Manifest

$ rpki-client -vvvf krill.peravix.group/repo/peravix/0/356A955BCAACB0774F9A02E7525E3E1E426E5434.mft
File:                     356A955BCAACB0774F9A02E7525E3E1E426E5434.mft (raw, json)
Hash identifier:          YkEGEaVpjeuq6QkF0CVKH5+JRdkAFYHbXQRDAZ38LU4=
Subject key identifier:   D7:CA:64:5E:59:B7:39:D1:71:11:E8:32:3A:7B:58:63:74:AD:77:19
Authority key identifier: 35:6A:95:5B:CA:AC:B0:77:4F:9A:02:E7:52:5E:3E:1E:42:6E:54:34
Certificate issuer:       /CN=356a955bcaacb0774f9a02e7525e3e1e426e5434
Certificate serial:       14C58855A0CF2203FC03407D4F53BD1065E83A88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NWqVW8qssHdPmgLnUl4-HkJuVDQ.cer
Subject info access:      rsync://krill.peravix.group/repo/peravix/0/356A955BCAACB0774F9A02E7525E3E1E426E5434.mft
Manifest number:          D4
Signing time:             Sat 24 Oct 2026 23:48:02 +0000
Manifest this update:     Sat 24 Oct 2026 23:43:02 +0000
Manifest next update:     Mon 26 Oct 2026 02:41:02 +0000
Files and hashes:         1: 356A955BCAACB0774F9A02E7525E3E1E426E5434.crl (hash: BlnjF37V6L9QVgrw8GexTEN/ZFceORzqR9MfqMFQETc=)
                          2: AS204208.asa (hash: /QuxSvjMdtAOuFhmp7uALj5zC2zpME6Utr2QD0NlN7Q=)
Validation:               OK
Signature path:           rsync://krill.peravix.group/repo/peravix/0/356A955BCAACB0774F9A02E7525E3E1E426E5434.crl
                          rsync://krill.peravix.group/repo/peravix/0/356A955BCAACB0774F9A02E7525E3E1E426E5434.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NWqVW8qssHdPmgLnUl4-HkJuVDQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Oct 2026 02:41:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:c5:88:55:a0:cf:22:03:fc:03:40:7d:4f:53:bd:10:65:e8:3a:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=356a955bcaacb0774f9a02e7525e3e1e426e5434
        Validity
            Not Before: Oct 24 23:43:02 2026 GMT
            Not After : Oct 26 02:41:02 2026 GMT
        Subject: CN=D7CA645E59B739D17111E8323A7B586374AD7719
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e2:42:25:83:7f:75:77:51:cc:e3:3b:56:25:
                    b4:3d:2f:43:e3:fe:6e:43:bc:90:fa:3f:7b:27:e8:
                    bc:8b:72:52:ba:8d:b0:83:21:b6:24:7e:13:16:6d:
                    51:10:d3:a1:84:be:08:f6:1d:05:ea:66:f0:7c:79:
                    b0:67:91:8a:9b:9f:6a:89:08:cf:14:25:9b:93:86:
                    c8:c3:3b:1c:f9:83:ad:2e:96:a7:d1:da:a5:21:f7:
                    d9:1f:93:9c:db:cb:04:78:06:39:f8:8c:e9:02:62:
                    d6:a2:a6:04:c4:a1:63:50:53:95:e3:13:e8:be:52:
                    75:8a:1f:dd:28:83:6a:47:4c:45:4d:44:a0:c7:1b:
                    7c:12:cd:f8:0e:14:e7:8c:7d:1a:77:d7:c8:b4:ac:
                    3b:dc:16:23:99:c1:4d:ba:69:2d:3e:52:f5:f4:54:
                    af:08:6d:b3:74:be:b2:a6:62:d9:6e:95:96:67:86:
                    12:57:e2:e2:09:c3:6b:c0:36:38:d2:42:6f:e3:80:
                    12:ff:20:07:ee:9c:a0:85:4d:45:45:f6:34:1e:42:
                    82:14:7a:8a:eb:a4:35:7b:16:7e:e8:37:6a:5c:09:
                    92:69:5b:27:da:16:95:e2:e5:5f:4f:a4:22:96:cf:
                    bb:0b:31:b6:ee:83:9b:96:63:61:5f:5c:0f:ed:08:
                    5b:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:CA:64:5E:59:B7:39:D1:71:11:E8:32:3A:7B:58:63:74:AD:77:19
            X509v3 Authority Key Identifier:
                keyid:35:6A:95:5B:CA:AC:B0:77:4F:9A:02:E7:52:5E:3E:1E:42:6E:54:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.peravix.group/repo/peravix/0/356A955BCAACB0774F9A02E7525E3E1E426E5434.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWqVW8qssHdPmgLnUl4-HkJuVDQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.peravix.group/repo/peravix/0/356A955BCAACB0774F9A02E7525E3E1E426E5434.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         df:ae:83:b7:d8:4f:20:92:81:22:79:ec:5d:80:3c:4f:a6:c3:
         f9:f5:1f:32:db:77:75:6f:e9:f4:f7:ad:91:c8:4d:2a:94:5f:
         f9:56:2e:d8:99:1d:09:c4:af:28:3a:97:e4:48:fa:6f:5e:34:
         33:66:f6:fa:2c:ce:5e:08:98:5b:e0:c5:e7:88:fa:d4:4b:6d:
         50:ca:ae:fb:38:8e:ea:94:f1:bd:de:37:25:53:d8:8b:1c:e3:
         a0:38:45:55:ac:2c:92:c6:94:01:0a:85:66:36:7a:6f:f0:96:
         3b:b9:35:a0:3e:0c:71:ea:62:02:fa:03:83:26:c6:5d:47:9b:
         69:23:63:6b:8e:c5:e1:d9:80:47:45:53:c5:37:8b:fe:0c:90:
         47:bc:fb:ea:06:a1:62:27:08:3a:ab:e9:5c:60:2f:f5:65:82:
         94:ca:8b:03:8e:a5:b3:67:ef:41:7c:b3:a3:fc:84:da:cb:7d:
         cf:11:c3:15:63:1b:9a:04:60:0d:0b:55:00:47:78:0b:35:85:
         0f:a8:02:71:6d:46:6b:ca:7c:de:9b:8d:60:cb:ac:68:0b:4f:
         63:10:cd:67:17:17:95:a1:fa:6b:19:2a:32:13:44:d9:45:00:
         10:55:8a:12:5c:29:37:94:d2:8e:30:b5:d7:b7:ad:81:72:86:
         c6:48:a6:a8
-----BEGIN CERTIFICATE-----
MIIE4zCCA8ugAwIBAgIUFMWIVaDPIgP8A0B9T1O9EGXoOogwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzU2YTk1NWJjYWFjYjA3NzRmOWEwMmU3NTI1ZTNlMWU0
MjZlNTQzNDAeFw0yNjEwMjQyMzQzMDJaFw0yNjEwMjYwMjQxMDJaMDMxMTAvBgNV
BAMTKEQ3Q0E2NDVFNTlCNzM5RDE3MTExRTgzMjNBN0I1ODYzNzRBRDc3MTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt4kIlg391d1HM4ztWJbQ9L0Pj
/m5DvJD6P3sn6LyLclK6jbCDIbYkfhMWbVEQ06GEvgj2HQXqZvB8ebBnkYqbn2qJ
CM8UJZuThsjDOxz5g60ulqfR2qUh99kfk5zbywR4Bjn4jOkCYtaipgTEoWNQU5Xj
E+i+UnWKH90og2pHTEVNRKDHG3wSzfgOFOeMfRp318i0rDvcFiOZwU26aS0+UvX0
VK8IbbN0vrKmYtlulZZnhhJX4uIJw2vANjjSQm/jgBL/IAfunKCFTUVF9jQeQoIU
eorrpDV7Fn7oN2pcCZJpWyfaFpXi5V9PpCKWz7sLMbbug5uWY2FfXA/tCFvlAgMB
AAGjggHtMIIB6TAdBgNVHQ4EFgQU18pkXlm3OdFxEegyOntYY3StdxkwHwYDVR0j
BBgwFoAUNWqVW8qssHdPmgLnUl4+HkJuVDQwDgYDVR0PAQH/BAQDAgeAMGgGA1Ud
HwRhMF8wXaBboFmGV3JzeW5jOi8va3JpbGwucGVyYXZpeC5ncm91cC9yZXBvL3Bl
cmF2aXgvMC8zNTZBOTU1QkNBQUNCMDc3NEY5QTAyRTc1MjVFM0UxRTQyNkU1NDM0
LmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvTldxVlc4cXNzSGRQbWdMblVsNC1I
a0p1VkRRLmNlcjBzBggrBgEFBQcBCwRnMGUwYwYIKwYBBQUHMAuGV3JzeW5jOi8v
a3JpbGwucGVyYXZpeC5ncm91cC9yZXBvL3BlcmF2aXgvMC8zNTZBOTU1QkNBQUNC
MDc3NEY5QTAyRTc1MjVFM0UxRTQyNkU1NDM0Lm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA366Dt9hPIJKB
InnsXYA8T6bD+fUfMtt3dW/p9PetkchNKpRf+VYu2JkdCcSvKDqX5Ej6b140M2b2
+izOXgiYW+DF54j61EttUMqu+ziO6pTxvd43JVPYixzjoDhFVawsksaUAQqFZjZ6
b/CWO7k1oD4McepiAvoDgybGXUebaSNja47F4dmAR0VTxTeL/gyQR7z76gahYicI
OqvpXGAv9WWClMqLA46ls2fvQXyzo/yE2st9zxHDFWMbmgRgDQtVAEd4CzWFD6gC
cW1Ga8p83puNYMusaAtPYxDNZxcXlaH6axkqMhNE2UUAEFWKElwpN5TSjjC117et
gXKGxkimqA==
-----END CERTIFICATE-----
Generated at Sun Oct 25 14:41:36 2026 by rpki-client