Manifest

$ rpki-client -vvf krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft
File:                     80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft (raw, json)
Hash identifier:          1ZeE5aMk8VQOXsP+BSLIFNLclOtfnmun9Uz42zzQ3as=
Subject key identifier:   9A:5A:3C:BD:1D:F4:6A:28:EB:7C:B2:9A:48:DC:0B:7D:3F:45:79:6F
Authority key identifier: 80:E4:4F:09:FF:20:1C:B2:BC:67:B1:6D:49:0F:7A:6D:10:CD:9D:F1
Certificate issuer:       /CN=80e44f09ff201cb2bc67b16d490f7a6d10cd9df1
Certificate serial:       4471EA332217CE3754A7751A38D710FD31EF83BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gORPCf8gHLK8Z7FtSQ96bRDNnfE.cer
Subject info access:      rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft
Manifest number:          05FF
Signing time:             Thu 19 Mar 2026 19:12:04 +0000
Manifest this update:     Thu 19 Mar 2026 19:07:04 +0000
Manifest next update:     Fri 20 Mar 2026 22:55:04 +0000
Files and hashes:         1: AS212934.asa (hash: 53XShpJ+NB5sf3EXMo5SBl7pYHowfGvfOlp+2zWjCfE=)
                          2: 80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.crl (hash: HS4EXPaAFBca3fYyxaW4jlrGIU8CoM885AafQN3dNnA=)
Validation:               OK
Signature path:           rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.crl
                          rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gORPCf8gHLK8Z7FtSQ96bRDNnfE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 20 Mar 2026 22:55:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:71:ea:33:22:17:ce:37:54:a7:75:1a:38:d7:10:fd:31:ef:83:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80e44f09ff201cb2bc67b16d490f7a6d10cd9df1
        Validity
            Not Before: Mar 19 19:07:04 2026 GMT
            Not After : Mar 20 22:55:04 2026 GMT
        Subject: CN=9A5A3CBD1DF46A28EB7CB29A48DC0B7D3F45796F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:95:d8:1d:76:51:7f:5f:1d:b5:17:7b:6b:54:
                    aa:23:23:03:b0:6c:db:90:28:ae:a1:13:9d:01:3c:
                    ba:52:ec:c5:75:12:77:c1:5d:99:c5:af:76:10:ec:
                    ac:c4:47:23:63:b2:0f:5a:9e:a9:05:d6:86:8f:85:
                    93:79:eb:6d:9e:b7:0e:f5:c8:6a:a9:fb:a1:2e:74:
                    0c:5a:90:e4:57:5f:60:a8:de:a2:be:5b:e8:e3:a3:
                    84:3c:3c:25:cf:f6:69:66:ca:1a:77:6e:a0:82:5a:
                    9a:a0:fe:e0:09:1d:c9:9b:9c:4a:2f:68:b0:a7:90:
                    4e:2e:0c:59:d2:55:be:bc:5e:a3:a3:1f:44:53:d4:
                    f4:e9:17:52:51:90:2a:bf:1b:01:2f:39:32:83:11:
                    82:ea:bf:9f:bf:44:58:5d:8b:2f:ed:41:27:a6:d0:
                    38:00:25:87:e6:ff:37:0d:4a:66:f7:38:6b:c5:8d:
                    1d:a4:17:16:22:c9:30:d0:33:dd:61:bd:40:df:03:
                    a4:78:d2:a0:b6:4a:c2:34:0e:bf:4c:85:cb:67:65:
                    99:ac:e0:f6:5b:18:25:98:e4:6e:b5:04:e9:c4:d7:
                    0c:75:5d:61:de:4b:2c:db:5b:bd:0b:69:e8:29:ea:
                    31:01:60:a9:98:7e:ee:ba:70:3a:f3:dd:eb:32:f3:
                    7c:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:5A:3C:BD:1D:F4:6A:28:EB:7C:B2:9A:48:DC:0B:7D:3F:45:79:6F
            X509v3 Authority Key Identifier:
                keyid:80:E4:4F:09:FF:20:1C:B2:BC:67:B1:6D:49:0F:7A:6D:10:CD:9D:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gORPCf8gHLK8Z7FtSQ96bRDNnfE.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:c9:9a:37:b0:06:5e:e8:b6:5c:51:4f:bd:22:e8:13:81:f4:
         60:99:00:f2:43:32:79:f3:d3:bc:cd:cb:d7:1b:cc:0d:0f:67:
         10:89:4e:fe:ff:43:71:e7:55:01:63:d0:a1:9a:77:8d:e7:b1:
         d7:a7:9b:70:a6:2d:ca:67:a4:0d:2a:39:2b:19:28:c6:cb:6f:
         c7:9d:74:82:d6:e0:80:e0:0e:7b:f5:f9:39:46:58:d0:29:10:
         44:95:e5:6c:9e:cc:5a:8b:b1:e7:0a:64:9d:f0:28:d6:a6:15:
         f2:18:a3:13:2a:57:fb:b0:83:6c:72:2b:cc:c8:1b:8e:96:0d:
         fe:02:a4:4b:d7:a3:a3:95:97:e7:98:82:bb:42:31:c9:87:67:
         93:c6:a3:d2:97:cd:fc:03:e8:53:51:51:91:b7:16:11:d6:7d:
         9f:30:65:02:46:6e:d5:ef:52:08:0a:d1:24:9e:47:37:04:9d:
         dd:87:ea:d5:69:35:6c:f5:ba:c7:a3:84:7c:d5:07:20:34:3d:
         8b:b7:5a:42:05:ca:3a:e4:e1:8a:2f:eb:4d:c3:79:17:63:30:
         18:33:4d:e3:e3:c3:e7:1a:71:67:f3:af:2b:a0:13:f0:98:25:
         90:ac:fc:c7:b8:da:13:03:d7:34:e0:be:e9:f0:8a:b9:42:02:
         39:62:6a:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 20 04:25:41 2026 by rpki-client