Manifest

$ rpki-client -vvvf krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft
File:                     80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft (raw, json)
Hash identifier:          5p+zs6FGCHJCIqAn7I4DcjHll/yJclzw4phJ/b7sh/Y=
Subject key identifier:   EE:0B:B0:1A:A6:8D:96:EC:88:0E:9C:74:27:64:47:34:DC:79:D7:89
Authority key identifier: 80:E4:4F:09:FF:20:1C:B2:BC:67:B1:6D:49:0F:7A:6D:10:CD:9D:F1
Certificate issuer:       /CN=80e44f09ff201cb2bc67b16d490f7a6d10cd9df1
Certificate serial:       135B0447633F3EE86A16DB55C320253F2E5BC89F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gORPCf8gHLK8Z7FtSQ96bRDNnfE.cer
Subject info access:      rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft
Manifest number:          0749
Signing time:             Sun 20 Sep 2026 00:52:37 +0000
Manifest this update:     Sun 20 Sep 2026 00:47:37 +0000
Manifest next update:     Mon 21 Sep 2026 04:17:37 +0000
Files and hashes:         1: AS212934.asa (hash: KH7KksMzRSe8VPNzHTF1QlnpKUdKuJ5HkzzKYXH/3nU=)
                          2: 80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.crl (hash: UlwO5eTiFAZZlpdXmiPcG8DPNvsVaoZJXILhJf7LWjQ=)
Validation:               OK
Signature path:           rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.crl
                          rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gORPCf8gHLK8Z7FtSQ96bRDNnfE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 04:17:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:5b:04:47:63:3f:3e:e8:6a:16:db:55:c3:20:25:3f:2e:5b:c8:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80e44f09ff201cb2bc67b16d490f7a6d10cd9df1
        Validity
            Not Before: Sep 20 00:47:37 2026 GMT
            Not After : Sep 21 04:17:37 2026 GMT
        Subject: CN=EE0BB01AA68D96EC880E9C7427644734DC79D789
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b8:9a:16:e0:6a:68:82:9c:19:32:81:c4:76:
                    9d:5a:3e:f5:77:3d:00:fe:16:fc:03:46:52:7b:14:
                    57:70:17:67:d1:0a:76:32:ae:4e:b5:e3:d9:b5:15:
                    ff:2e:29:b2:2d:68:86:15:da:8b:df:5c:30:d3:a0:
                    40:5d:5e:62:21:7f:0d:3c:15:87:11:f3:d5:3a:f5:
                    73:69:7f:d0:41:2a:bf:52:05:63:f5:18:15:9a:49:
                    89:ac:a3:24:51:7b:a8:2b:a2:fb:cb:da:28:0b:06:
                    bb:4d:68:5b:70:90:29:e8:0a:73:04:4a:ca:c8:fa:
                    f6:da:f9:f3:59:34:d6:51:0d:4a:17:0d:34:cd:e2:
                    1f:76:48:fb:c7:ae:8d:42:66:cc:ac:7f:a8:3b:a9:
                    02:7b:5a:e5:14:05:4c:19:91:9d:3f:95:6a:4e:dd:
                    bb:c6:21:7b:b1:f2:da:b2:a1:4b:8b:6f:1f:2c:87:
                    13:c1:9c:f8:07:44:b8:4f:99:31:c1:3e:24:64:bb:
                    3a:52:bd:0a:bd:20:e6:b5:29:60:15:11:b9:d6:36:
                    91:87:a6:b2:48:4b:f3:67:e8:a3:66:09:80:15:b8:
                    23:ff:39:be:3d:42:b0:e4:b2:d5:c2:76:f5:97:e1:
                    10:ad:3c:d9:26:0e:ba:1d:23:4b:6f:db:a8:75:ad:
                    0c:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:0B:B0:1A:A6:8D:96:EC:88:0E:9C:74:27:64:47:34:DC:79:D7:89
            X509v3 Authority Key Identifier:
                keyid:80:E4:4F:09:FF:20:1C:B2:BC:67:B1:6D:49:0F:7A:6D:10:CD:9D:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gORPCf8gHLK8Z7FtSQ96bRDNnfE.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:65:19:84:72:c1:a0:ac:55:11:f3:8d:d3:b6:f7:37:ed:a2:
         da:50:0b:09:df:fa:a4:97:db:f8:2c:03:b2:d3:9e:a9:e9:d6:
         2b:ec:18:e7:6e:70:13:39:5a:32:51:fc:4a:5d:79:cf:31:e6:
         82:ff:51:bc:ab:08:31:50:3b:b1:aa:bc:5a:3b:bf:77:90:2e:
         c6:61:ff:46:d7:23:7a:4a:d7:32:e8:90:d6:36:36:3c:d8:70:
         e4:0f:ee:c7:1a:8e:30:ca:e6:b5:88:0b:3d:b9:79:e5:e6:f9:
         90:bb:e4:1e:f4:89:58:94:1a:21:d6:2b:93:67:40:dd:03:3b:
         e0:ae:95:19:b1:7c:c0:82:84:a5:a1:1d:21:87:3a:2e:0d:47:
         5f:1c:2e:78:86:77:e8:89:56:a1:3e:b8:aa:0b:49:83:b2:eb:
         84:3f:ae:0c:b1:2a:44:85:f7:78:a9:36:27:76:61:e7:c6:94:
         52:e0:59:b1:5d:3b:c1:02:a4:e7:5e:02:56:2c:c0:ef:75:33:
         3e:a0:53:7a:6a:0a:4a:c7:56:83:54:69:3c:60:c6:de:8e:9f:
         19:19:7d:e6:b0:ee:a1:00:6d:3d:b1:99:95:d3:bf:3d:f2:17:
         fc:7d:50:cf:77:38:8b:73:f1:b6:fe:1a:30:bd:c4:a0:67:57:
         7b:7b:a2:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 20:06:32 2026 by rpki-client