Manifest

$ rpki-client -vvf krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft
File:                     80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft (raw, json)
Hash identifier:          csj5Lj0vF4ggXY0Pi5SP7vcj4+1oz4PrOId21M47S84=
Subject key identifier:   71:1B:EF:4C:6A:B4:1A:D1:84:29:3B:6F:68:05:15:87:78:13:83:34
Authority key identifier: 80:E4:4F:09:FF:20:1C:B2:BC:67:B1:6D:49:0F:7A:6D:10:CD:9D:F1
Certificate issuer:       /CN=80e44f09ff201cb2bc67b16d490f7a6d10cd9df1
Certificate serial:       28D7DDEBC1EB8AEBB51656B94C7C493C3852DF72
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gORPCf8gHLK8Z7FtSQ96bRDNnfE.cer
Subject info access:      rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft
Manifest number:          064E
Signing time:             Sun 03 May 2026 21:02:21 +0000
Manifest this update:     Sun 03 May 2026 20:57:21 +0000
Manifest next update:     Mon 04 May 2026 21:50:21 +0000
Files and hashes:         1: AS212934.asa (hash: 53XShpJ+NB5sf3EXMo5SBl7pYHowfGvfOlp+2zWjCfE=)
                          2: 80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.crl (hash: zyK64COAwbZ++C+G5QQwfXScWF6+G4OfKxZd+Hg4ZzA=)
Validation:               OK
Signature path:           rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.crl
                          rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gORPCf8gHLK8Z7FtSQ96bRDNnfE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 04 May 2026 21:50:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:d7:dd:eb:c1:eb:8a:eb:b5:16:56:b9:4c:7c:49:3c:38:52:df:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80e44f09ff201cb2bc67b16d490f7a6d10cd9df1
        Validity
            Not Before: May  3 20:57:21 2026 GMT
            Not After : May  4 21:50:21 2026 GMT
        Subject: CN=711BEF4C6AB41AD184293B6F6805158778138334
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:d9:b4:b3:f2:16:c1:f1:f5:1b:dd:cf:3e:3e:
                    62:79:4a:ff:58:98:5e:20:c3:10:3f:cf:6c:46:92:
                    0e:d8:60:96:d6:aa:13:a0:d0:d8:11:3c:38:29:87:
                    f7:df:66:19:0c:8f:db:bc:11:f6:9b:95:3c:12:14:
                    71:e4:96:3c:1b:2d:21:35:1a:c1:27:8f:b1:d1:73:
                    ca:86:2d:ae:59:6f:c0:8f:94:5a:d2:a3:f7:54:c4:
                    eb:36:6a:f5:d9:ef:f3:a2:6f:04:3f:4f:b6:ac:a9:
                    eb:d3:62:25:ca:ee:50:c3:a1:66:f7:b3:35:be:45:
                    48:4d:0b:45:3b:6f:41:79:16:df:69:76:49:89:29:
                    cd:84:5d:cf:22:6d:4c:44:7d:e8:e7:9d:83:40:fe:
                    04:1f:4c:a2:e3:f9:a5:f9:8b:43:1d:59:bd:f8:9c:
                    86:d5:11:90:fe:99:fd:29:40:82:c9:45:0a:b8:bb:
                    a1:01:09:d8:14:0b:fa:f2:f8:1c:ab:6e:22:ac:45:
                    85:bf:4a:8e:d6:31:91:47:64:af:ff:39:26:75:6d:
                    8c:5f:0b:c7:4b:58:10:bb:d9:b6:ae:1a:be:00:0c:
                    11:68:64:03:b1:12:b7:20:52:7c:24:4d:74:62:d9:
                    23:ab:c9:cc:f5:e0:ac:76:4e:29:59:22:52:89:83:
                    49:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:1B:EF:4C:6A:B4:1A:D1:84:29:3B:6F:68:05:15:87:78:13:83:34
            X509v3 Authority Key Identifier:
                keyid:80:E4:4F:09:FF:20:1C:B2:BC:67:B1:6D:49:0F:7A:6D:10:CD:9D:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gORPCf8gHLK8Z7FtSQ96bRDNnfE.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:47:d6:06:2f:7a:a5:0f:04:6d:7b:02:7a:22:d6:df:f1:4b:
         4b:12:f8:48:b0:23:38:a4:15:f8:68:bb:dd:d5:2a:c4:11:6c:
         4f:d4:f7:56:1a:f1:d3:be:02:34:c6:c6:3d:32:50:64:3f:0d:
         b7:c7:5a:38:4f:52:f8:a6:3f:99:a0:64:d9:72:f3:ec:03:73:
         c2:8f:e5:d0:3e:06:99:76:90:7b:be:b8:71:bb:40:d5:6d:b7:
         df:a9:a7:17:aa:46:b5:49:86:49:25:c4:ec:03:bc:ca:3d:cb:
         33:95:fa:70:05:f8:e4:47:50:b3:24:ce:ec:33:59:93:41:2f:
         62:6e:be:91:7f:eb:c8:d4:c4:3d:8d:f4:74:9b:d0:de:af:04:
         e3:78:c7:81:27:2c:f0:9f:2f:70:94:96:eb:30:95:6b:3b:6f:
         2a:8f:ca:1c:69:44:b7:f4:07:81:64:3a:1e:1f:1c:69:0f:61:
         dc:78:14:b8:69:fb:39:11:9e:02:31:7f:ca:40:c0:b5:52:50:
         b5:25:31:6d:08:fa:a0:bc:65:5f:03:3b:b7:f2:f2:8d:58:0c:
         0b:ea:60:3b:7f:0a:95:06:8b:94:a2:cc:51:a3:76:0e:56:25:
         e0:f0:bd:d0:ed:77:71:59:73:75:e1:05:a0:f9:a6:c8:41:b6:
         a1:b9:23:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 4 12:34:34 2026 by rpki-client