Manifest

$ rpki-client -vvf krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft
File:                     80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft (raw, json)
Hash identifier:          vxYyH2Rlkj+MoE2mDK4NufzKioFFZ6V0qryhybSyNiQ=
Subject key identifier:   72:4C:16:44:96:60:E0:68:AF:BC:80:F5:6E:0B:CC:E0:8F:AF:AA:67
Authority key identifier: 80:E4:4F:09:FF:20:1C:B2:BC:67:B1:6D:49:0F:7A:6D:10:CD:9D:F1
Certificate issuer:       /CN=80e44f09ff201cb2bc67b16d490f7a6d10cd9df1
Certificate serial:       6F8739D1FE4C75E99B1607B19C02FD062FF057F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gORPCf8gHLK8Z7FtSQ96bRDNnfE.cer
Subject info access:      rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft
Manifest number:          0661
Signing time:             Tue 12 May 2026 15:08:20 +0000
Manifest this update:     Tue 12 May 2026 15:03:20 +0000
Manifest next update:     Wed 13 May 2026 15:33:20 +0000
Files and hashes:         1: 80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.crl (hash: UlbATuVeX/uF6+aQMY1myHEEoDXDf9KkGrKJ+zqzHoo=)
                          2: AS212934.asa (hash: 53XShpJ+NB5sf3EXMo5SBl7pYHowfGvfOlp+2zWjCfE=)
Validation:               OK
Signature path:           rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.crl
                          rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gORPCf8gHLK8Z7FtSQ96bRDNnfE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:87:39:d1:fe:4c:75:e9:9b:16:07:b1:9c:02:fd:06:2f:f0:57:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80e44f09ff201cb2bc67b16d490f7a6d10cd9df1
        Validity
            Not Before: May 12 15:03:20 2026 GMT
            Not After : May 13 15:33:20 2026 GMT
        Subject: CN=724C16449660E068AFBC80F56E0BCCE08FAFAA67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:57:54:24:5a:2a:68:80:39:d8:2d:9c:4a:5c:
                    2b:6b:68:2b:7e:ed:d5:88:75:89:da:a3:90:d6:b8:
                    c7:73:c6:d1:3f:b8:0e:68:29:70:07:ba:49:08:1c:
                    dc:53:6e:69:6a:04:4a:88:82:70:a9:ae:ee:40:10:
                    5d:be:2b:8a:f0:6d:b5:5e:62:8f:fe:79:e4:67:a6:
                    d4:6b:6d:09:93:70:d4:d7:f5:90:5a:28:ed:cb:65:
                    0f:32:20:67:b0:4b:12:76:f7:02:83:8d:80:e1:88:
                    b5:31:d6:01:c7:60:01:bd:d6:7e:5b:5a:7c:69:e9:
                    1b:1b:b5:b4:56:24:00:91:30:cf:22:f8:70:68:e7:
                    ab:8d:02:79:a7:0f:bc:a0:0f:c6:d9:b3:21:b8:a8:
                    46:61:b2:31:d0:33:d1:23:fb:5f:4f:8d:fb:ad:ea:
                    07:1b:a2:71:1b:6b:96:b1:9e:8f:55:df:2e:8a:65:
                    6d:0c:52:71:d1:97:7b:2f:f7:f8:74:ee:48:7b:59:
                    2c:b9:06:1a:dc:6d:aa:5c:ab:47:ef:15:69:0f:7f:
                    3a:6d:ed:cb:89:45:af:09:d2:14:95:29:53:50:1a:
                    3f:2e:10:9a:6b:4b:e2:60:ed:c6:3d:c9:14:3b:7d:
                    2f:e9:2f:07:cd:29:6e:ee:1f:04:90:06:d7:98:db:
                    1c:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:4C:16:44:96:60:E0:68:AF:BC:80:F5:6E:0B:CC:E0:8F:AF:AA:67
            X509v3 Authority Key Identifier:
                keyid:80:E4:4F:09:FF:20:1C:B2:BC:67:B1:6D:49:0F:7A:6D:10:CD:9D:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gORPCf8gHLK8Z7FtSQ96bRDNnfE.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:f3:e6:cf:7d:b2:13:02:2c:7f:4e:af:58:9a:9b:97:97:e8:
         59:7e:fe:bc:f7:42:de:f8:4b:2c:33:ca:ba:2d:60:19:08:e7:
         f8:f0:4e:b1:9d:fc:44:d0:88:05:df:8e:9f:29:d2:97:05:c7:
         13:85:ad:a9:2a:74:8f:dc:59:57:1b:fc:aa:a6:64:ba:09:1e:
         5f:dd:17:b0:fc:fc:74:2f:19:11:c3:13:c9:58:cf:bf:36:62:
         7b:31:d4:c7:37:f4:79:77:df:e4:24:e8:e6:ff:75:8f:32:54:
         31:b2:5c:96:46:08:85:c1:27:af:21:b6:91:fc:1e:b2:49:25:
         9f:92:8a:e6:8e:71:75:4b:0a:ca:0a:37:ac:2d:25:26:40:c3:
         86:35:59:c2:05:cb:ff:85:9a:90:5b:71:58:2b:f3:16:91:34:
         d9:72:75:ee:d5:9b:a7:f8:03:c8:78:50:41:d6:09:d0:81:5b:
         08:39:90:02:b8:1b:c4:9a:f0:e9:50:d4:ac:3e:65:68:0d:60:
         33:c4:f4:ca:5d:5d:1b:3b:59:ba:53:e3:ae:39:77:68:9a:d1:
         1b:e7:7b:11:2e:2a:9b:2b:b0:d2:ef:f9:09:62:cb:3e:1a:33:
         bf:8f:85:9c:93:37:0d:79:a7:33:e7:b2:1c:50:75:30:69:b3:
         92:f6:35:6c
-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgIUb4c50f5MdembFgexnAL9Bi/wV/EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODBlNDRmMDlmZjIwMWNiMmJjNjdiMTZkNDkwZjdhNmQx
MGNkOWRmMTAeFw0yNjA1MTIxNTAzMjBaFw0yNjA1MTMxNTMzMjBaMDMxMTAvBgNV
BAMTKDcyNEMxNjQ0OTY2MEUwNjhBRkJDODBGNTZFMEJDQ0UwOEZBRkFBNjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOV1QkWipogDnYLZxKXCtraCt+
7dWIdYnao5DWuMdzxtE/uA5oKXAHukkIHNxTbmlqBEqIgnCpru5AEF2+K4rwbbVe
Yo/+eeRnptRrbQmTcNTX9ZBaKO3LZQ8yIGewSxJ29wKDjYDhiLUx1gHHYAG91n5b
Wnxp6RsbtbRWJACRMM8i+HBo56uNAnmnD7ygD8bZsyG4qEZhsjHQM9Ej+19Pjfut
6gcbonEba5axno9V3y6KZW0MUnHRl3sv9/h07kh7WSy5Bhrcbapcq0fvFWkPfzpt
7cuJRa8J0hSVKVNQGj8uEJprS+Jg7cY9yRQ7fS/pLwfNKW7uHwSQBteY2xxBAgMB
AAGjggIaMIICFjAdBgNVHQ4EFgQUckwWRJZg4GivvID1bgvM4I+vqmcwHwYDVR0j
BBgwFoAUgORPCf8gHLK8Z7FtSQ96bRDNnfEwDgYDVR0PAQH/BAQDAgeAMH4GA1Ud
HwR3MHUwc6BxoG+GbXJzeW5jOi8va3JpbGwuYWNjdXJpc3RlY2hub2xvZ2llcy5j
YS9yZXBvL0FjY3VyaXMtVGVjaG5vbG9naWVzLzMvODBFNDRGMDlGRjIwMUNCMkJD
NjdCMTZENDkwRjdBNkQxMENEOURGMS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2dPUlBDZjhnSExLOFo3RnRTUTk2YlJETm5mRS5jZXIwgYkGCCsGAQUFBwELBH0w
ezB5BggrBgEFBQcwC4ZtcnN5bmM6Ly9rcmlsbC5hY2N1cmlzdGVjaG5vbG9naWVz
LmNhL3JlcG8vQWNjdXJpcy1UZWNobm9sb2dpZXMvMy84MEU0NEYwOUZGMjAxQ0Iy
QkM2N0IxNkQ0OTBGN0E2RDEwQ0Q5REYxLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG
AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANfPmz32yEwIsf06v
WJqbl5foWX7+vPdC3vhLLDPKui1gGQjn+PBOsZ38RNCIBd+OnynSlwXHE4WtqSp0
j9xZVxv8qqZkugkeX90XsPz8dC8ZEcMTyVjPvzZiezHUxzf0eXff5CTo5v91jzJU
MbJclkYIhcEnryG2kfweskkln5KK5o5xdUsKygo3rC0lJkDDhjVZwgXL/4WakFtx
WCvzFpE02XJ17tWbp/gDyHhQQdYJ0IFbCDmQArgbxJrw6VDUrD5laA1gM8T0yl1d
GztZulPjrjl3aJrRG+d7ES4qmyuw0u/5CWLLPhozv4+FnJM3DXmnM+eyHFB1MGmz
kvY1bA==
-----END CERTIFICATE-----
Generated at Tue May 12 23:52:18 2026 by rpki-client