Manifest

$ rpki-client -vvf krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft
File:                     80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft (raw, json)
Hash identifier:          M7aH4PXr4Jwn9lTslxuzdT4H8MgqZ1mk0X0GqiCpDCc=
Subject key identifier:   91:B7:40:16:77:61:CE:3B:54:41:10:07:E7:EF:6B:27:3A:FD:E3:9C
Authority key identifier: 80:E4:4F:09:FF:20:1C:B2:BC:67:B1:6D:49:0F:7A:6D:10:CD:9D:F1
Certificate issuer:       /CN=80e44f09ff201cb2bc67b16d490f7a6d10cd9df1
Certificate serial:       20CF1AA4456FC0A2F1597B8717AAAA8ED76A6B39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gORPCf8gHLK8Z7FtSQ96bRDNnfE.cer
Subject info access:      rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft
Manifest number:          060C
Signing time:             Fri 27 Mar 2026 13:21:05 +0000
Manifest this update:     Fri 27 Mar 2026 13:16:05 +0000
Manifest next update:     Sat 28 Mar 2026 16:17:05 +0000
Files and hashes:         1: AS212934.asa (hash: 53XShpJ+NB5sf3EXMo5SBl7pYHowfGvfOlp+2zWjCfE=)
                          2: 80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.crl (hash: P98LO/AZ09BjkSrxqs+3u1BOlhDYWIHrq1QQzEb3MMQ=)
Validation:               OK
Signature path:           rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.crl
                          rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gORPCf8gHLK8Z7FtSQ96bRDNnfE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Mar 2026 16:17:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:cf:1a:a4:45:6f:c0:a2:f1:59:7b:87:17:aa:aa:8e:d7:6a:6b:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80e44f09ff201cb2bc67b16d490f7a6d10cd9df1
        Validity
            Not Before: Mar 27 13:16:05 2026 GMT
            Not After : Mar 28 16:17:05 2026 GMT
        Subject: CN=91B740167761CE3B54411007E7EF6B273AFDE39C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:6f:8d:c2:d8:88:91:c6:af:8a:02:37:a2:43:
                    bf:9b:8c:6b:4d:45:df:43:41:58:0d:5a:cc:ef:f4:
                    b4:65:bd:39:88:91:3b:46:d3:d1:5d:87:1a:a9:d9:
                    3b:bf:9e:44:01:93:62:35:45:7a:e9:b5:ab:64:04:
                    da:50:34:ad:1c:60:24:df:50:74:9a:2b:19:0b:11:
                    55:1f:aa:8e:53:90:45:32:13:5d:ae:73:bf:0c:4e:
                    1a:2f:21:61:96:d9:32:df:50:1e:f7:da:31:85:ed:
                    b8:d3:6c:99:c6:c6:ca:3b:78:e7:70:20:6f:bf:26:
                    4c:b6:36:4f:5e:7f:d5:75:c1:d6:4f:a7:cb:11:bc:
                    6b:0c:83:a7:73:fd:19:11:ba:7f:fa:c6:2f:b8:ee:
                    54:31:d2:7e:5e:e9:43:07:78:82:3b:47:11:87:c3:
                    92:8f:23:cd:c6:3a:7a:4a:c9:3a:88:50:9e:41:70:
                    5c:98:e8:5e:8b:c7:b1:e6:59:e0:9f:1e:da:f7:26:
                    8d:aa:f2:07:8b:e5:7f:f1:de:f9:ae:aa:06:98:61:
                    4f:6a:c3:c4:a4:38:3b:64:af:87:df:65:bc:ef:04:
                    df:06:08:24:3c:9e:ab:f7:38:23:b8:7c:a5:9d:4a:
                    7b:92:c5:2d:9b:3b:fd:2f:2f:59:4b:73:b5:44:99:
                    39:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:B7:40:16:77:61:CE:3B:54:41:10:07:E7:EF:6B:27:3A:FD:E3:9C
            X509v3 Authority Key Identifier:
                keyid:80:E4:4F:09:FF:20:1C:B2:BC:67:B1:6D:49:0F:7A:6D:10:CD:9D:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gORPCf8gHLK8Z7FtSQ96bRDNnfE.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:63:a8:d1:81:d9:49:e8:bb:fe:9c:e0:dc:5d:02:5a:9f:c9:
         e4:77:75:c9:34:ad:76:83:ec:68:eb:8e:bc:35:57:cf:86:97:
         de:2e:ce:1a:a2:cd:ab:94:97:2e:89:00:6c:51:a3:d1:e9:3b:
         18:41:2c:49:35:e2:22:a1:ad:8a:54:3d:6a:b2:37:74:49:46:
         14:2c:15:c5:1c:2a:6d:a0:55:8c:b1:35:d8:d2:60:16:76:22:
         58:24:92:aa:20:bc:b4:36:3d:33:b5:23:58:64:96:bf:07:a8:
         14:b9:2a:ce:ea:af:7d:00:d1:50:71:e2:ef:b5:4a:08:46:5d:
         ed:f7:e3:d6:2c:26:a2:bd:cb:66:8a:fe:3f:e6:32:76:d5:f8:
         3c:5e:2a:76:86:9a:56:f1:ac:cb:99:79:77:7d:03:44:ac:6d:
         26:39:2f:0c:df:f4:01:96:f2:6d:42:c3:11:06:16:cf:99:71:
         7e:ca:c6:4b:00:4d:fd:53:44:19:b9:e6:cc:7b:29:28:11:ed:
         2c:fb:81:04:7e:6d:97:78:86:e3:e5:60:65:46:05:b9:af:fe:
         df:00:ac:d5:27:be:4d:41:ae:ef:69:dc:df:9f:a8:7f:97:00:
         f8:e6:1b:2e:eb:d0:4c:4f:1c:2c:36:23:b8:9b:10:22:79:10:
         12:1b:bb:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 04:00:38 2026 by rpki-client