Manifest

$ rpki-client -vvf krill.byhill.de/repo/byhill-ca/0/F2ADBCD3E44C2B9CF63C25F6594F643284A5980E.mft
File:                     F2ADBCD3E44C2B9CF63C25F6594F643284A5980E.mft (raw, json)
Hash identifier:          9ihU2SZe0dlvG2o6hDeVKbSrgVCH89z1Tc0UP2d6P+A=
Subject key identifier:   5A:18:4E:B5:89:39:0F:58:4A:A0:A8:C0:3B:8C:16:85:C5:CA:6C:5D
Authority key identifier: F2:AD:BC:D3:E4:4C:2B:9C:F6:3C:25:F6:59:4F:64:32:84:A5:98:0E
Certificate issuer:       /CN=f2adbcd3e44c2b9cf63c25f6594f643284a5980e
Certificate serial:       5E66A6E43F8A94641B5A30B8BD79027CE73AF19D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8q280-RMK5z2PCX2WU9kMoSlmA4.cer
Subject info access:      rsync://krill.byhill.de/repo/byhill-ca/0/F2ADBCD3E44C2B9CF63C25F6594F643284A5980E.mft
Manifest number:          8A
Signing time:             Tue 28 Jul 2026 00:28:50 +0000
Manifest this update:     Tue 28 Jul 2026 00:23:50 +0000
Manifest next update:     Wed 29 Jul 2026 01:57:50 +0000
Files and hashes:         1: AS215110.asa (hash: ihSNSdt1ZA3Kj7qVuZjPLz9ZdQEHgO8zvOnfv4K5Z8Q=)
                          2: F2ADBCD3E44C2B9CF63C25F6594F643284A5980E.crl (hash: soqdSCjoaG7cgnqbgKvgqQXx/sha9EbFZpd/Ocq4IiE=)
Validation:               OK
Signature path:           rsync://krill.byhill.de/repo/byhill-ca/0/F2ADBCD3E44C2B9CF63C25F6594F643284A5980E.crl
                          rsync://krill.byhill.de/repo/byhill-ca/0/F2ADBCD3E44C2B9CF63C25F6594F643284A5980E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8q280-RMK5z2PCX2WU9kMoSlmA4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 01:57:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:66:a6:e4:3f:8a:94:64:1b:5a:30:b8:bd:79:02:7c:e7:3a:f1:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2adbcd3e44c2b9cf63c25f6594f643284a5980e
        Validity
            Not Before: Jul 28 00:23:50 2026 GMT
            Not After : Jul 29 01:57:50 2026 GMT
        Subject: CN=5A184EB589390F584AA0A8C03B8C1685C5CA6C5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e1:1f:78:79:33:ea:cc:49:76:88:ad:95:d2:
                    57:7b:0e:80:4a:dd:df:b9:49:3a:82:1d:fb:4a:45:
                    20:e2:be:c8:73:83:fb:66:3c:72:c0:43:2f:a6:7e:
                    61:8b:82:32:46:4d:64:aa:9e:f7:22:f9:cc:de:ba:
                    0b:ff:91:2d:6c:cc:0b:32:5d:2f:b8:b0:46:3c:a7:
                    b8:5f:0f:eb:da:a9:a9:86:b3:dd:32:d7:87:f9:ec:
                    8d:8b:94:c8:db:cd:b7:37:ba:29:62:bc:11:15:e3:
                    f5:6e:9b:12:91:f2:f5:a3:12:2b:74:be:a9:a0:53:
                    50:75:05:9a:b7:04:62:50:c0:0d:57:91:1d:c1:68:
                    4d:c2:ca:14:9c:e7:e1:80:ab:91:50:6e:ce:5f:53:
                    16:75:0e:0c:d6:55:6d:c4:74:06:11:e5:f5:54:7a:
                    1b:8c:9c:73:d7:79:10:38:62:92:69:82:00:90:60:
                    02:78:17:82:19:a5:b3:09:5a:2b:19:91:36:35:02:
                    21:db:11:b2:9b:d6:ce:92:69:dd:92:e6:3d:a2:4b:
                    32:ed:d7:bc:3a:20:11:35:7d:c4:45:76:0f:1e:00:
                    78:ae:3b:0f:e3:76:28:99:2e:2b:85:90:b7:e1:2d:
                    31:31:04:9e:4e:28:92:dc:eb:3f:20:c5:9d:64:7d:
                    20:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:18:4E:B5:89:39:0F:58:4A:A0:A8:C0:3B:8C:16:85:C5:CA:6C:5D
            X509v3 Authority Key Identifier:
                keyid:F2:AD:BC:D3:E4:4C:2B:9C:F6:3C:25:F6:59:4F:64:32:84:A5:98:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.byhill.de/repo/byhill-ca/0/F2ADBCD3E44C2B9CF63C25F6594F643284A5980E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8q280-RMK5z2PCX2WU9kMoSlmA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.byhill.de/repo/byhill-ca/0/F2ADBCD3E44C2B9CF63C25F6594F643284A5980E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:3a:cd:99:3a:e9:09:60:ac:ac:4a:17:9c:84:bf:85:df:bb:
         cf:80:d9:8c:95:8d:13:62:28:bb:9c:89:ef:06:31:ee:2d:d8:
         07:a4:4c:f8:51:50:2f:c8:8b:5f:c3:bb:7b:5b:ba:3d:70:01:
         06:7e:10:64:50:ca:87:4d:c7:95:ef:ee:ad:ae:be:5c:d2:8e:
         45:df:54:ce:19:92:31:53:43:7f:bd:a7:f2:c0:5e:95:ad:b6:
         0c:e7:5b:20:53:f4:92:48:39:8a:40:35:3b:54:31:c2:e2:4b:
         c1:d5:b5:74:d1:4a:51:4c:58:41:56:d4:de:7e:15:7a:e8:52:
         d3:24:b8:0d:4f:0c:cb:28:71:01:ff:92:69:ea:fd:d6:ab:f6:
         29:a2:e7:77:ba:e0:c9:81:d6:53:7c:ac:2c:fb:44:0e:6e:11:
         90:b1:78:7d:e1:de:4c:f9:6b:67:44:1e:2c:dc:83:29:bc:5d:
         6c:a0:c0:fb:65:f0:03:2c:87:54:c2:17:cc:e0:76:48:ed:40:
         f8:da:71:7d:01:08:7a:23:61:ff:27:64:66:73:93:c3:ce:4c:
         36:b8:25:44:1b:dd:7d:a1:8c:c8:8d:06:1d:3a:e1:8b:cd:40:
         f7:af:70:7b:50:63:17:56:7e:39:da:63:51:73:4b:70:8a:23:
         f3:5a:9a:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:50:38 2026 by rpki-client