Manifest

$ rpki-client -vvf krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft
File:                     80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft (raw, json)
Hash identifier:          DX7QJFDLeV22y/mM4aS0vCTXHy1rvjKLQtSOVS5vvYE=
Subject key identifier:   68:5C:02:00:97:4F:FB:31:D3:D8:BA:2D:89:1C:A8:2C:8F:03:25:86
Authority key identifier: 80:E4:4F:09:FF:20:1C:B2:BC:67:B1:6D:49:0F:7A:6D:10:CD:9D:F1
Certificate issuer:       /CN=80e44f09ff201cb2bc67b16d490f7a6d10cd9df1
Certificate serial:       1B1CAC1852CAD429C202A0120A4AAF0BB7BB34D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gORPCf8gHLK8Z7FtSQ96bRDNnfE.cer
Subject info access:      rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft
Manifest number:          0683
Signing time:             Wed 03 Jun 2026 00:06:55 +0000
Manifest this update:     Wed 03 Jun 2026 00:01:55 +0000
Manifest next update:     Thu 04 Jun 2026 03:55:55 +0000
Files and hashes:         1: 80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.crl (hash: VZ7nLVYTuriT3+jsP/K10yV5Gw5BkQ1ardm5A/uXyc4=)
                          2: AS212934.asa (hash: 53XShpJ+NB5sf3EXMo5SBl7pYHowfGvfOlp+2zWjCfE=)
Validation:               OK
Signature path:           rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.crl
                          rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gORPCf8gHLK8Z7FtSQ96bRDNnfE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 04 Jun 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:1c:ac:18:52:ca:d4:29:c2:02:a0:12:0a:4a:af:0b:b7:bb:34:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80e44f09ff201cb2bc67b16d490f7a6d10cd9df1
        Validity
            Not Before: Jun  3 00:01:55 2026 GMT
            Not After : Jun  4 03:55:55 2026 GMT
        Subject: CN=685C0200974FFB31D3D8BA2D891CA82C8F032586
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:29:a4:5a:30:4b:27:4c:97:16:2f:cf:f3:25:
                    3b:ae:59:7f:aa:46:40:e4:bc:d4:66:39:65:83:88:
                    90:fa:4d:b1:b8:00:a7:2f:18:0e:2f:98:30:01:90:
                    7b:bb:be:df:39:90:a5:3e:4f:90:b2:18:9d:c3:09:
                    b8:7e:02:71:b0:3f:55:fc:1a:ee:1c:eb:ab:95:a2:
                    3f:1e:9f:90:b0:61:9b:33:b1:41:28:3e:0c:97:d5:
                    62:f5:1b:2c:ed:17:21:e2:67:01:0d:65:5d:c6:c7:
                    0c:05:0c:33:07:32:1e:eb:cc:08:82:ed:7b:1e:b3:
                    a0:36:b2:db:81:37:95:22:ca:19:21:49:32:cf:01:
                    56:cc:df:c4:f9:2a:30:38:75:a2:2f:7f:14:7f:97:
                    91:5c:6a:db:0a:56:13:83:4e:19:de:7c:57:ec:ec:
                    f5:a3:a2:e8:06:30:3f:62:c9:a4:8f:16:7d:b9:32:
                    46:34:87:46:66:2c:21:9d:58:9a:6b:58:62:ff:da:
                    c3:dc:f7:65:3f:b6:a3:b8:b6:b7:f7:ff:f8:be:e2:
                    f2:55:71:49:49:44:9d:b1:32:e0:52:f1:32:1a:ce:
                    83:49:e4:01:f8:24:56:54:f6:03:c8:37:d3:0f:ed:
                    54:3e:15:41:ab:cb:60:4b:ad:99:41:d0:07:13:6b:
                    62:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:5C:02:00:97:4F:FB:31:D3:D8:BA:2D:89:1C:A8:2C:8F:03:25:86
            X509v3 Authority Key Identifier:
                keyid:80:E4:4F:09:FF:20:1C:B2:BC:67:B1:6D:49:0F:7A:6D:10:CD:9D:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gORPCf8gHLK8Z7FtSQ96bRDNnfE.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:7f:55:0f:8e:d0:b4:0f:69:04:c9:c4:65:d4:fb:e3:5a:60:
         27:95:1d:49:96:0c:14:e2:73:26:fe:70:12:1e:13:a6:af:76:
         d8:c9:79:f3:4c:ae:45:f4:d5:6e:5b:3c:a0:e2:ad:64:cd:4a:
         c5:9c:0d:9d:91:37:19:a1:9f:02:62:52:80:23:38:07:7d:62:
         b1:9d:05:97:d4:55:41:1e:53:f5:18:6a:d0:42:b2:ba:66:ea:
         4c:ae:1c:ef:e1:e8:2a:ff:12:13:fc:d4:12:85:da:20:cf:e7:
         11:9b:67:33:8d:a0:f9:5a:9f:4c:3c:98:99:37:fa:3f:47:50:
         1f:f8:60:fc:f7:04:e4:fd:9d:0e:9d:dd:60:2f:0b:f8:f2:fb:
         2a:4c:14:42:b7:06:81:cc:fe:7b:be:82:6f:3e:65:c1:15:74:
         fc:40:5c:b0:d4:db:87:41:e7:e5:4e:a5:9f:03:cf:dc:d5:0e:
         65:0a:8e:7b:a8:b7:c6:b4:05:6c:8c:55:ef:e5:8c:cf:c0:42:
         3e:de:9a:ee:42:f8:81:54:83:5f:40:32:df:5f:51:36:68:6b:
         03:c6:09:3b:ab:a0:f2:5b:fb:8c:53:3d:0b:8d:c4:91:6d:f2:
         f8:57:48:a9:1c:57:13:f1:36:7a:4c:90:23:e8:60:3a:33:8f:
         2f:14:19:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 10:39:39 2026 by rpki-client