Manifest

$ rpki-client -vvvf krill.byhill.de/repo/byhill-ca/0/F2ADBCD3E44C2B9CF63C25F6594F643284A5980E.mft
File:                     F2ADBCD3E44C2B9CF63C25F6594F643284A5980E.mft (raw, json)
Hash identifier:          xw09HQzU1cgX2fFBlhIylOQTHgw29o7qGqKAL+Ra9+0=
Subject key identifier:   E3:5B:64:F9:20:C3:22:20:B4:C0:92:B9:57:64:A0:5C:1F:04:E3:CC
Authority key identifier: F2:AD:BC:D3:E4:4C:2B:9C:F6:3C:25:F6:59:4F:64:32:84:A5:98:0E
Certificate issuer:       /CN=f2adbcd3e44c2b9cf63c25f6594f643284a5980e
Certificate serial:       35AE62EF8A799307B86C5DDEB1BFF7478EE0A568
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8q280-RMK5z2PCX2WU9kMoSlmA4.cer
Subject info access:      rsync://krill.byhill.de/repo/byhill-ca/0/F2ADBCD3E44C2B9CF63C25F6594F643284A5980E.mft
Manifest number:          D5
Signing time:             Sun 20 Sep 2026 03:35:18 +0000
Manifest this update:     Sun 20 Sep 2026 03:30:18 +0000
Manifest next update:     Mon 21 Sep 2026 04:58:18 +0000
Files and hashes:         1: F2ADBCD3E44C2B9CF63C25F6594F643284A5980E.crl (hash: QQoy/dkN+4laPRrWLP0J3USbHvJRgoXoTTgRbrG9YKo=)
                          2: AS215110.asa (hash: 8XjGwMUuG9cC3E2HQVmxZ+VSNbwuyJO7IUq0o2HjpeM=)
Validation:               OK
Signature path:           rsync://krill.byhill.de/repo/byhill-ca/0/F2ADBCD3E44C2B9CF63C25F6594F643284A5980E.crl
                          rsync://krill.byhill.de/repo/byhill-ca/0/F2ADBCD3E44C2B9CF63C25F6594F643284A5980E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8q280-RMK5z2PCX2WU9kMoSlmA4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 04:58:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:ae:62:ef:8a:79:93:07:b8:6c:5d:de:b1:bf:f7:47:8e:e0:a5:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2adbcd3e44c2b9cf63c25f6594f643284a5980e
        Validity
            Not Before: Sep 20 03:30:18 2026 GMT
            Not After : Sep 21 04:58:18 2026 GMT
        Subject: CN=E35B64F920C32220B4C092B95764A05C1F04E3CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:93:ad:55:08:94:5c:a9:46:2d:f4:fc:41:00:
                    f2:10:5d:88:27:70:eb:51:86:cb:62:22:f0:03:7a:
                    b6:70:95:97:15:d3:b0:e0:5e:c7:70:f8:0f:bd:b2:
                    40:86:de:f0:96:11:c3:f0:52:16:99:a6:16:3a:55:
                    02:10:58:ad:1a:67:b2:3e:a6:93:8e:6a:92:39:45:
                    94:29:85:6d:26:44:f8:3e:08:80:44:90:2e:ab:00:
                    de:d4:34:fb:dd:1e:c1:c2:df:d9:ce:cf:c2:53:e5:
                    59:de:ae:79:3e:9d:1d:b7:2b:69:e2:2d:2a:c8:1d:
                    60:d2:ae:36:cf:80:de:44:d3:5c:e1:45:dc:8d:17:
                    f1:a7:30:5b:86:e2:57:e2:c1:52:d2:3b:6e:3a:ef:
                    a8:1c:20:f5:10:91:b8:f4:91:6d:15:2b:63:7d:72:
                    ff:91:56:24:3e:c1:4b:3a:cd:2a:3b:9e:f4:73:c5:
                    e7:4d:d0:13:8a:d2:88:4f:ae:c5:24:7a:75:cc:71:
                    a3:6e:c3:fb:ce:12:90:c6:c2:2c:91:9a:7b:22:62:
                    ea:b9:72:be:3a:f3:fc:9a:fb:ec:52:2d:8a:5a:89:
                    c8:f6:44:36:09:05:9c:0e:94:ea:93:0f:74:88:4c:
                    7a:10:a3:5b:47:94:b3:3e:97:65:da:ca:d1:f4:65:
                    8f:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:5B:64:F9:20:C3:22:20:B4:C0:92:B9:57:64:A0:5C:1F:04:E3:CC
            X509v3 Authority Key Identifier:
                keyid:F2:AD:BC:D3:E4:4C:2B:9C:F6:3C:25:F6:59:4F:64:32:84:A5:98:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.byhill.de/repo/byhill-ca/0/F2ADBCD3E44C2B9CF63C25F6594F643284A5980E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8q280-RMK5z2PCX2WU9kMoSlmA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.byhill.de/repo/byhill-ca/0/F2ADBCD3E44C2B9CF63C25F6594F643284A5980E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:3a:40:be:4a:22:bd:0d:79:31:5e:f6:00:8e:d3:26:6d:6f:
         20:4c:f2:ee:73:a1:80:3e:38:d3:e6:97:51:77:d6:f3:5e:f2:
         bc:fa:a0:e4:22:2d:b4:18:c5:44:e8:e9:82:33:1b:a2:2d:21:
         ca:b3:c4:63:b0:79:6e:ad:38:fe:52:0d:38:60:08:97:ef:5e:
         80:c3:a8:4e:0b:e7:52:c0:1f:59:cf:38:ba:f5:13:ec:23:43:
         52:3d:6e:ea:02:9f:49:d2:22:d5:2f:f6:97:01:b4:7a:d5:d6:
         2a:d7:90:24:83:dc:0f:55:7c:fc:13:ac:72:a0:84:55:45:53:
         d2:4e:d1:12:90:ee:11:c1:f8:5c:9b:8b:fe:b3:11:fe:c9:7b:
         3d:74:12:a8:f0:be:36:7c:e7:63:9c:7f:fc:34:32:f6:e8:0b:
         ea:a6:65:86:90:11:15:c2:f5:e7:cc:75:64:ca:ae:98:8b:c0:
         e2:9b:f9:5a:04:c3:c9:b7:9b:67:72:19:11:40:78:c7:02:c7:
         7c:16:b4:d2:e6:ec:01:58:a1:a7:17:16:46:eb:48:fd:8d:17:
         75:0e:95:74:55:4c:79:5e:17:53:e8:eb:ae:c5:63:f2:67:7b:
         34:3d:93:ac:6f:40:f4:70:7e:6e:7a:53:7e:11:c7:01:73:f9:
         bd:13:04:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:33:59 2026 by rpki-client