Manifest

$ rpki-client -vvf krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft
File:                     80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft (raw, json)
Hash identifier:          KXL+Cn3CVrs3+YR6qSVMdmLg05KDE8xNO4MEgaCZyzE=
Subject key identifier:   5B:97:CD:17:01:24:A1:9C:03:71:BC:EC:92:FC:38:34:86:AB:76:74
Authority key identifier: 80:E4:4F:09:FF:20:1C:B2:BC:67:B1:6D:49:0F:7A:6D:10:CD:9D:F1
Certificate issuer:       /CN=80e44f09ff201cb2bc67b16d490f7a6d10cd9df1
Certificate serial:       4C358854D6292440C1DDAE520D50899C44C08804
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gORPCf8gHLK8Z7FtSQ96bRDNnfE.cer
Subject info access:      rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft
Manifest number:          0608
Signing time:             Thu 26 Mar 2026 00:02:05 +0000
Manifest this update:     Wed 25 Mar 2026 23:57:05 +0000
Manifest next update:     Fri 27 Mar 2026 01:39:05 +0000
Files and hashes:         1: 80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.crl (hash: 9lUlEQD98OoRHUQh+TZ8sNX7ZT3JecPkcRKqKzWXyVw=)
                          2: AS212934.asa (hash: 53XShpJ+NB5sf3EXMo5SBl7pYHowfGvfOlp+2zWjCfE=)
Validation:               OK
Signature path:           rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.crl
                          rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gORPCf8gHLK8Z7FtSQ96bRDNnfE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:35:88:54:d6:29:24:40:c1:dd:ae:52:0d:50:89:9c:44:c0:88:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80e44f09ff201cb2bc67b16d490f7a6d10cd9df1
        Validity
            Not Before: Mar 25 23:57:05 2026 GMT
            Not After : Mar 27 01:39:05 2026 GMT
        Subject: CN=5B97CD170124A19C0371BCEC92FC383486AB7674
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:98:2c:df:32:90:8a:e8:a3:86:a4:5c:6a:ed:
                    07:5e:e5:87:57:7f:ba:01:0f:0a:95:31:b5:f0:35:
                    84:4c:e4:fd:9f:fd:c2:c7:a4:49:24:9c:c9:02:fb:
                    a4:d8:f4:f2:a6:86:d3:63:ee:6d:45:da:9d:05:50:
                    96:c8:42:6d:e1:a9:06:d4:9b:96:eb:1d:07:20:cd:
                    80:f9:9d:28:ce:7c:9c:a8:81:ea:6c:b9:7a:f0:69:
                    1c:39:f4:61:01:c3:df:3a:f0:f9:4b:c0:9e:f6:c7:
                    94:ec:e4:97:e1:c3:c1:3b:c2:59:5f:76:c9:06:33:
                    fa:6e:b8:a0:38:f5:9a:e4:f2:25:ac:d7:c9:50:23:
                    f2:51:03:31:7f:fc:f8:f9:d4:d0:5c:8a:56:9e:70:
                    3c:ab:6a:e4:b8:e8:15:af:0e:ae:5b:ef:e1:8d:51:
                    2a:be:65:ae:87:32:87:63:a8:38:a8:c0:14:b0:b4:
                    2b:af:33:3a:a4:77:25:e9:00:9e:b6:8a:90:7f:e5:
                    be:fa:2b:e8:6a:53:6c:f1:a2:35:03:55:ec:0b:b8:
                    08:eb:c4:85:b7:3a:a7:95:b3:07:65:b2:99:5a:89:
                    55:bd:88:5d:8f:f6:c2:eb:86:af:c6:1f:b3:a7:6d:
                    a1:43:b2:07:70:46:5e:27:22:0f:5b:1a:b8:18:36:
                    57:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:97:CD:17:01:24:A1:9C:03:71:BC:EC:92:FC:38:34:86:AB:76:74
            X509v3 Authority Key Identifier:
                keyid:80:E4:4F:09:FF:20:1C:B2:BC:67:B1:6D:49:0F:7A:6D:10:CD:9D:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gORPCf8gHLK8Z7FtSQ96bRDNnfE.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:73:03:f2:78:10:c4:ec:01:4d:a9:de:ac:c1:9d:b0:86:2d:
         41:52:e2:ed:0b:8b:a1:35:ea:a9:d1:5f:19:2d:14:5e:88:22:
         7f:37:1c:10:84:3d:3c:e8:78:d8:fe:3e:3e:8d:61:b4:25:9c:
         00:19:1e:df:0b:62:dd:57:1f:ed:1c:63:7e:cb:8e:04:fc:57:
         2d:20:e0:d6:b7:0c:f4:66:fc:b0:f4:6d:e4:6e:55:82:6e:6a:
         d8:a8:67:6d:68:c1:97:01:c3:53:66:15:97:a9:d6:1f:be:a7:
         9c:1b:ae:7c:af:16:67:a8:01:de:c7:63:d1:1b:2c:c1:46:62:
         fb:43:ef:60:10:6e:17:6c:e8:cc:d6:05:7e:37:0c:5c:81:6c:
         23:23:f9:b1:1c:3b:3a:52:44:fd:e2:ca:7b:3a:ad:8a:ba:bd:
         8c:c9:93:87:0d:ac:2f:88:91:d0:a0:4d:8b:e6:ca:f1:62:83:
         64:48:59:54:9e:c4:4e:0b:98:ad:18:31:5f:41:c0:81:77:2c:
         8c:80:f4:d8:6d:f9:34:09:09:58:b0:33:dc:d7:b3:bc:dd:b0:
         3b:43:3d:df:1d:35:14:68:09:25:e5:10:5a:4c:2d:44:5b:51:
         66:95:20:bd:07:9a:2b:40:e7:5a:77:bf:a3:62:52:be:3d:76:
         69:8f:97:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:53:33 2026 by rpki-client