Manifest

$ rpki-client -vvf krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft
File:                     80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft (raw, json)
Hash identifier:          H9FrPSJcLbRyxXKF/eoOCY7773v1l/LVkTKXag8tpjc=
Subject key identifier:   B9:4E:65:CF:7F:6A:0F:5F:91:AE:FA:50:DD:71:13:76:0C:8D:F7:E3
Authority key identifier: 80:E4:4F:09:FF:20:1C:B2:BC:67:B1:6D:49:0F:7A:6D:10:CD:9D:F1
Certificate issuer:       /CN=80e44f09ff201cb2bc67b16d490f7a6d10cd9df1
Certificate serial:       0B80A3221F29858EBE7FAE5EE70D6298B99122D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gORPCf8gHLK8Z7FtSQ96bRDNnfE.cer
Subject info access:      rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft
Manifest number:          064A
Signing time:             Fri 01 May 2026 07:21:34 +0000
Manifest this update:     Fri 01 May 2026 07:16:34 +0000
Manifest next update:     Sat 02 May 2026 09:02:34 +0000
Files and hashes:         1: AS212934.asa (hash: 53XShpJ+NB5sf3EXMo5SBl7pYHowfGvfOlp+2zWjCfE=)
                          2: 80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.crl (hash: C/8cVRjRa+PpuK8uXyUXQe05OJENDLe/a8RsQfsJuTM=)
Validation:               OK
Signature path:           rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.crl
                          rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gORPCf8gHLK8Z7FtSQ96bRDNnfE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 02 May 2026 08:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:80:a3:22:1f:29:85:8e:be:7f:ae:5e:e7:0d:62:98:b9:91:22:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80e44f09ff201cb2bc67b16d490f7a6d10cd9df1
        Validity
            Not Before: May  1 07:16:34 2026 GMT
            Not After : May  2 09:02:34 2026 GMT
        Subject: CN=B94E65CF7F6A0F5F91AEFA50DD7113760C8DF7E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:06:88:cd:f7:e9:b0:fb:47:f9:66:46:09:b7:
                    d1:66:53:9f:58:83:73:94:d9:13:30:f3:fc:2b:66:
                    e5:65:48:bd:6d:5f:c8:05:a7:00:e4:f8:7a:1f:0d:
                    a7:ce:b7:27:33:10:74:77:b0:b3:9a:c0:02:90:34:
                    fa:43:75:92:ab:ed:a2:f5:6d:29:52:c5:26:cf:62:
                    01:eb:c3:35:f6:16:f1:62:68:6f:f2:21:47:3e:33:
                    c6:00:87:70:17:de:f0:5c:02:2d:e1:82:66:45:6b:
                    1a:82:a1:f9:d5:8c:94:1e:ed:31:d1:98:bb:07:9f:
                    de:b2:37:f2:d0:02:c2:5c:5d:e2:98:c1:74:b6:1d:
                    32:ff:36:e8:8c:d4:28:36:5d:54:67:50:a7:6f:35:
                    21:7b:ea:dd:12:13:1c:74:11:75:51:19:94:ca:69:
                    39:26:42:40:3e:15:c7:f9:af:fc:c1:52:47:5d:77:
                    13:e7:6b:ad:86:05:76:0c:cd:73:62:8d:f7:50:c7:
                    0d:a8:c8:6c:f1:08:57:f7:02:f9:17:b0:62:e1:01:
                    b4:e7:60:28:86:fa:e6:02:64:2f:10:83:e6:7c:9d:
                    f7:d4:13:56:a4:18:a0:de:7c:0e:6a:fa:24:b6:3d:
                    07:fc:cc:74:2c:57:28:2f:36:d8:6e:93:67:0c:84:
                    29:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:4E:65:CF:7F:6A:0F:5F:91:AE:FA:50:DD:71:13:76:0C:8D:F7:E3
            X509v3 Authority Key Identifier:
                keyid:80:E4:4F:09:FF:20:1C:B2:BC:67:B1:6D:49:0F:7A:6D:10:CD:9D:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gORPCf8gHLK8Z7FtSQ96bRDNnfE.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:51:c6:fc:3e:59:b4:ea:6e:a2:dc:81:9a:e5:a5:2e:0b:7a:
         31:c4:62:2a:34:1f:70:4f:58:11:8a:cf:e3:0d:d6:d3:ae:08:
         48:85:5f:f2:9a:7c:09:a0:b0:8a:40:35:53:2a:24:4e:81:63:
         86:ad:25:8a:9c:6c:f5:c8:d8:49:0e:00:be:68:61:af:db:55:
         d5:af:10:dd:67:bc:2b:f4:34:ba:5d:09:97:f5:07:43:d1:bd:
         2e:0e:cb:a4:c0:d9:23:7c:ed:ec:83:67:a4:97:66:7d:91:74:
         1c:8d:67:68:ab:10:7f:69:84:53:9b:34:68:5b:25:00:1b:ea:
         82:9c:28:38:37:a8:be:dd:ba:07:f1:e5:44:06:28:bc:28:48:
         c8:4e:ee:00:85:d7:9b:ec:95:f9:45:d4:46:cd:51:c3:c0:2b:
         88:b2:cb:17:7a:bd:e1:e4:43:63:00:47:77:db:f9:77:f0:57:
         d2:72:4c:09:90:53:95:f3:3d:e0:1e:f8:a8:3e:2d:96:64:74:
         ed:64:ae:4d:9e:4e:cd:45:c3:e5:75:06:b4:47:4c:d1:29:1f:
         04:10:14:b1:6b:9c:8f:ba:4f:65:83:9a:30:6f:d7:9d:ad:b0:
         8d:df:d9:ac:e5:68:de:2e:fb:73:90:b5:c9:12:5f:00:1c:d3:
         7a:06:3c:08
-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgIUC4CjIh8phY6+f65e5w1imLmRItEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODBlNDRmMDlmZjIwMWNiMmJjNjdiMTZkNDkwZjdhNmQx
MGNkOWRmMTAeFw0yNjA1MDEwNzE2MzRaFw0yNjA1MDIwOTAyMzRaMDMxMTAvBgNV
BAMTKEI5NEU2NUNGN0Y2QTBGNUY5MUFFRkE1MERENzExMzc2MEM4REY3RTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChBojN9+mw+0f5ZkYJt9FmU59Y
g3OU2RMw8/wrZuVlSL1tX8gFpwDk+HofDafOtyczEHR3sLOawAKQNPpDdZKr7aL1
bSlSxSbPYgHrwzX2FvFiaG/yIUc+M8YAh3AX3vBcAi3hgmZFaxqCofnVjJQe7THR
mLsHn96yN/LQAsJcXeKYwXS2HTL/NuiM1Cg2XVRnUKdvNSF76t0SExx0EXVRGZTK
aTkmQkA+Fcf5r/zBUkdddxPna62GBXYMzXNijfdQxw2oyGzxCFf3AvkXsGLhAbTn
YCiG+uYCZC8Qg+Z8nffUE1akGKDefA5q+iS2PQf8zHQsVygvNthuk2cMhCnDAgMB
AAGjggIaMIICFjAdBgNVHQ4EFgQUuU5lz39qD1+RrvpQ3XETdgyN9+MwHwYDVR0j
BBgwFoAUgORPCf8gHLK8Z7FtSQ96bRDNnfEwDgYDVR0PAQH/BAQDAgeAMH4GA1Ud
HwR3MHUwc6BxoG+GbXJzeW5jOi8va3JpbGwuYWNjdXJpc3RlY2hub2xvZ2llcy5j
YS9yZXBvL0FjY3VyaXMtVGVjaG5vbG9naWVzLzMvODBFNDRGMDlGRjIwMUNCMkJD
NjdCMTZENDkwRjdBNkQxMENEOURGMS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2dPUlBDZjhnSExLOFo3RnRTUTk2YlJETm5mRS5jZXIwgYkGCCsGAQUFBwELBH0w
ezB5BggrBgEFBQcwC4ZtcnN5bmM6Ly9rcmlsbC5hY2N1cmlzdGVjaG5vbG9naWVz
LmNhL3JlcG8vQWNjdXJpcy1UZWNobm9sb2dpZXMvMy84MEU0NEYwOUZGMjAxQ0Iy
QkM2N0IxNkQ0OTBGN0E2RDEwQ0Q5REYxLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG
AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJlHG/D5ZtOpuotyB
muWlLgt6McRiKjQfcE9YEYrP4w3W064ISIVf8pp8CaCwikA1UyokToFjhq0lipxs
9cjYSQ4Avmhhr9tV1a8Q3We8K/Q0ul0Jl/UHQ9G9Lg7LpMDZI3zt7INnpJdmfZF0
HI1naKsQf2mEU5s0aFslABvqgpwoODeovt26B/HlRAYovChIyE7uAIXXm+yV+UXU
Rs1Rw8AriLLLF3q94eRDYwBHd9v5d/BX0nJMCZBTlfM94B74qD4tlmR07WSuTZ5O
zUXD5XUGtEdM0SkfBBAUsWucj7pPZYOaMG/Xna2wjd/ZrOVo3i77c5C1yRJfABzT
egY8CA==
-----END CERTIFICATE-----
Generated at Fri May 1 12:08:52 2026 by rpki-client