Manifest

$ rpki-client -vvvf krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft
File:                     80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft (raw, json)
Hash identifier:          BCPimsxdO9EqfIrF0ucU1mV2/ty7/pJ0HrS4EWeZ4tE=
Subject key identifier:   54:70:6F:6D:1B:16:C0:39:B6:9B:60:E9:65:4D:FA:E4:28:E8:B5:63
Authority key identifier: 80:E4:4F:09:FF:20:1C:B2:BC:67:B1:6D:49:0F:7A:6D:10:CD:9D:F1
Certificate issuer:       /CN=80e44f09ff201cb2bc67b16d490f7a6d10cd9df1
Certificate serial:       4D097E0DDB86146564F208287746F0F6883F3E6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gORPCf8gHLK8Z7FtSQ96bRDNnfE.cer
Subject info access:      rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft
Manifest number:          0767
Signing time:             Mon 12 Oct 2026 16:27:51 +0000
Manifest this update:     Mon 12 Oct 2026 16:22:51 +0000
Manifest next update:     Tue 13 Oct 2026 19:47:51 +0000
Files and hashes:         1: 80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.crl (hash: mZTKbLwoBOeDDXTvGtqKxIj8Y5DIbC00oY2F6M+DhLg=)
                          2: AS212934.asa (hash: KH7KksMzRSe8VPNzHTF1QlnpKUdKuJ5HkzzKYXH/3nU=)
Validation:               OK
Signature path:           rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.crl
                          rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gORPCf8gHLK8Z7FtSQ96bRDNnfE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 Oct 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:09:7e:0d:db:86:14:65:64:f2:08:28:77:46:f0:f6:88:3f:3e:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80e44f09ff201cb2bc67b16d490f7a6d10cd9df1
        Validity
            Not Before: Oct 12 16:22:51 2026 GMT
            Not After : Oct 13 19:47:51 2026 GMT
        Subject: CN=54706F6D1B16C039B69B60E9654DFAE428E8B563
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ef:14:f1:97:40:5f:5b:db:b9:e4:f4:72:8f:
                    9c:f4:8d:5a:f4:83:7b:41:b2:94:28:f3:90:6a:30:
                    47:6d:49:12:c1:08:c3:28:ea:d9:1a:6b:6c:a4:d4:
                    8c:1b:76:cc:e3:d0:90:09:ea:54:da:30:9f:ea:7d:
                    91:4f:a1:2e:13:e6:49:3f:d7:a1:10:ed:2d:ef:46:
                    10:95:fe:29:a9:6b:29:3d:69:b3:af:37:ec:b0:9e:
                    0e:37:10:d4:7b:22:ff:4d:08:4e:79:7b:58:55:55:
                    9f:a9:9e:9a:39:52:ad:2f:53:43:2b:76:f5:3a:67:
                    87:10:10:16:05:42:4f:4b:c2:eb:6a:86:cd:0c:3a:
                    f0:9f:4c:b8:91:b0:95:de:1c:ee:24:d4:fc:80:e2:
                    8b:d9:1c:96:8d:8d:63:be:f0:3e:3a:2b:2e:eb:71:
                    28:6c:c0:49:f1:90:a6:fa:2e:3b:10:01:b5:3d:04:
                    7a:1a:83:07:10:27:fc:81:5e:db:b7:62:71:e9:2e:
                    a7:11:58:05:4e:cc:3e:2b:56:6e:6b:27:cd:7f:45:
                    f2:c5:dd:73:53:6d:cb:16:e4:5d:a3:a3:db:1d:41:
                    f1:02:99:02:6a:3c:52:22:0f:df:1d:29:10:16:41:
                    74:49:cd:2f:af:ae:15:da:81:8c:14:6f:22:d5:50:
                    e8:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:70:6F:6D:1B:16:C0:39:B6:9B:60:E9:65:4D:FA:E4:28:E8:B5:63
            X509v3 Authority Key Identifier:
                keyid:80:E4:4F:09:FF:20:1C:B2:BC:67:B1:6D:49:0F:7A:6D:10:CD:9D:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gORPCf8gHLK8Z7FtSQ96bRDNnfE.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:1d:91:b8:03:2d:62:04:7c:c2:15:96:76:bd:1a:a5:42:44:
         04:6c:fc:6d:0c:e4:40:6e:79:90:b4:ed:4e:d9:78:ec:6c:21:
         c2:59:a4:ad:90:99:be:70:1e:71:a0:a6:e1:c3:c6:30:5c:bc:
         9a:c1:b2:a2:39:45:fe:5e:48:fc:77:e8:a9:9b:5a:ec:e2:8b:
         8c:10:fb:a7:fe:a2:54:20:03:be:2f:1b:9f:54:a1:bd:76:d0:
         38:7e:f3:81:f4:ca:96:4c:8d:2e:52:3a:79:23:18:e6:db:01:
         0d:ac:4a:2a:a8:06:1b:8d:02:a3:68:ef:dc:b9:55:08:84:79:
         08:8a:48:bf:71:3b:19:a7:26:94:b9:08:ee:6d:f5:ff:0f:36:
         13:fa:2b:2d:59:6c:ea:db:e8:ae:8e:73:f0:60:5d:f5:ef:53:
         42:a0:42:d4:87:98:8b:02:1f:c4:fe:fd:3e:87:5d:a9:27:90:
         1f:8e:ab:bf:71:64:bf:50:33:64:d1:e6:e2:4b:9e:29:7a:b0:
         2f:e8:5f:bb:ad:04:e9:06:ac:09:ad:0f:54:b4:f9:38:0e:10:
         48:c9:94:0d:4f:52:05:41:7f:51:62:23:df:57:01:d5:fb:9f:
         bc:87:4e:8b:54:f8:c5:17:13:49:f8:b2:cb:f4:ca:70:82:6d:
         d5:ee:9e:f9
-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgIUTQl+DduGFGVk8ggod0bw9og/PmswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODBlNDRmMDlmZjIwMWNiMmJjNjdiMTZkNDkwZjdhNmQx
MGNkOWRmMTAeFw0yNjEwMTIxNjIyNTFaFw0yNjEwMTMxOTQ3NTFaMDMxMTAvBgNV
BAMTKDU0NzA2RjZEMUIxNkMwMzlCNjlCNjBFOTY1NERGQUU0MjhFOEI1NjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC87xTxl0BfW9u55PRyj5z0jVr0
g3tBspQo85BqMEdtSRLBCMMo6tkaa2yk1Iwbdszj0JAJ6lTaMJ/qfZFPoS4T5kk/
16EQ7S3vRhCV/impayk9abOvN+ywng43ENR7Iv9NCE55e1hVVZ+pnpo5Uq0vU0Mr
dvU6Z4cQEBYFQk9Lwutqhs0MOvCfTLiRsJXeHO4k1PyA4ovZHJaNjWO+8D46Ky7r
cShswEnxkKb6LjsQAbU9BHoagwcQJ/yBXtu3YnHpLqcRWAVOzD4rVm5rJ81/RfLF
3XNTbcsW5F2jo9sdQfECmQJqPFIiD98dKRAWQXRJzS+vrhXagYwUbyLVUOhPAgMB
AAGjggIaMIICFjAdBgNVHQ4EFgQUVHBvbRsWwDm2m2DpZU365CjotWMwHwYDVR0j
BBgwFoAUgORPCf8gHLK8Z7FtSQ96bRDNnfEwDgYDVR0PAQH/BAQDAgeAMH4GA1Ud
HwR3MHUwc6BxoG+GbXJzeW5jOi8va3JpbGwuYWNjdXJpc3RlY2hub2xvZ2llcy5j
YS9yZXBvL0FjY3VyaXMtVGVjaG5vbG9naWVzLzMvODBFNDRGMDlGRjIwMUNCMkJD
NjdCMTZENDkwRjdBNkQxMENEOURGMS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2dPUlBDZjhnSExLOFo3RnRTUTk2YlJETm5mRS5jZXIwgYkGCCsGAQUFBwELBH0w
ezB5BggrBgEFBQcwC4ZtcnN5bmM6Ly9rcmlsbC5hY2N1cmlzdGVjaG5vbG9naWVz
LmNhL3JlcG8vQWNjdXJpcy1UZWNobm9sb2dpZXMvMy84MEU0NEYwOUZGMjAxQ0Iy
QkM2N0IxNkQ0OTBGN0E2RDEwQ0Q5REYxLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG
AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXB2RuAMtYgR8whWW
dr0apUJEBGz8bQzkQG55kLTtTtl47GwhwlmkrZCZvnAecaCm4cPGMFy8msGyojlF
/l5I/HfoqZta7OKLjBD7p/6iVCADvi8bn1ShvXbQOH7zgfTKlkyNLlI6eSMY5tsB
DaxKKqgGG40Co2jv3LlVCIR5CIpIv3E7GacmlLkI7m31/w82E/orLVls6tvoro5z
8GBd9e9TQqBC1IeYiwIfxP79PoddqSeQH46rv3Fkv1AzZNHm4kueKXqwL+hfu60E
6QasCa0PVLT5OA4QSMmUDU9SBUF/UWIj31cB1fufvIdOi1T4xRcTSfiyy/TKcIJt
1e6e+Q==
-----END CERTIFICATE-----
Generated at Mon Oct 12 20:53:32 2026 by rpki-client