Manifest

$ rpki-client -vvvf krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft
File:                     80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft (raw, json)
Hash identifier:          K1+1kVotE03Bt+vB8wV5AXRxs9wDTYAAet6m0i5tDvI=
Subject key identifier:   41:82:98:28:91:21:00:E7:2F:E0:03:D5:71:F7:56:85:49:2F:30:5A
Authority key identifier: 80:E4:4F:09:FF:20:1C:B2:BC:67:B1:6D:49:0F:7A:6D:10:CD:9D:F1
Certificate issuer:       /CN=80e44f09ff201cb2bc67b16d490f7a6d10cd9df1
Certificate serial:       21E03CD1CA34D3A49966CB66B26AFD6B60FBC3BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gORPCf8gHLK8Z7FtSQ96bRDNnfE.cer
Subject info access:      rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft
Manifest number:          074A
Signing time:             Sun 20 Sep 2026 20:17:38 +0000
Manifest this update:     Sun 20 Sep 2026 20:12:38 +0000
Manifest next update:     Mon 21 Sep 2026 20:41:38 +0000
Files and hashes:         1: 80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.crl (hash: zme2YF0Wxn8xc3l0xMqSRddxqwa9JVGAX2BVEsp7C5Y=)
                          2: AS212934.asa (hash: KH7KksMzRSe8VPNzHTF1QlnpKUdKuJ5HkzzKYXH/3nU=)
Validation:               OK
Signature path:           rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.crl
                          rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gORPCf8gHLK8Z7FtSQ96bRDNnfE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 20:41:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:e0:3c:d1:ca:34:d3:a4:99:66:cb:66:b2:6a:fd:6b:60:fb:c3:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80e44f09ff201cb2bc67b16d490f7a6d10cd9df1
        Validity
            Not Before: Sep 20 20:12:38 2026 GMT
            Not After : Sep 21 20:41:38 2026 GMT
        Subject: CN=41829828912100E72FE003D571F75685492F305A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:99:9b:17:f2:aa:d9:ff:1b:39:80:6c:fe:82:
                    be:09:2c:1e:fd:b4:e0:53:97:95:05:88:4f:23:a1:
                    c4:2f:7d:3a:d0:d9:38:e1:bc:64:2f:94:9f:a2:18:
                    ea:a1:83:86:a5:b1:46:30:9a:15:a7:b9:d0:58:5d:
                    58:5d:fc:1a:bf:a6:f8:b1:1f:24:26:3d:44:05:98:
                    8b:c5:78:1b:8e:db:74:c3:bf:4b:58:85:93:5c:a8:
                    c8:3e:7c:4d:4a:ba:55:17:67:77:e1:93:e5:75:a1:
                    2a:8b:98:60:7b:fd:f8:00:54:3f:fa:95:d5:70:6f:
                    d1:a6:0d:fc:f2:fe:d2:7f:08:62:21:ec:70:0d:ab:
                    a5:64:ef:9e:34:35:67:ee:7d:97:43:ff:89:4b:44:
                    a9:3e:56:eb:43:17:85:5a:1e:dc:15:46:fa:9e:ab:
                    af:0f:30:9c:15:40:9f:96:cd:d4:9c:89:29:9d:08:
                    4a:f9:cd:a1:e9:cb:38:a1:e5:93:57:72:5f:bc:c3:
                    71:f9:c0:be:71:e6:f0:f9:43:9f:69:44:98:db:80:
                    d6:6c:53:9a:5d:2b:70:ab:93:f3:69:da:61:ca:33:
                    87:9b:35:a2:fa:95:c7:2b:d4:0b:5f:88:25:77:8a:
                    55:74:41:e6:43:0c:43:48:18:b7:de:9e:98:04:31:
                    40:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:82:98:28:91:21:00:E7:2F:E0:03:D5:71:F7:56:85:49:2F:30:5A
            X509v3 Authority Key Identifier:
                keyid:80:E4:4F:09:FF:20:1C:B2:BC:67:B1:6D:49:0F:7A:6D:10:CD:9D:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gORPCf8gHLK8Z7FtSQ96bRDNnfE.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:1f:96:3a:aa:a1:bf:5c:7f:54:86:8d:a8:23:3b:0c:96:44:
         d5:d9:6a:47:0f:bc:1f:23:f1:f0:fa:55:42:51:8f:0c:1e:75:
         a1:6c:8e:4e:f2:1c:41:a8:25:5b:26:d7:0f:72:ee:40:9b:7d:
         3c:d6:49:d9:ca:b5:48:6f:1d:a4:f4:ac:c5:78:a5:ba:37:69:
         ed:87:92:42:4b:90:9f:bf:a1:68:25:ca:f2:be:2f:31:f9:26:
         50:0f:12:81:81:07:da:9d:b5:1d:94:68:be:52:0a:e2:de:cc:
         9a:7b:7b:a0:40:10:42:83:60:5d:ba:35:37:ae:61:e1:6c:01:
         59:31:e8:a9:f4:af:9b:c1:34:44:f5:10:fe:b9:96:08:c6:46:
         ef:ca:49:b0:67:f3:f7:d0:66:3d:9d:47:9f:40:71:ac:f4:87:
         18:61:13:c5:0e:1f:ac:95:8b:8a:22:b5:0c:4e:58:28:12:3c:
         f5:5e:c2:32:89:ed:5d:f6:02:c7:c3:e9:24:6e:57:59:32:64:
         75:5d:26:b0:a6:6d:0f:99:74:af:a6:d7:2c:bc:5c:6d:87:a6:
         48:22:4e:56:3c:a2:bb:1f:c9:5b:c8:ca:82:5b:5d:a0:36:79:
         a8:05:92:9d:b8:bd:fe:0e:8f:93:d3:92:5c:7c:13:e2:02:10:
         24:30:c9:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 07:46:35 2026 by rpki-client