Manifest

$ rpki-client -vvf krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft
File:                     80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft (raw, json)
Hash identifier:          Oh1swsdllw6JSSYhUR8kyz/vKCAmxlPVD/CYM8ehbUs=
Subject key identifier:   C0:1E:17:0C:D6:48:33:A9:99:B9:A3:25:E8:70:BC:03:A4:D6:A1:8D
Authority key identifier: 80:E4:4F:09:FF:20:1C:B2:BC:67:B1:6D:49:0F:7A:6D:10:CD:9D:F1
Certificate issuer:       /CN=80e44f09ff201cb2bc67b16d490f7a6d10cd9df1
Certificate serial:       345B4A043CAD04057159C52B8EFE52E804256B23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gORPCf8gHLK8Z7FtSQ96bRDNnfE.cer
Subject info access:      rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft
Manifest number:          063C
Signing time:             Fri 24 Apr 2026 00:08:13 +0000
Manifest this update:     Fri 24 Apr 2026 00:03:13 +0000
Manifest next update:     Sat 25 Apr 2026 02:12:13 +0000
Files and hashes:         1: AS212934.asa (hash: 53XShpJ+NB5sf3EXMo5SBl7pYHowfGvfOlp+2zWjCfE=)
                          2: 80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.crl (hash: if/6W3EbI+AIhFPDJT60YRsHLkATjKaT3Q5kKByZQxQ=)
Validation:               OK
Signature path:           rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.crl
                          rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gORPCf8gHLK8Z7FtSQ96bRDNnfE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Apr 2026 02:12:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:5b:4a:04:3c:ad:04:05:71:59:c5:2b:8e:fe:52:e8:04:25:6b:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80e44f09ff201cb2bc67b16d490f7a6d10cd9df1
        Validity
            Not Before: Apr 24 00:03:13 2026 GMT
            Not After : Apr 25 02:12:13 2026 GMT
        Subject: CN=C01E170CD64833A999B9A325E870BC03A4D6A18D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ef:ec:57:1b:45:49:62:2d:11:1a:9a:0c:ca:
                    2a:68:86:dc:70:d2:db:d3:f5:70:c5:f1:35:82:45:
                    52:1b:fc:2e:3a:d9:7a:5c:2b:56:b5:e7:68:57:0c:
                    2c:2c:12:70:ad:17:b8:75:b5:1f:6d:f4:51:64:8f:
                    0a:3a:df:fb:75:e8:95:fa:60:56:26:e4:86:66:33:
                    b1:28:f0:01:40:5d:99:02:9a:8e:54:63:72:df:a5:
                    d2:4b:6f:d8:f6:75:32:d7:80:4e:48:a7:4c:b7:14:
                    d9:47:8e:8a:12:e6:b2:36:13:9a:d9:12:ff:92:0e:
                    ad:e2:df:36:04:81:b9:cb:14:e7:e1:57:aa:4e:db:
                    f1:24:b5:36:1c:be:cc:aa:72:1c:4f:80:58:5c:62:
                    4a:2c:7b:b9:d5:58:d3:75:89:8f:55:89:ed:4e:e6:
                    a6:9f:4e:10:fa:2a:e7:a3:a0:f3:5f:ed:a8:fe:53:
                    05:d6:83:bb:db:24:23:c5:cd:66:e7:ef:ca:d2:aa:
                    ae:4c:bb:59:01:d2:1b:09:ec:46:b5:b7:dc:aa:a8:
                    c7:ed:4d:24:75:e2:17:40:a1:2d:55:05:fd:81:13:
                    56:f8:8f:28:af:de:f5:1a:89:8b:38:e0:80:95:54:
                    07:02:1d:24:e9:f1:9e:63:be:ea:f1:6b:1f:fc:3b:
                    9d:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:1E:17:0C:D6:48:33:A9:99:B9:A3:25:E8:70:BC:03:A4:D6:A1:8D
            X509v3 Authority Key Identifier:
                keyid:80:E4:4F:09:FF:20:1C:B2:BC:67:B1:6D:49:0F:7A:6D:10:CD:9D:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gORPCf8gHLK8Z7FtSQ96bRDNnfE.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:86:f1:b3:ec:e5:26:5a:3a:20:b1:b3:22:ee:f9:0a:74:89:
         17:45:90:a4:91:9d:b8:16:11:bf:de:7e:5f:14:86:c3:1f:1d:
         82:de:a8:d1:d1:c8:ca:53:7a:12:e9:0e:57:b0:25:a5:e0:07:
         b3:c2:a1:83:a0:a8:4b:eb:20:9d:0c:e9:35:18:69:b6:73:36:
         a1:e9:b8:e0:54:a6:b8:25:5b:22:36:6c:bc:be:86:e3:fd:05:
         4a:8e:74:0a:db:4d:6e:c1:83:6b:46:21:0b:a0:a7:66:75:6c:
         1a:fc:14:5b:da:e9:6e:2c:03:a7:72:a4:93:f1:5a:e1:9d:e5:
         11:bc:84:2b:f6:b3:54:84:a9:9e:db:19:64:0e:e3:b6:e0:e7:
         6d:68:e9:eb:25:ac:0c:12:23:81:d4:a9:96:2c:02:20:64:43:
         54:50:38:9b:36:06:90:b9:e1:6e:13:7e:b5:94:24:7f:92:2b:
         1f:6d:aa:a3:d1:2a:bc:93:e7:b4:5c:b2:7c:26:2c:8e:87:ba:
         bd:32:7b:44:65:74:8a:64:9e:cf:05:1b:65:b5:1b:96:53:1d:
         5d:5e:96:29:90:55:a2:a5:31:20:84:2a:dd:5b:33:c1:7c:c3:
         d3:b0:a3:97:6e:6d:dd:d7:37:bc:96:1e:38:10:a7:62:e9:4e:
         cf:06:9e:2b
-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgIUNFtKBDytBAVxWcUrjv5S6AQlayMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODBlNDRmMDlmZjIwMWNiMmJjNjdiMTZkNDkwZjdhNmQx
MGNkOWRmMTAeFw0yNjA0MjQwMDAzMTNaFw0yNjA0MjUwMjEyMTNaMDMxMTAvBgNV
BAMTKEMwMUUxNzBDRDY0ODMzQTk5OUI5QTMyNUU4NzBCQzAzQTRENkExOEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm7+xXG0VJYi0RGpoMyipohtxw
0tvT9XDF8TWCRVIb/C462XpcK1a152hXDCwsEnCtF7h1tR9t9FFkjwo63/t16JX6
YFYm5IZmM7Eo8AFAXZkCmo5UY3LfpdJLb9j2dTLXgE5Ip0y3FNlHjooS5rI2E5rZ
Ev+SDq3i3zYEgbnLFOfhV6pO2/EktTYcvsyqchxPgFhcYkose7nVWNN1iY9Vie1O
5qafThD6KuejoPNf7aj+UwXWg7vbJCPFzWbn78rSqq5Mu1kB0hsJ7Ea1t9yqqMft
TSR14hdAoS1VBf2BE1b4jyiv3vUaiYs44ICVVAcCHSTp8Z5jvurxax/8O50JAgMB
AAGjggIaMIICFjAdBgNVHQ4EFgQUwB4XDNZIM6mZuaMl6HC8A6TWoY0wHwYDVR0j
BBgwFoAUgORPCf8gHLK8Z7FtSQ96bRDNnfEwDgYDVR0PAQH/BAQDAgeAMH4GA1Ud
HwR3MHUwc6BxoG+GbXJzeW5jOi8va3JpbGwuYWNjdXJpc3RlY2hub2xvZ2llcy5j
YS9yZXBvL0FjY3VyaXMtVGVjaG5vbG9naWVzLzMvODBFNDRGMDlGRjIwMUNCMkJD
NjdCMTZENDkwRjdBNkQxMENEOURGMS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2dPUlBDZjhnSExLOFo3RnRTUTk2YlJETm5mRS5jZXIwgYkGCCsGAQUFBwELBH0w
ezB5BggrBgEFBQcwC4ZtcnN5bmM6Ly9rcmlsbC5hY2N1cmlzdGVjaG5vbG9naWVz
LmNhL3JlcG8vQWNjdXJpcy1UZWNobm9sb2dpZXMvMy84MEU0NEYwOUZGMjAxQ0Iy
QkM2N0IxNkQ0OTBGN0E2RDEwQ0Q5REYxLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG
AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfIbxs+zlJlo6ILGz
Iu75CnSJF0WQpJGduBYRv95+XxSGwx8dgt6o0dHIylN6EukOV7AlpeAHs8Khg6Co
S+sgnQzpNRhptnM2oem44FSmuCVbIjZsvL6G4/0FSo50CttNbsGDa0YhC6CnZnVs
GvwUW9rpbiwDp3Kkk/Fa4Z3lEbyEK/azVISpntsZZA7jtuDnbWjp6yWsDBIjgdSp
liwCIGRDVFA4mzYGkLnhbhN+tZQkf5IrH22qo9EqvJPntFyyfCYsjoe6vTJ7RGV0
imSezwUbZbUbllMdXV6WKZBVoqUxIIQq3VszwXzD07Cjl25t3dc3vJYeOBCnYulO
zwaeKw==
-----END CERTIFICATE-----
Generated at Fri Apr 24 09:57:15 2026 by rpki-client