Manifest

$ rpki-client -vvf krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft
File:                     80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft (raw, json)
Hash identifier:          CbpYRwUWhvd1xTCDW1gfBc+gJthzoUg4CLS6CSso4/M=
Subject key identifier:   E7:F6:9C:76:D9:9B:DF:56:4A:8D:00:13:D8:FC:60:5B:90:34:54:C0
Authority key identifier: 80:E4:4F:09:FF:20:1C:B2:BC:67:B1:6D:49:0F:7A:6D:10:CD:9D:F1
Certificate issuer:       /CN=80e44f09ff201cb2bc67b16d490f7a6d10cd9df1
Certificate serial:       0FEA578BCEFD39AA74896850D54F16BBFBBE2C3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gORPCf8gHLK8Z7FtSQ96bRDNnfE.cer
Subject info access:      rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft
Manifest number:          063A
Signing time:             Wed 22 Apr 2026 18:35:42 +0000
Manifest this update:     Wed 22 Apr 2026 18:30:42 +0000
Manifest next update:     Thu 23 Apr 2026 22:22:42 +0000
Files and hashes:         1: 80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.crl (hash: H//x37N2dx0EMF5URv4d95GWGmy1M96n1S9CtVjuZr8=)
                          2: AS212934.asa (hash: 53XShpJ+NB5sf3EXMo5SBl7pYHowfGvfOlp+2zWjCfE=)
Validation:               OK
Signature path:           rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.crl
                          rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gORPCf8gHLK8Z7FtSQ96bRDNnfE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 23 Apr 2026 22:11:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:ea:57:8b:ce:fd:39:aa:74:89:68:50:d5:4f:16:bb:fb:be:2c:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80e44f09ff201cb2bc67b16d490f7a6d10cd9df1
        Validity
            Not Before: Apr 22 18:30:42 2026 GMT
            Not After : Apr 23 22:22:42 2026 GMT
        Subject: CN=E7F69C76D99BDF564A8D0013D8FC605B903454C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e9:96:86:60:cd:b0:d6:e8:2e:02:84:83:df:
                    71:68:ac:02:dc:33:3d:1a:88:f7:a6:6f:3f:af:c2:
                    04:13:77:94:f5:27:ed:7e:2b:96:44:a9:1b:f4:c2:
                    28:44:01:71:ce:63:47:a4:e2:b8:91:95:51:e8:59:
                    c9:ad:c8:dd:8f:c3:e1:b9:3f:a7:97:8f:1c:b9:e6:
                    bb:9a:c9:96:6a:5c:80:82:6d:47:7f:1e:bf:ce:32:
                    d9:5a:7a:da:ea:ae:19:5e:62:11:04:ea:4c:2c:2a:
                    2b:b4:34:23:d9:82:fd:32:c3:66:f0:aa:5f:79:53:
                    dc:2a:5f:7a:f3:6b:a7:50:75:dd:79:bd:31:71:0f:
                    cb:79:93:80:0a:36:37:11:4c:8a:61:91:dc:ee:3e:
                    dc:3c:be:53:5b:b9:dc:7c:d5:37:a7:15:c0:54:da:
                    8c:74:a4:da:4e:78:94:02:c8:90:d4:4b:6f:e8:fa:
                    cb:10:6b:62:d0:e5:75:e8:8e:e3:6b:d7:37:42:d1:
                    60:c0:7f:dc:ee:dc:1f:17:34:92:92:94:cb:5a:49:
                    10:0b:3a:b1:68:cc:32:41:c0:1d:a6:3f:5e:e0:b6:
                    3e:98:a5:16:e1:87:96:d5:a4:4b:74:40:73:5b:6a:
                    43:ae:85:15:eb:2f:53:a2:27:12:ca:50:d0:8e:ca:
                    67:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:F6:9C:76:D9:9B:DF:56:4A:8D:00:13:D8:FC:60:5B:90:34:54:C0
            X509v3 Authority Key Identifier:
                keyid:80:E4:4F:09:FF:20:1C:B2:BC:67:B1:6D:49:0F:7A:6D:10:CD:9D:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gORPCf8gHLK8Z7FtSQ96bRDNnfE.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         f4:79:a0:2f:c3:06:83:b2:af:42:6a:8c:69:9e:9d:e4:7a:88:
         e1:e3:a2:50:f9:06:9d:9d:cf:e6:84:67:ff:a6:aa:95:2b:59:
         0f:17:2e:6f:62:ae:b9:4b:83:9e:f5:31:37:6e:98:ff:c5:07:
         30:b9:90:9c:af:21:c4:93:ee:e7:6b:90:6e:9a:ba:ce:0c:40:
         c0:a6:87:a6:e3:56:21:ff:35:e9:52:fa:0a:7c:43:7a:5c:34:
         91:de:d6:ec:85:eb:24:d8:af:05:23:c5:b7:55:66:6e:ec:1c:
         8d:27:05:53:65:11:2e:5f:10:85:e1:4f:1a:48:dc:b8:6f:5c:
         f2:40:d8:7b:68:42:21:a8:2c:96:6d:26:13:28:6d:4c:98:c3:
         87:fa:de:21:8f:cd:cb:e0:85:0c:53:fa:78:22:15:1d:bf:50:
         79:81:e0:6c:50:66:86:15:2a:a3:11:c8:54:ad:cb:3b:1d:10:
         b4:d0:5b:c9:4c:67:9f:4e:1e:94:0a:1b:86:41:90:7c:66:71:
         2a:1b:25:a7:5b:46:9c:dc:b4:8a:84:1c:22:e7:d2:93:01:f0:
         5a:e8:fd:aa:2e:a2:3f:ab:e6:ef:b5:d2:a3:7d:cb:0b:57:25:
         d0:dc:e9:c0:ef:0f:df:dc:9c:ff:d2:a7:0f:ae:63:3c:37:d3:
         2c:9b:2e:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 23 07:40:02 2026 by rpki-client