Manifest

$ rpki-client -vvvf krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft
File:                     80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft (raw, json)
Hash identifier:          Xb99SL12GOYf7YMznR/bYqtsS5vH499T9LaH8r4/IbM=
Subject key identifier:   36:2B:B6:25:43:09:82:25:6F:F1:BB:9D:31:C8:32:0A:97:79:AF:60
Authority key identifier: 80:E4:4F:09:FF:20:1C:B2:BC:67:B1:6D:49:0F:7A:6D:10:CD:9D:F1
Certificate issuer:       /CN=80e44f09ff201cb2bc67b16d490f7a6d10cd9df1
Certificate serial:       497ADC041730F82B6BE6DB1D7F1E4B19E51C0865
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gORPCf8gHLK8Z7FtSQ96bRDNnfE.cer
Subject info access:      rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft
Manifest number:          074D
Signing time:             Tue 22 Sep 2026 22:17:39 +0000
Manifest this update:     Tue 22 Sep 2026 22:12:39 +0000
Manifest next update:     Thu 24 Sep 2026 01:03:39 +0000
Files and hashes:         1: 80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.crl (hash: KoGTDpmSULjel3JQioniXZDvDHtyKcOsX4FsjGVcQfI=)
                          2: AS212934.asa (hash: KH7KksMzRSe8VPNzHTF1QlnpKUdKuJ5HkzzKYXH/3nU=)
Validation:               OK
Signature path:           rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.crl
                          rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gORPCf8gHLK8Z7FtSQ96bRDNnfE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 22:31:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:7a:dc:04:17:30:f8:2b:6b:e6:db:1d:7f:1e:4b:19:e5:1c:08:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80e44f09ff201cb2bc67b16d490f7a6d10cd9df1
        Validity
            Not Before: Sep 22 22:12:39 2026 GMT
            Not After : Sep 24 01:03:39 2026 GMT
        Subject: CN=362BB625430982256FF1BB9D31C8320A9779AF60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d9:88:0e:72:e7:70:ad:bc:48:96:5e:90:67:
                    fc:d7:77:84:cb:25:e1:3c:45:f1:44:13:45:f5:ac:
                    1c:ea:e2:57:9c:2f:d4:53:62:dd:c8:71:f1:01:14:
                    30:a1:0a:d3:06:d4:5d:d0:01:98:95:e1:a7:a2:c9:
                    73:f7:d7:aa:72:59:11:b8:29:d4:d7:48:38:ac:eb:
                    15:8f:e1:b1:c9:b3:06:ea:ca:9c:6f:7a:2c:ba:d7:
                    e1:bd:f7:19:5c:e8:a4:f1:b5:21:76:eb:60:95:7d:
                    aa:84:dd:a3:8a:3e:c4:d0:14:62:95:c0:f9:6a:1a:
                    c6:3a:05:d3:55:da:9d:a4:d5:32:f7:cd:d6:5e:33:
                    d4:20:27:cb:26:ab:3c:62:36:a8:7c:52:45:db:c4:
                    b1:30:b3:cb:03:fd:4b:12:80:ac:14:c2:1d:e8:ca:
                    03:93:2d:ea:df:c0:bb:0f:3d:82:47:f6:b3:da:87:
                    1e:34:c7:dd:d5:b0:07:ff:88:b0:c0:f6:73:b7:ca:
                    19:93:50:e8:21:08:cd:1f:7d:43:2f:61:e4:76:37:
                    9e:85:b0:0f:87:f9:88:17:df:94:5f:aa:37:45:67:
                    2f:da:38:7c:9b:89:36:0f:11:e6:1b:71:29:d6:23:
                    c2:ce:1d:c8:cb:b0:dd:76:69:d6:33:36:69:94:41:
                    42:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:2B:B6:25:43:09:82:25:6F:F1:BB:9D:31:C8:32:0A:97:79:AF:60
            X509v3 Authority Key Identifier:
                keyid:80:E4:4F:09:FF:20:1C:B2:BC:67:B1:6D:49:0F:7A:6D:10:CD:9D:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gORPCf8gHLK8Z7FtSQ96bRDNnfE.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:83:aa:8d:c0:0a:bd:ac:f3:31:bf:41:8b:57:ef:20:20:53:
         f5:05:e8:1c:4f:ee:3e:c3:b5:00:a9:95:a5:9b:67:79:e5:c1:
         d3:09:2b:c9:63:b1:38:d6:e5:53:52:11:35:6a:f0:a5:f9:57:
         9c:a9:3a:a9:74:f6:fb:5e:ab:73:f5:78:1e:88:e1:ad:be:c2:
         c6:02:a4:8c:ce:ca:3b:b1:39:96:da:17:38:a3:54:e0:b0:99:
         d5:b9:86:63:87:d4:50:a8:33:f9:17:d6:be:63:64:86:20:84:
         a7:9b:11:d4:66:88:b5:36:57:1c:b1:35:49:5f:d3:e9:b7:af:
         b8:5d:f7:58:47:e5:5d:5b:83:b1:9d:71:52:82:d3:4d:f7:27:
         66:1b:65:dd:d6:0f:f9:68:69:58:92:11:73:3d:b0:3b:20:a9:
         be:3c:15:f3:ca:18:05:e2:cd:58:11:5c:fa:17:45:30:21:18:
         94:04:06:e4:f6:d4:73:16:f9:ec:47:3b:43:f0:0b:49:5b:e7:
         bf:83:b8:11:14:11:b0:79:48:18:fb:b9:c9:c7:3d:a2:47:c8:
         6b:b9:b9:a5:cb:7f:b1:e8:03:2f:dd:23:59:36:16:e0:29:a8:
         4d:2f:4a:e6:c2:2b:62:7b:bd:65:90:81:6b:0f:82:3d:13:41:
         8f:57:50:04
-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgIUSXrcBBcw+Ctr5tsdfx5LGeUcCGUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODBlNDRmMDlmZjIwMWNiMmJjNjdiMTZkNDkwZjdhNmQx
MGNkOWRmMTAeFw0yNjA5MjIyMjEyMzlaFw0yNjA5MjQwMTAzMzlaMDMxMTAvBgNV
BAMTKDM2MkJCNjI1NDMwOTgyMjU2RkYxQkI5RDMxQzgzMjBBOTc3OUFGNjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI2YgOcudwrbxIll6QZ/zXd4TL
JeE8RfFEE0X1rBzq4lecL9RTYt3IcfEBFDChCtMG1F3QAZiV4aeiyXP316pyWRG4
KdTXSDis6xWP4bHJswbqypxveiy61+G99xlc6KTxtSF262CVfaqE3aOKPsTQFGKV
wPlqGsY6BdNV2p2k1TL3zdZeM9QgJ8smqzxiNqh8UkXbxLEws8sD/UsSgKwUwh3o
ygOTLerfwLsPPYJH9rPahx40x93VsAf/iLDA9nO3yhmTUOghCM0ffUMvYeR2N56F
sA+H+YgX35RfqjdFZy/aOHybiTYPEeYbcSnWI8LOHcjLsN12adYzNmmUQULXAgMB
AAGjggIaMIICFjAdBgNVHQ4EFgQUNiu2JUMJgiVv8budMcgyCpd5r2AwHwYDVR0j
BBgwFoAUgORPCf8gHLK8Z7FtSQ96bRDNnfEwDgYDVR0PAQH/BAQDAgeAMH4GA1Ud
HwR3MHUwc6BxoG+GbXJzeW5jOi8va3JpbGwuYWNjdXJpc3RlY2hub2xvZ2llcy5j
YS9yZXBvL0FjY3VyaXMtVGVjaG5vbG9naWVzLzMvODBFNDRGMDlGRjIwMUNCMkJD
NjdCMTZENDkwRjdBNkQxMENEOURGMS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2dPUlBDZjhnSExLOFo3RnRTUTk2YlJETm5mRS5jZXIwgYkGCCsGAQUFBwELBH0w
ezB5BggrBgEFBQcwC4ZtcnN5bmM6Ly9rcmlsbC5hY2N1cmlzdGVjaG5vbG9naWVz
LmNhL3JlcG8vQWNjdXJpcy1UZWNobm9sb2dpZXMvMy84MEU0NEYwOUZGMjAxQ0Iy
QkM2N0IxNkQ0OTBGN0E2RDEwQ0Q5REYxLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG
AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm4OqjcAKvazzMb9B
i1fvICBT9QXoHE/uPsO1AKmVpZtneeXB0wkryWOxONblU1IRNWrwpflXnKk6qXT2
+16rc/V4Hojhrb7CxgKkjM7KO7E5ltoXOKNU4LCZ1bmGY4fUUKgz+RfWvmNkhiCE
p5sR1GaItTZXHLE1SV/T6bevuF33WEflXVuDsZ1xUoLTTfcnZhtl3dYP+WhpWJIR
cz2wOyCpvjwV88oYBeLNWBFc+hdFMCEYlAQG5PbUcxb57Ec7Q/ALSVvnv4O4ERQR
sHlIGPu5ycc9okfIa7m5pct/segDL90jWTYW4CmoTS9K5sIrYnu9ZZCBaw+CPRNB
j1dQBA==
-----END CERTIFICATE-----
Generated at Wed Sep 23 04:53:58 2026 by rpki-client