Manifest

$ rpki-client -vvf krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft
File:                     80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft (raw, json)
Hash identifier:          OIDyGugznOi0FdFUH4g2u9htuipxKPy2i5XQZCEK9c4=
Subject key identifier:   7A:B7:EB:E0:E0:AA:27:5C:64:EA:58:DE:D8:6F:96:6B:0A:6F:2E:52
Authority key identifier: 80:E4:4F:09:FF:20:1C:B2:BC:67:B1:6D:49:0F:7A:6D:10:CD:9D:F1
Certificate issuer:       /CN=80e44f09ff201cb2bc67b16d490f7a6d10cd9df1
Certificate serial:       13617A0BDE604375797F675719B93C70C298BCFA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gORPCf8gHLK8Z7FtSQ96bRDNnfE.cer
Subject info access:      rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft
Manifest number:          0689
Signing time:             Sat 06 Jun 2026 07:48:46 +0000
Manifest this update:     Sat 06 Jun 2026 07:43:46 +0000
Manifest next update:     Sun 07 Jun 2026 09:18:46 +0000
Files and hashes:         1: 80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.crl (hash: xg087HNWXV/HIQq/Vcx0XcRsajKxehBbF4LtwVoMPFk=)
                          2: AS212934.asa (hash: 53XShpJ+NB5sf3EXMo5SBl7pYHowfGvfOlp+2zWjCfE=)
Validation:               OK
Signature path:           rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.crl
                          rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gORPCf8gHLK8Z7FtSQ96bRDNnfE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Jun 2026 02:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:61:7a:0b:de:60:43:75:79:7f:67:57:19:b9:3c:70:c2:98:bc:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80e44f09ff201cb2bc67b16d490f7a6d10cd9df1
        Validity
            Not Before: Jun  6 07:43:46 2026 GMT
            Not After : Jun  7 09:18:46 2026 GMT
        Subject: CN=7AB7EBE0E0AA275C64EA58DED86F966B0A6F2E52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ce:f4:7e:8d:e8:16:d7:37:73:dc:a9:cd:8d:
                    d2:aa:bc:20:fb:c7:f6:eb:c3:66:98:52:fb:ca:38:
                    55:dd:ff:71:1c:e3:c0:90:ad:60:10:eb:6a:08:59:
                    b3:7b:c6:52:7f:fc:f8:19:d3:a2:f0:ef:51:1a:74:
                    94:46:42:44:89:02:0a:fb:b6:d4:52:59:b6:a8:02:
                    99:9b:4f:a9:17:f2:b2:63:02:f5:58:cc:6b:8e:70:
                    d2:64:73:92:52:55:0f:e7:09:b9:fa:13:3f:6b:78:
                    80:27:85:9e:e2:61:24:05:75:da:b8:91:30:cc:3d:
                    fe:81:1a:a0:b2:7f:23:f9:df:b2:40:67:59:f1:21:
                    75:1a:c7:30:8a:a5:f5:0b:9a:aa:2d:77:55:3c:9a:
                    a9:93:7e:0b:ef:bf:19:41:f1:a5:2b:7c:94:f2:71:
                    d8:f5:9c:1d:ff:25:69:c3:5a:96:76:b7:73:4b:12:
                    3b:30:a2:44:e9:aa:68:62:2a:1d:9a:3d:d6:bf:99:
                    00:53:f6:3b:55:f4:9f:96:9e:66:bc:d3:be:ea:54:
                    f5:12:fd:be:1e:b1:6e:92:c8:2d:c3:ac:86:eb:73:
                    e9:01:6c:1a:1e:e9:2e:e3:d2:96:00:35:3e:cd:00:
                    d7:50:a1:c1:68:72:6f:73:ba:35:08:02:bc:c0:10:
                    e8:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:B7:EB:E0:E0:AA:27:5C:64:EA:58:DE:D8:6F:96:6B:0A:6F:2E:52
            X509v3 Authority Key Identifier:
                keyid:80:E4:4F:09:FF:20:1C:B2:BC:67:B1:6D:49:0F:7A:6D:10:CD:9D:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gORPCf8gHLK8Z7FtSQ96bRDNnfE.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:df:4d:de:c7:3a:e6:a5:d6:c1:7c:66:81:b5:fd:76:d5:2f:
         ac:04:33:20:c5:bc:82:ed:c7:ef:42:f0:ac:91:50:49:8b:48:
         cf:31:87:59:ac:bd:1a:35:ec:c1:24:27:ed:0c:87:82:9a:72:
         62:45:b4:e8:99:6d:1a:e4:0a:06:de:39:86:72:90:73:cd:c9:
         55:33:5e:9c:9b:c1:6e:fc:a5:ca:92:9d:17:26:20:8e:ab:aa:
         b5:6c:ba:eb:21:c4:41:32:1d:d8:50:d6:0e:43:39:39:1f:5b:
         a5:64:0e:45:91:78:9c:14:ae:d6:2d:34:6b:e7:c4:f3:5b:8d:
         b6:60:48:4b:8c:c7:d5:c1:8b:fc:59:e4:75:4e:8a:5d:c0:d6:
         87:b1:3e:1c:85:b1:f6:5a:18:08:f3:a2:8b:d1:7c:e5:eb:32:
         80:9f:d8:80:73:f1:bf:08:f0:44:fc:c2:98:c3:58:3a:e8:07:
         4b:5d:d4:07:35:2c:52:48:a0:de:2d:89:d1:55:dc:1b:2f:79:
         4f:c3:c1:c6:e8:f0:a7:75:01:bf:1a:91:dc:6c:ca:f5:8e:75:
         7e:50:63:e9:1c:4c:d6:48:30:eb:a7:3a:82:cd:da:f9:04:40:
         82:bf:98:93:1a:5f:3d:97:ed:82:89:87:dd:b7:16:a2:dc:b6:
         c5:66:ed:92
-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgIUE2F6C95gQ3V5f2dXGbk8cMKYvPowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODBlNDRmMDlmZjIwMWNiMmJjNjdiMTZkNDkwZjdhNmQx
MGNkOWRmMTAeFw0yNjA2MDYwNzQzNDZaFw0yNjA2MDcwOTE4NDZaMDMxMTAvBgNV
BAMTKDdBQjdFQkUwRTBBQTI3NUM2NEVBNThERUQ4NkY5NjZCMEE2RjJFNTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4zvR+jegW1zdz3KnNjdKqvCD7
x/brw2aYUvvKOFXd/3Ec48CQrWAQ62oIWbN7xlJ//PgZ06Lw71EadJRGQkSJAgr7
ttRSWbaoApmbT6kX8rJjAvVYzGuOcNJkc5JSVQ/nCbn6Ez9reIAnhZ7iYSQFddq4
kTDMPf6BGqCyfyP537JAZ1nxIXUaxzCKpfULmqotd1U8mqmTfgvvvxlB8aUrfJTy
cdj1nB3/JWnDWpZ2t3NLEjswokTpqmhiKh2aPda/mQBT9jtV9J+Wnma8077qVPUS
/b4esW6SyC3DrIbrc+kBbBoe6S7j0pYANT7NANdQocFocm9zujUIArzAEOh5AgMB
AAGjggIaMIICFjAdBgNVHQ4EFgQUerfr4OCqJ1xk6lje2G+WawpvLlIwHwYDVR0j
BBgwFoAUgORPCf8gHLK8Z7FtSQ96bRDNnfEwDgYDVR0PAQH/BAQDAgeAMH4GA1Ud
HwR3MHUwc6BxoG+GbXJzeW5jOi8va3JpbGwuYWNjdXJpc3RlY2hub2xvZ2llcy5j
YS9yZXBvL0FjY3VyaXMtVGVjaG5vbG9naWVzLzMvODBFNDRGMDlGRjIwMUNCMkJD
NjdCMTZENDkwRjdBNkQxMENEOURGMS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2dPUlBDZjhnSExLOFo3RnRTUTk2YlJETm5mRS5jZXIwgYkGCCsGAQUFBwELBH0w
ezB5BggrBgEFBQcwC4ZtcnN5bmM6Ly9rcmlsbC5hY2N1cmlzdGVjaG5vbG9naWVz
LmNhL3JlcG8vQWNjdXJpcy1UZWNobm9sb2dpZXMvMy84MEU0NEYwOUZGMjAxQ0Iy
QkM2N0IxNkQ0OTBGN0E2RDEwQ0Q5REYxLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG
AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnN9N3sc65qXWwXxm
gbX9dtUvrAQzIMW8gu3H70LwrJFQSYtIzzGHWay9GjXswSQn7QyHgppyYkW06Jlt
GuQKBt45hnKQc83JVTNenJvBbvylypKdFyYgjquqtWy66yHEQTId2FDWDkM5OR9b
pWQORZF4nBSu1i00a+fE81uNtmBIS4zH1cGL/FnkdU6KXcDWh7E+HIWx9loYCPOi
i9F85esygJ/YgHPxvwjwRPzCmMNYOugHS13UBzUsUkig3i2J0VXcGy95T8PBxujw
p3UBvxqR3GzK9Y51flBj6RxM1kgw66c6gs3a+QRAgr+YkxpfPZftgomH3bcWoty2
xWbtkg==
-----END CERTIFICATE-----
Generated at Sat Jun 6 12:15:16 2026 by rpki-client