Manifest

$ rpki-client -vvf krill.byhill.de/repo/byhill-ca/0/F2ADBCD3E44C2B9CF63C25F6594F643284A5980E.mft
File:                     F2ADBCD3E44C2B9CF63C25F6594F643284A5980E.mft (raw, json)
Hash identifier:          C478lfj2tHhC8a/yWBKM9dtDQ+rY7u3GIyjsSd+EUKI=
Subject key identifier:   08:87:54:07:F4:BE:65:78:22:CD:0A:4B:9D:9C:B4:93:06:4E:0B:A9
Authority key identifier: F2:AD:BC:D3:E4:4C:2B:9C:F6:3C:25:F6:59:4F:64:32:84:A5:98:0E
Certificate issuer:       /CN=f2adbcd3e44c2b9cf63c25f6594f643284a5980e
Certificate serial:       190338E7F3C2CABF13704CB21F19A33555A7EAFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8q280-RMK5z2PCX2WU9kMoSlmA4.cer
Subject info access:      rsync://krill.byhill.de/repo/byhill-ca/0/F2ADBCD3E44C2B9CF63C25F6594F643284A5980E.mft
Manifest number:          8B
Signing time:             Tue 28 Jul 2026 17:58:50 +0000
Manifest this update:     Tue 28 Jul 2026 17:53:50 +0000
Manifest next update:     Wed 29 Jul 2026 20:47:50 +0000
Files and hashes:         1: F2ADBCD3E44C2B9CF63C25F6594F643284A5980E.crl (hash: 7MtFH8WqvYahdLEW/cDNLTGC+X86rHJBqhXLT+F3W5c=)
                          2: AS215110.asa (hash: ihSNSdt1ZA3Kj7qVuZjPLz9ZdQEHgO8zvOnfv4K5Z8Q=)
Validation:               OK
Signature path:           rsync://krill.byhill.de/repo/byhill-ca/0/F2ADBCD3E44C2B9CF63C25F6594F643284A5980E.crl
                          rsync://krill.byhill.de/repo/byhill-ca/0/F2ADBCD3E44C2B9CF63C25F6594F643284A5980E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8q280-RMK5z2PCX2WU9kMoSlmA4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:03:38:e7:f3:c2:ca:bf:13:70:4c:b2:1f:19:a3:35:55:a7:ea:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2adbcd3e44c2b9cf63c25f6594f643284a5980e
        Validity
            Not Before: Jul 28 17:53:50 2026 GMT
            Not After : Jul 29 20:47:50 2026 GMT
        Subject: CN=08875407F4BE657822CD0A4B9D9CB493064E0BA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:2e:4b:77:17:2f:51:56:42:59:a5:31:03:60:
                    27:bf:c7:ab:a0:ee:d7:6b:44:ba:42:ba:37:f5:d9:
                    e8:dd:8a:45:1f:87:fe:80:51:45:77:f2:d8:c3:27:
                    24:6d:e9:2b:10:43:1f:1a:91:95:35:7c:61:cb:90:
                    bf:f9:13:46:c1:e9:9f:b0:f0:3e:0e:c4:32:5f:12:
                    30:12:43:5c:a6:13:fb:22:cd:b1:1c:43:93:15:9b:
                    67:02:2d:cc:15:5a:12:99:a8:ee:dc:57:fa:f2:40:
                    a5:67:fd:78:a0:5f:08:a3:7c:27:f9:1c:84:16:d3:
                    ab:7d:b9:9d:c9:b7:26:82:23:9c:e2:9d:5f:bf:a5:
                    f9:36:48:a1:a1:1f:72:e2:b5:06:08:f7:14:e1:d5:
                    5e:2c:b0:15:fb:88:9d:68:09:23:6f:99:88:e7:d4:
                    24:82:08:60:65:37:22:2d:7c:f4:00:5b:7a:f7:e4:
                    18:37:95:df:03:e0:3b:a7:67:79:c9:d7:82:e9:3a:
                    82:92:12:4e:5d:aa:10:9c:32:65:68:e5:aa:ad:9d:
                    5e:1e:77:04:c6:7a:9e:6f:0e:db:83:9c:b7:bc:38:
                    1e:f6:13:e7:dc:c2:f1:80:ef:b1:6c:e2:1c:b9:42:
                    19:b8:42:70:97:a6:13:2b:7b:45:2b:73:7d:b0:45:
                    82:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:87:54:07:F4:BE:65:78:22:CD:0A:4B:9D:9C:B4:93:06:4E:0B:A9
            X509v3 Authority Key Identifier:
                keyid:F2:AD:BC:D3:E4:4C:2B:9C:F6:3C:25:F6:59:4F:64:32:84:A5:98:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.byhill.de/repo/byhill-ca/0/F2ADBCD3E44C2B9CF63C25F6594F643284A5980E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8q280-RMK5z2PCX2WU9kMoSlmA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.byhill.de/repo/byhill-ca/0/F2ADBCD3E44C2B9CF63C25F6594F643284A5980E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:a5:b6:9a:f2:33:35:a8:3c:20:95:36:d6:4b:4a:9e:81:bd:
         a5:e4:cc:bd:43:40:19:fa:8f:dd:9d:f8:cc:de:3c:d5:03:76:
         2d:31:5a:e3:c0:a6:e1:c5:19:24:7d:2c:c8:8a:36:97:e6:d5:
         ad:92:96:dd:45:c3:0c:df:29:b1:ff:e4:28:9e:e7:24:6f:e9:
         8f:c8:0c:c9:9d:39:b9:24:15:a4:ac:eb:c8:c5:5a:f6:3d:f1:
         ec:c3:42:f6:f4:36:62:5d:15:21:5a:11:64:0b:8c:81:2e:1b:
         44:18:20:fd:27:c9:21:18:ee:d5:45:9d:10:07:55:e3:a3:06:
         52:73:81:ec:a9:2c:8a:f8:e3:26:f9:fb:02:04:da:8e:89:19:
         2a:d2:0c:ec:47:35:d8:80:91:5d:54:26:2d:c8:3c:89:2e:90:
         4d:57:08:47:1a:8d:da:12:1a:5c:64:8d:68:46:89:10:16:cc:
         d5:1e:f3:65:0b:76:49:2b:57:76:87:57:19:52:59:92:2f:a3:
         1c:59:c7:de:21:2f:89:7d:f4:43:9b:c8:83:b0:d7:f1:b1:e8:
         64:ea:bc:55:f3:45:07:b4:64:b9:72:4d:49:0c:13:56:2d:14:
         42:6f:93:a9:a1:fe:af:df:7a:2c:d1:99:e5:40:73:db:18:3d:
         21:ee:61:ed
-----BEGIN CERTIFICATE-----
MIIE3zCCA8egAwIBAgIUGQM45/PCyr8TcEyyHxmjNVWn6v8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZjJhZGJjZDNlNDRjMmI5Y2Y2M2MyNWY2NTk0ZjY0MzI4
NGE1OTgwZTAeFw0yNjA3MjgxNzUzNTBaFw0yNjA3MjkyMDQ3NTBaMDMxMTAvBgNV
BAMTKDA4ODc1NDA3RjRCRTY1NzgyMkNEMEE0QjlEOUNCNDkzMDY0RTBCQTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCDLkt3Fy9RVkJZpTEDYCe/x6ug
7tdrRLpCujf12ejdikUfh/6AUUV38tjDJyRt6SsQQx8akZU1fGHLkL/5E0bB6Z+w
8D4OxDJfEjASQ1ymE/sizbEcQ5MVm2cCLcwVWhKZqO7cV/ryQKVn/XigXwijfCf5
HIQW06t9uZ3JtyaCI5zinV+/pfk2SKGhH3LitQYI9xTh1V4ssBX7iJ1oCSNvmYjn
1CSCCGBlNyItfPQAW3r35Bg3ld8D4DunZ3nJ14LpOoKSEk5dqhCcMmVo5aqtnV4e
dwTGep5vDtuDnLe8OB72E+fcwvGA77Fs4hy5Qhm4QnCXphMre0Urc32wRYLfAgMB
AAGjggHpMIIB5TAdBgNVHQ4EFgQUCIdUB/S+ZXgizQpLnZy0kwZOC6kwHwYDVR0j
BBgwFoAU8q280+RMK5z2PCX2WU9kMoSlmA4wDgYDVR0PAQH/BAQDAgeAMGYGA1Ud
HwRfMF0wW6BZoFeGVXJzeW5jOi8va3JpbGwuYnloaWxsLmRlL3JlcG8vYnloaWxs
LWNhLzAvRjJBREJDRDNFNDRDMkI5Q0Y2M0MyNUY2NTk0RjY0MzI4NEE1OTgwRS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhxMjgwLVJNSzV6MlBDWDJXVTlrTW9T
bG1BNC5jZXIwcQYIKwYBBQUHAQsEZTBjMGEGCCsGAQUFBzALhlVyc3luYzovL2ty
aWxsLmJ5aGlsbC5kZS9yZXBvL2J5aGlsbC1jYS8wL0YyQURCQ0QzRTQ0QzJCOUNG
NjNDMjVGNjU5NEY2NDMyODRBNTk4MEUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEF
BQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBPpbaa8jM1qDwglTbW
S0qegb2l5My9Q0AZ+o/dnfjM3jzVA3YtMVrjwKbhxRkkfSzIijaX5tWtkpbdRcMM
3ymx/+Qonuckb+mPyAzJnTm5JBWkrOvIxVr2PfHsw0L29DZiXRUhWhFkC4yBLhtE
GCD9J8khGO7VRZ0QB1XjowZSc4HsqSyK+OMm+fsCBNqOiRkq0gzsRzXYgJFdVCYt
yDyJLpBNVwhHGo3aEhpcZI1oRokQFszVHvNlC3ZJK1d2h1cZUlmSL6McWcfeIS+J
ffRDm8iDsNfxsehk6rxV80UHtGS5ck1JDBNWLRRCb5Opof6v33os0ZnlQHPbGD0h
7mHt
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:21:25 2026 by rpki-client