Manifest

$ rpki-client -vvf krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft
File:                     80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft (raw, json)
Hash identifier:          GOgPnqePoYbmpIJ6LSBvqtDrDL+xKYv7LI1gc6mvtNQ=
Subject key identifier:   85:7E:0D:3D:C3:53:3D:E4:9C:8D:5D:27:62:18:87:3E:A1:E8:18:7D
Authority key identifier: 80:E4:4F:09:FF:20:1C:B2:BC:67:B1:6D:49:0F:7A:6D:10:CD:9D:F1
Certificate issuer:       /CN=80e44f09ff201cb2bc67b16d490f7a6d10cd9df1
Certificate serial:       5FC61D185351DAA2523DC09FAA29D7B126A78662
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gORPCf8gHLK8Z7FtSQ96bRDNnfE.cer
Subject info access:      rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft
Manifest number:          0601
Signing time:             Sat 21 Mar 2026 07:37:04 +0000
Manifest this update:     Sat 21 Mar 2026 07:32:04 +0000
Manifest next update:     Sun 22 Mar 2026 08:52:04 +0000
Files and hashes:         1: 80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.crl (hash: S7sBpT3p7CGuWiFenuzELumWsmMrQU1xOgm6fd5RDd4=)
                          2: AS212934.asa (hash: 53XShpJ+NB5sf3EXMo5SBl7pYHowfGvfOlp+2zWjCfE=)
Validation:               OK
Signature path:           rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.crl
                          rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gORPCf8gHLK8Z7FtSQ96bRDNnfE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 22 Mar 2026 08:52:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:c6:1d:18:53:51:da:a2:52:3d:c0:9f:aa:29:d7:b1:26:a7:86:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80e44f09ff201cb2bc67b16d490f7a6d10cd9df1
        Validity
            Not Before: Mar 21 07:32:04 2026 GMT
            Not After : Mar 22 08:52:04 2026 GMT
        Subject: CN=857E0D3DC3533DE49C8D5D276218873EA1E8187D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:4b:7c:09:a0:4e:44:58:bc:25:f1:96:fe:78:
                    97:41:bd:3d:d5:f4:15:bb:10:97:33:3e:31:f1:e8:
                    1d:90:aa:70:0a:16:00:1b:6c:6e:9a:0e:ae:41:b6:
                    bc:d5:16:f2:77:63:16:9a:c4:1c:9e:6b:75:38:73:
                    7e:ba:1e:cb:f9:4b:b3:40:84:ec:9e:09:cf:8c:3b:
                    d5:bf:88:37:4a:92:c7:6a:17:35:ac:8d:ee:79:ad:
                    4f:7b:10:a3:59:cd:69:c5:e5:50:4b:ae:cd:d0:2f:
                    8e:a3:3f:40:5a:35:b5:6f:2e:a8:a8:71:b4:49:99:
                    e9:11:59:3f:42:a5:28:5f:75:a6:02:68:78:21:82:
                    51:a6:5b:5e:e9:4b:94:94:84:1c:d3:8f:f4:c8:9b:
                    e3:e3:ae:92:1f:9f:a3:db:b0:10:3d:79:b5:d3:1e:
                    0f:c7:e5:1e:78:48:cb:dd:e5:75:bd:e4:64:80:3c:
                    5f:d2:a7:1b:60:6e:1a:67:e8:88:d6:2e:be:62:f3:
                    7f:49:52:cc:33:00:08:12:25:f0:ba:19:a0:7c:b7:
                    29:20:4d:14:d0:5d:de:09:0d:50:46:13:3d:40:e6:
                    00:8e:64:fb:c1:37:c1:c4:b9:2c:92:aa:80:10:12:
                    8c:64:e3:60:00:c5:93:f2:47:3c:c7:f0:cc:a6:06:
                    eb:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:7E:0D:3D:C3:53:3D:E4:9C:8D:5D:27:62:18:87:3E:A1:E8:18:7D
            X509v3 Authority Key Identifier:
                keyid:80:E4:4F:09:FF:20:1C:B2:BC:67:B1:6D:49:0F:7A:6D:10:CD:9D:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gORPCf8gHLK8Z7FtSQ96bRDNnfE.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         de:02:57:8d:ca:ee:5e:dc:cd:23:33:0e:96:5d:e6:4b:45:31:
         27:da:55:5f:ff:3e:3f:45:24:87:2f:fe:03:56:c1:2f:38:c5:
         ab:a5:cd:c1:b7:bf:91:d4:75:1e:63:9a:ff:3b:6d:e8:47:d3:
         8d:77:98:53:3a:b5:fa:c7:b0:3e:66:98:36:89:65:19:56:0a:
         79:55:58:53:d1:ca:36:2d:1c:d3:36:be:6f:b9:f4:09:78:29:
         6e:02:31:3c:7d:76:a6:0d:b6:fa:ab:8d:7a:2b:97:80:19:16:
         c5:9e:91:e1:15:74:79:7d:1d:c7:4c:9f:00:d9:8b:ee:8f:03:
         4a:2c:dc:70:75:60:c3:12:5a:04:68:ae:5c:2b:90:cd:68:56:
         15:7d:1e:9a:fe:5f:a2:30:b8:63:05:16:0a:28:33:0e:78:33:
         28:cb:57:a4:80:ae:29:82:73:53:75:b3:64:48:61:a6:fa:a2:
         c9:56:44:6e:66:af:8e:cd:0c:f8:ea:8e:a0:ec:f0:e0:76:1a:
         09:c3:5b:61:e0:e1:4d:46:db:49:26:64:21:d4:6e:f6:ef:bc:
         8b:4b:e2:c9:16:45:47:b3:4b:10:f3:4a:85:93:23:0e:da:71:
         29:36:80:6f:63:e9:f5:86:96:71:a3:ee:9d:22:97:03:af:d6:
         4a:6b:42:4d
-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgIUX8YdGFNR2qJSPcCfqinXsSanhmIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODBlNDRmMDlmZjIwMWNiMmJjNjdiMTZkNDkwZjdhNmQx
MGNkOWRmMTAeFw0yNjAzMjEwNzMyMDRaFw0yNjAzMjIwODUyMDRaMDMxMTAvBgNV
BAMTKDg1N0UwRDNEQzM1MzNERTQ5QzhENUQyNzYyMTg4NzNFQTFFODE4N0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcS3wJoE5EWLwl8Zb+eJdBvT3V
9BW7EJczPjHx6B2QqnAKFgAbbG6aDq5BtrzVFvJ3YxaaxByea3U4c366Hsv5S7NA
hOyeCc+MO9W/iDdKksdqFzWsje55rU97EKNZzWnF5VBLrs3QL46jP0BaNbVvLqio
cbRJmekRWT9CpShfdaYCaHghglGmW17pS5SUhBzTj/TIm+PjrpIfn6PbsBA9ebXT
Hg/H5R54SMvd5XW95GSAPF/Spxtgbhpn6IjWLr5i839JUswzAAgSJfC6GaB8tykg
TRTQXd4JDVBGEz1A5gCOZPvBN8HEuSySqoAQEoxk42AAxZPyRzzH8MymBuuTAgMB
AAGjggIaMIICFjAdBgNVHQ4EFgQUhX4NPcNTPeScjV0nYhiHPqHoGH0wHwYDVR0j
BBgwFoAUgORPCf8gHLK8Z7FtSQ96bRDNnfEwDgYDVR0PAQH/BAQDAgeAMH4GA1Ud
HwR3MHUwc6BxoG+GbXJzeW5jOi8va3JpbGwuYWNjdXJpc3RlY2hub2xvZ2llcy5j
YS9yZXBvL0FjY3VyaXMtVGVjaG5vbG9naWVzLzMvODBFNDRGMDlGRjIwMUNCMkJD
NjdCMTZENDkwRjdBNkQxMENEOURGMS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2dPUlBDZjhnSExLOFo3RnRTUTk2YlJETm5mRS5jZXIwgYkGCCsGAQUFBwELBH0w
ezB5BggrBgEFBQcwC4ZtcnN5bmM6Ly9rcmlsbC5hY2N1cmlzdGVjaG5vbG9naWVz
LmNhL3JlcG8vQWNjdXJpcy1UZWNobm9sb2dpZXMvMy84MEU0NEYwOUZGMjAxQ0Iy
QkM2N0IxNkQ0OTBGN0E2RDEwQ0Q5REYxLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG
AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3gJXjcruXtzNIzMO
ll3mS0UxJ9pVX/8+P0Ukhy/+A1bBLzjFq6XNwbe/kdR1HmOa/ztt6EfTjXeYUzq1
+sewPmaYNollGVYKeVVYU9HKNi0c0za+b7n0CXgpbgIxPH12pg22+quNeiuXgBkW
xZ6R4RV0eX0dx0yfANmL7o8DSizccHVgwxJaBGiuXCuQzWhWFX0emv5fojC4YwUW
CigzDngzKMtXpICuKYJzU3WzZEhhpvqiyVZEbmavjs0M+OqOoOzw4HYaCcNbYeDh
TUbbSSZkIdRu9u+8i0viyRZFR7NLEPNKhZMjDtpxKTaAb2Pp9YaWcaPunSKXA6/W
SmtCTQ==
-----END CERTIFICATE-----
Generated at Sat Mar 21 21:31:58 2026 by rpki-client