SO4OvRhca5NTC3LpU=
Subject key identifier:   DC:AA:42:3E:58:E2:ED:18:F7:D9:6D:4C:09:3B:1A:06:F5:E5:EE:B7
Authority key identifier: 80:E4:4F:09:FF:20:1C:B2:BC:67:B1:6D:49:0F:7A:6D:10:CD:9D:F1
Certificate issuer:       /CN=80e44f09ff201cb2bc67b16d490f7a6d10cd9df1
Certificate serial:       3A76126DD0D772327E0E5B6110851E2FC80360CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gORPCf8gHLK8Z7FtSQ96bRDNnfE.cer
Subject info access:      rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft
Manifest number:          0785
Signing time:             Tue 03 Nov 2026 09:48:16 +0000
Manifest this update:     Tue 03 Nov 2026 09:43:16 +0000
Manifest next update:     Wed 04 Nov 2026 12:45:16 +0000
Files and hashes:         1: AS212934.asa (hash: KH7KksMzRSe8VPNzHTF1QlnpKUdKuJ5HkzzKYXH/3nU=)
                          2: 80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.crl (hash: zu5JFGEJzh+B95U/kW1e4k1azM8xFgEok5t874aaQ8k=)
Validation:               OK
Signature path:           rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.crl
                          rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gORPCf8gHLK8Z7FtSQ96bRDNnfE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 04 Nov 2026 12:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:76:12:6d:d0:d7:72:32:7e:0e:5b:61:10:85:1e:2f:c8:03:60:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80e44f09ff201cb2bc67b16d490f7a6d10cd9df1
        Validity
            Not Before: Nov  3 09:43:16 2026 GMT
            Not After : Nov  4 12:45:16 2026 GMT
        Subject: CN=DCAA423E58E2ED18F7D96D4C093B1A06F5E5EEB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:5a:b2:0c:45:ca:96:40:aa:90:d0:8d:e1:67:
                    6d:c6:87:bc:40:31:a6:87:89:48:55:77:80:39:8a:
                    25:ea:00:d5:63:13:16:89:50:d7:bb:d7:a8:c1:90:
                    be:18:0f:65:06:db:b5:cf:65:2c:42:12:0a:d1:5b:
                    c1:d8:1d:7d:5d:3d:8e:d3:05:89:10:cc:94:3d:46:
                    e1:b9:44:07:f2:f8:cf:10:33:2f:08:7f:ad:64:82:
                    cb:b3:89:1b:f5:2d:4c:be:87:de:96:b1:0c:6d:6b:
                    ff:4b:fc:1d:30:9d:a2:44:05:bd:79:d8:39:ed:82:
                    49:8e:95:52:55:c3:17:21:2a:53:8f:40:23:71:39:
                    17:48:92:f5:d4:2d:b8:58:11:66:13:64:17:13:3e:
                    2a:f8:aa:ab:47:54:d1:bf:c0:58:73:88:b0:02:f5:
                    58:1e:d6:cd:35:bf:00:46:e8:3f:e1:e8:d9:70:23:
                    5b:46:61:4c:0d:9c:ca:48:ff:17:c5:5f:95:1d:41:
                    83:e6:37:1c:0f:75:37:9a:71:32:b2:42:fe:b8:de:
                    71:7f:16:ea:09:65:fc:0f:79:d4:ec:19:f2:8f:79:
                    ea:cd:8b:16:8f:08:eb:c0:65:03:c6:4a:7a:78:95:
                    ec:66:dc:79:54:7b:31:ac:8c:67:09:b6:f3:31:bb:
                    c8:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:AA:42:3E:58:E2:ED:18:F7:D9:6D:4C:09:3B:1A:06:F5:E5:EE:B7
            X509v3 Authority Key Identifier:
                keyid:80:E4:4F:09:FF:20:1C:B2:BC:67:B1:6D:49:0F:7A:6D:10:CD:9D:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gORPCf8gHLK8Z7FtSQ96bRDNnfE.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:77:aa:20:1a:c2:97:5b:99:f0:4b:fd:8c:7d:ca:52:71:f4:
         45:2d:bd:df:59:5b:f4:97:91:4f:59:f4:c7:41:61:52:25:30:
         34:ef:77:28:97:78:05:37:7d:89:0f:b3:f6:65:4d:4a:c4:54:
         c7:19:cc:0a:c4:2c:c5:4a:ae:5b:86:4e:46:3b:d2:6c:bb:02:
         86:e9:e9:f7:e2:4c:76:49:14:86:5c:dd:78:c9:dc:c8:6f:45:
         b7:d3:b6:c6:15:23:49:bd:9d:1a:da:5b:c7:fc:20:01:c8:26:
         aa:00:16:3e:85:c7:24:f5:26:4e:98:0a:7c:f8:ce:b5:f2:80:
         63:da:62:21:dc:d8:47:7d:d0:64:70:ad:77:51:cc:ab:a6:c4:
         17:19:3a:97:98:cf:9e:f4:f2:a7:10:12:03:98:6a:f3:41:b8:
         3e:f8:df:86:ad:7a:3c:da:0e:ea:3f:4b:4d:46:0d:4d:f1:8c:
         c7:9c:2a:be:90:58:22:87:4b:0d:33:ab:2c:a8:f9:b5:1d:b5:
         65:85:d3:fd:1d:57:59:dd:e9:c7:d6:50:42:1d:88:e7:f0:89:
         7a:9a:96:a9:d1:06:e9:0f:09:39:47:70:8d:b4:93:54:19:55:
         36:6e:92:97:85:d2:c1:f0:b7:7c:36:96:4e:93:70:c4:7a:b2:
         dc:5a:71:e2
-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgIUOnYSbdDXcjJ+DlthEIUeL8gDYM4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODBlNDRmMDlmZjIwMWNiMmJjNjdiMTZkNDkwZjdhNmQx
MGNkOWRmMTAeFw0yNjExMDMwOTQzMTZaFw0yNjExMDQxMjQ1MTZaMDMxMTAvBgNV
BAMTKERDQUE0MjNFNThFMkVEMThGN0Q5NkQ0QzA5M0IxQTA2RjVFNUVFQjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUWrIMRcqWQKqQ0I3hZ23Gh7xA
MaaHiUhVd4A5iiXqANVjExaJUNe716jBkL4YD2UG27XPZSxCEgrRW8HYHX1dPY7T
BYkQzJQ9RuG5RAfy+M8QMy8If61kgsuziRv1LUy+h96WsQxta/9L/B0wnaJEBb15
2DntgkmOlVJVwxchKlOPQCNxORdIkvXULbhYEWYTZBcTPir4qqtHVNG/wFhziLAC
9Vge1s01vwBG6D/h6NlwI1tGYUwNnMpI/xfFX5UdQYPmNxwPdTeacTKyQv643nF/
FuoJZfwPedTsGfKPeerNixaPCOvAZQPGSnp4lexm3HlUezGsjGcJtvMxu8g1AgMB
AAGjggIaMIICFjAdBgNVHQ4EFgQU3KpCPlji7Rj32W1MCTsaBvXl7rcwHwYDVR0j
BBgwFoAUgORPCf8gHLK8Z7FtSQ96bRDNnfEwDgYDVR0PAQH/BAQDAgeAMH4GA1Ud
HwR3MHUwc6BxoG+GbXJzeW5jOi8va3JpbGwuYWNjdXJpc3RlY2hub2xvZ2llcy5j
YS9yZXBvL0FjY3VyaXMtVGVjaG5vbG9naWVzLzMvODBFNDRGMDlGRjIwMUNCMkJD
NjdCMTZENDkwRjdBNkQxMENEOURGMS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2dPUlBDZjhnSExLOFo3RnRTUTk2YlJETm5mRS5jZXIwgYkGCCsGAQUFBwELBH0w
ezB5BggrBgEFBQcwC4ZtcnN5bmM6Ly9rcmlsbC5hY2N1cmlzdGVjaG5vbG9naWVz
LmNhL3JlcG8vQWNjdXJpcy1UZWNobm9sb2dpZXMvMy84MEU0NEYwOUZGMjAxQ0Iy
QkM2N0IxNkQ0OTBGN0E2RDEwQ0Q5REYxLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG
AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPXeqIBrCl1uZ8Ev9
jH3KUnH0RS2931lb9JeRT1n0x0FhUiUwNO93KJd4BTd9iQ+z9mVNSsRUxxnMCsQs
xUquW4ZORjvSbLsChunp9+JMdkkUhlzdeMncyG9Ft9O2xhUjSb2dGtpbx/wgAcgm
qgAWPoXHJPUmTpgKfPjOtfKAY9piIdzYR33QZHCtd1HMq6bEFxk6l5jPnvTypxAS
A5hq80G4Pvjfhq16PNoO6j9LTUYNTfGMx5wqvpBYIodLDTOrLKj5tR21ZYXT/R1X
Wd3px9ZQQh2I5/CJepqWqdEG6Q8JOUdwjbSTVBlVNm6Sl4XSwfC3fDaWTpNwxHqy
3Fpx4g==
-----END CERTIFICATE-----
Generated at Wed Nov 4 00:43:50 2026 by rpki-client