Manifest

$ rpki-client -vvf krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft
File:                     80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft (raw, json)
Hash identifier:          2Vfzl+IYqFzc0n4ccZv+bU/n+xGfeGyd9ojlVX/b/Wo=
Subject key identifier:   B7:04:43:DD:A6:90:B5:D3:CC:7C:20:24:36:BE:8A:17:E6:E2:AA:7B
Authority key identifier: 80:E4:4F:09:FF:20:1C:B2:BC:67:B1:6D:49:0F:7A:6D:10:CD:9D:F1
Certificate issuer:       /CN=80e44f09ff201cb2bc67b16d490f7a6d10cd9df1
Certificate serial:       1A3DA1458DDEB64810782A9CA699F2DB7298835C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gORPCf8gHLK8Z7FtSQ96bRDNnfE.cer
Subject info access:      rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft
Manifest number:          063D
Signing time:             Fri 24 Apr 2026 18:14:00 +0000
Manifest this update:     Fri 24 Apr 2026 18:09:00 +0000
Manifest next update:     Sat 25 Apr 2026 21:45:00 +0000
Files and hashes:         1: AS212934.asa (hash: 53XShpJ+NB5sf3EXMo5SBl7pYHowfGvfOlp+2zWjCfE=)
                          2: 80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.crl (hash: or3k95pu9kfIlqw0y5sqUsd+mQ/mQ14xQ+3/dkgdROY=)
Validation:               OK
Signature path:           rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.crl
                          rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gORPCf8gHLK8Z7FtSQ96bRDNnfE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Apr 2026 17:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:3d:a1:45:8d:de:b6:48:10:78:2a:9c:a6:99:f2:db:72:98:83:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80e44f09ff201cb2bc67b16d490f7a6d10cd9df1
        Validity
            Not Before: Apr 24 18:09:00 2026 GMT
            Not After : Apr 25 21:45:00 2026 GMT
        Subject: CN=B70443DDA690B5D3CC7C202436BE8A17E6E2AA7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:0c:8d:4e:92:08:ec:3b:2a:14:40:61:8c:36:
                    31:89:c2:d5:7c:ee:d8:1c:8d:6c:a8:c2:89:56:a5:
                    25:f8:57:73:eb:2a:cf:a6:95:ab:02:05:85:35:02:
                    5e:c7:13:6d:bd:f7:dc:fa:14:b1:1c:d9:e6:12:cf:
                    e8:ce:d8:d5:ee:85:28:55:51:02:60:a1:52:a4:0f:
                    41:b7:54:26:80:74:88:29:1e:90:b7:13:b1:9f:8e:
                    18:38:6e:8b:30:a3:50:1d:56:37:4c:75:33:0b:4e:
                    8e:62:a8:73:e9:31:f2:ec:82:86:24:00:86:fd:0e:
                    3f:8e:77:05:f7:7c:bb:11:cd:0e:43:a4:7e:4a:63:
                    15:f3:07:b1:34:60:0f:13:72:64:89:be:c9:ef:b8:
                    9f:ee:e2:ca:72:5b:ba:0f:58:b7:0a:e6:7d:c9:65:
                    0c:c0:56:1a:e1:24:34:78:95:0a:f8:22:35:14:82:
                    6a:55:75:08:1f:4c:96:08:83:d1:04:dc:a2:d2:6b:
                    5e:f6:33:ab:55:8a:06:2c:f4:06:53:29:12:04:bf:
                    c9:3e:18:00:78:d8:ea:69:d8:32:0e:ed:a7:93:4a:
                    42:85:8f:8e:92:1b:0b:ad:7a:b3:49:94:11:7d:0a:
                    ba:00:4d:e8:ad:05:d4:7c:18:e2:bd:32:6c:ea:c1:
                    8c:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:04:43:DD:A6:90:B5:D3:CC:7C:20:24:36:BE:8A:17:E6:E2:AA:7B
            X509v3 Authority Key Identifier:
                keyid:80:E4:4F:09:FF:20:1C:B2:BC:67:B1:6D:49:0F:7A:6D:10:CD:9D:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gORPCf8gHLK8Z7FtSQ96bRDNnfE.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:b2:4e:6f:4c:39:13:d6:ef:b6:4d:c1:51:e5:2e:70:4d:1c:
         c0:65:29:2e:53:16:11:0a:dd:8b:f8:ac:7a:18:d2:88:d5:f0:
         4e:3c:41:d4:3a:6f:b9:f6:84:b9:53:17:d7:a8:d8:f0:99:4a:
         8a:cf:29:db:1b:f8:e5:48:6f:dd:58:c9:de:72:f1:5e:74:e2:
         5d:c2:0e:bc:97:3a:70:28:a6:60:0b:c8:ef:52:b1:a9:04:dd:
         a6:f2:8b:9d:32:23:a2:18:31:26:1a:60:b8:a9:6b:4b:01:77:
         48:30:51:70:ff:1c:a3:aa:2d:29:05:b5:50:6e:31:bb:c0:de:
         f7:60:eb:2e:91:89:8f:cd:2e:1f:52:05:1f:ab:95:a1:b5:b9:
         f4:7d:64:81:68:b4:16:8b:c5:6b:75:a0:94:70:cc:2b:6b:79:
         90:cf:0c:ab:81:b9:df:e7:13:97:c7:28:b2:2b:27:85:b1:3c:
         fc:58:eb:ed:f4:b3:d7:16:a7:63:45:93:08:c7:66:a0:ba:ed:
         b4:ef:4f:b8:8d:7a:cb:d5:a5:6f:a9:59:82:77:9a:0d:c1:2b:
         39:f2:84:f8:ca:86:30:4b:cc:d3:6e:30:cb:d4:35:ae:1d:00:
         88:5c:bd:dc:11:8d:41:10:51:3f:48:a8:c4:bf:b7:d7:58:96:
         c2:72:95:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 24 22:56:01 2026 by rpki-client