Manifest

$ rpki-client -vvf krill.peravix.group/repo/peravix/0/356A955BCAACB0774F9A02E7525E3E1E426E5434.mft
File:                     356A955BCAACB0774F9A02E7525E3E1E426E5434.mft (raw, json)
Hash identifier:          bEou7PkMp8qsvn+VDgX1FDcwP8dkzMT63WeDWpTJDnQ=
Subject key identifier:   22:25:09:ED:70:29:4B:DF:BF:95:E2:33:E7:EA:DB:7F:D8:A6:E6:74
Authority key identifier: 35:6A:95:5B:CA:AC:B0:77:4F:9A:02:E7:52:5E:3E:1E:42:6E:54:34
Certificate issuer:       /CN=356a955bcaacb0774f9a02e7525e3e1e426e5434
Certificate serial:       735DBCB34C2EE4B0915D331E0805BD6700BB73AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NWqVW8qssHdPmgLnUl4-HkJuVDQ.cer
Subject info access:      rsync://krill.peravix.group/repo/peravix/0/356A955BCAACB0774F9A02E7525E3E1E426E5434.mft
Manifest number:          5E
Signing time:             Tue 28 Jul 2026 05:07:35 +0000
Manifest this update:     Tue 28 Jul 2026 05:02:35 +0000
Manifest next update:     Wed 29 Jul 2026 08:32:35 +0000
Files and hashes:         1: AS204208.asa (hash: CQxfMMdbGb88UqRFCEljR64HC5NPcuIhXFnnUYZgIxo=)
                          2: 356A955BCAACB0774F9A02E7525E3E1E426E5434.crl (hash: n5Vw0IZx/RSiycdUTvn31YBuGDfJ3IKZ19QQvu5mzTg=)
Validation:               OK
Signature path:           rsync://krill.peravix.group/repo/peravix/0/356A955BCAACB0774F9A02E7525E3E1E426E5434.crl
                          rsync://krill.peravix.group/repo/peravix/0/356A955BCAACB0774F9A02E7525E3E1E426E5434.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NWqVW8qssHdPmgLnUl4-HkJuVDQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 07:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:5d:bc:b3:4c:2e:e4:b0:91:5d:33:1e:08:05:bd:67:00:bb:73:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=356a955bcaacb0774f9a02e7525e3e1e426e5434
        Validity
            Not Before: Jul 28 05:02:35 2026 GMT
            Not After : Jul 29 08:32:35 2026 GMT
        Subject: CN=222509ED70294BDFBF95E233E7EADB7FD8A6E674
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:5a:88:33:bf:c5:ed:25:86:1d:8d:4b:db:a5:
                    ab:ee:72:7c:33:9c:13:e6:22:98:56:68:5a:c7:2e:
                    43:29:32:5a:1c:40:a5:0e:b4:18:e7:1e:d2:58:9e:
                    5e:bf:dc:8d:03:0c:37:9d:f9:75:fc:4e:49:fb:f5:
                    96:44:7d:cf:7c:95:1c:5d:74:07:0c:08:c6:85:1f:
                    de:46:98:bc:34:31:5d:ae:0e:45:c2:c2:30:de:cd:
                    4e:3e:46:59:07:13:93:52:40:93:f3:91:2b:95:21:
                    2b:3d:56:07:d7:71:86:05:9e:5b:b7:ce:1f:e8:7a:
                    4e:1b:fd:61:d2:2a:70:72:65:78:1d:72:eb:be:64:
                    89:03:26:ef:bf:13:f3:85:8a:f3:9a:f8:fa:46:83:
                    39:57:4a:60:df:2b:22:2a:96:89:06:be:11:1d:80:
                    7d:5c:63:e8:a6:45:91:d2:11:cd:79:a7:e7:39:56:
                    22:52:6a:66:c0:8a:81:b4:11:d5:4f:64:12:52:55:
                    11:4c:08:8b:5f:43:d7:b8:0e:81:ca:d6:3d:9e:92:
                    f8:ea:1c:b6:d6:09:18:c9:6c:66:57:2a:68:75:37:
                    97:69:84:f7:0d:2b:32:66:76:ef:5b:24:8d:71:3b:
                    05:40:8f:83:52:87:f1:cb:30:32:01:c3:c2:05:40:
                    4c:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:25:09:ED:70:29:4B:DF:BF:95:E2:33:E7:EA:DB:7F:D8:A6:E6:74
            X509v3 Authority Key Identifier:
                keyid:35:6A:95:5B:CA:AC:B0:77:4F:9A:02:E7:52:5E:3E:1E:42:6E:54:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.peravix.group/repo/peravix/0/356A955BCAACB0774F9A02E7525E3E1E426E5434.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWqVW8qssHdPmgLnUl4-HkJuVDQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.peravix.group/repo/peravix/0/356A955BCAACB0774F9A02E7525E3E1E426E5434.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:0b:59:22:d0:7c:12:ba:62:7b:b5:29:59:67:58:d6:36:c6:
         8a:da:52:eb:86:48:c5:c7:cd:f0:07:a1:e8:64:c8:b2:31:f6:
         8d:93:bd:2f:a9:3c:a6:a0:1d:81:e2:b4:eb:f3:f2:7e:3a:7b:
         e8:fe:8c:b7:a0:cc:07:d1:8d:d5:04:04:e0:8f:67:dc:fa:8f:
         69:bd:6c:44:db:7e:4d:8e:80:f4:d4:69:37:87:52:08:5d:e4:
         dc:bf:38:c0:5e:be:35:12:02:65:e5:c8:53:e9:f4:71:2b:2c:
         1d:f4:54:00:4c:c8:09:88:33:d6:27:5c:85:f2:ff:4d:bb:db:
         c7:ed:79:97:a8:af:eb:f0:ea:2d:62:ab:57:2f:3e:3e:1e:a7:
         4b:95:23:23:3e:d4:a3:2c:d7:fd:97:de:46:38:0a:ef:9a:37:
         77:09:29:26:08:72:22:88:ba:57:64:bd:41:91:4c:d2:22:63:
         f3:65:8e:c2:b9:6d:b3:69:9e:f0:c3:bb:58:c1:0c:a2:5e:3e:
         13:6f:1c:63:54:16:6c:94:d9:ab:bf:e5:b0:03:f9:10:2e:8e:
         92:0a:bc:b1:53:2e:1c:85:fb:67:2e:38:56:dd:33:4c:97:68:
         7a:84:1d:95:39:ca:81:b7:c0:5f:f3:9d:48:31:3f:f5:15:4d:
         98:75:b6:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 13:35:52 2026 by rpki-client