$ rpki-client -vvf krill.byhill.de/repo/byhill-ca/1/F55C2745322CEC1805815DCD65BC6AFFD99168DA.mft File: F55C2745322CEC1805815DCD65BC6AFFD99168DA.mft (raw, json) Hash identifier: grXjJ8A5uTE0jcMAFRR71b8z+MNC7PKdnTwuFtuT6ec= Subject key identifier: AA:9A:80:E0:DB:2E:85:C1:99:4E:F6:C6:A3:6D:BB:8A:C1:A7:D6:D3 Authority key identifier: F5:5C:27:45:32:2C:EC:18:05:81:5D:CD:65:BC:6A:FF:D9:91:68:DA Certificate issuer: /CN=F55C2745322CEC1805815DCD65BC6AFFD99168DA Certificate serial: 63E049C0640CD46CBBB4047CCCC867DEE6CF987E Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/F55C2745322CEC1805815DCD65BC6AFFD99168DA.cer Subject info access: rsync://krill.byhill.de/repo/byhill-ca/1/F55C2745322CEC1805815DCD65BC6AFFD99168DA.mft Manifest number: 46 Signing time: Fri 12 Jun 2026 13:40:49 +0000 Manifest this update: Fri 12 Jun 2026 13:35:49 +0000 Manifest next update: Sat 13 Jun 2026 17:14:49 +0000 Files and hashes: 1: 326131333a633863343a373130303a3a2f34302d3430203d3e20323032333538.roa (hash: d+Wfk22NHdZ1Lc1JTtegQebaE82OrinSLcgeTPsLLUs=) 2: F55C2745322CEC1805815DCD65BC6AFFD99168DA.crl (hash: pQW4IttigY7/XA6Guc92WoUE95zwGqJPPh7QM7rFIDg=) Validation: OK Signature path: rsync://krill.byhill.de/repo/byhill-ca/1/F55C2745322CEC1805815DCD65BC6AFFD99168DA.crl rsync://krill.byhill.de/repo/byhill-ca/1/F55C2745322CEC1805815DCD65BC6AFFD99168DA.mft rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/F55C2745322CEC1805815DCD65BC6AFFD99168DA.cer rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.crl rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.mft rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/1E74494683D8D2A4E029AAD4573928D2A55FA411.cer rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.crl rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Jun 2026 17:14:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:e0:49:c0:64:0c:d4:6c:bb:b4:04:7c:cc:c8:67:de:e6:cf:98:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F55C2745322CEC1805815DCD65BC6AFFD99168DA Validity Not Before: Jun 12 13:35:49 2026 GMT Not After : Jun 13 17:14:49 2026 GMT Subject: CN=AA9A80E0DB2E85C1994EF6C6A36DBB8AC1A7D6D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:46:0b:f7:57:88:1b:52:93:ec:0f:82:36:3e: 22:53:81:fe:25:83:0d:af:ae:12:5e:b2:f4:46:5f: a5:52:a4:64:00:0a:62:48:88:39:95:01:ab:7f:7d: 2e:92:e7:50:9f:2d:ce:4e:30:e9:f2:7d:a0:0c:24: 32:db:88:fb:4e:48:2e:87:fd:7b:9e:38:72:9a:4d: 61:f6:0f:e2:ff:8f:03:32:5a:31:91:96:11:ad:37: e5:5a:41:8c:a8:d3:96:ab:f0:93:83:a3:5e:43:d5: 93:1f:46:22:a7:19:28:ea:e0:93:77:60:95:f4:11: 4e:b3:25:17:05:ee:03:22:97:96:b6:24:e3:a5:43: 67:b8:82:70:09:80:9d:ee:0e:9e:f5:93:d1:0c:b7: a0:7c:71:48:22:2d:74:61:11:5c:cd:da:bc:3d:08: 5b:f9:b0:e2:98:e1:71:3c:a1:66:3c:37:97:94:c8: ca:bd:69:aa:0b:30:ed:5e:66:e0:64:ca:58:8b:32: d1:ae:3c:de:c8:d9:79:7a:b4:88:9b:cc:d5:22:6d: 49:93:49:63:a9:6d:7f:a1:48:de:05:4e:1e:9d:9f: 80:f0:89:d4:c7:ac:d7:e7:1a:e7:50:8a:1a:58:f4: b7:f3:da:fd:a9:48:b1:e0:a5:2e:1b:d8:ec:75:ce: 15:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:9A:80:E0:DB:2E:85:C1:99:4E:F6:C6:A3:6D:BB:8A:C1:A7:D6:D3 X509v3 Authority Key Identifier: keyid:F5:5C:27:45:32:2C:EC:18:05:81:5D:CD:65:BC:6A:FF:D9:91:68:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.byhill.de/repo/byhill-ca/1/F55C2745322CEC1805815DCD65BC6AFFD99168DA.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/F55C2745322CEC1805815DCD65BC6AFFD99168DA.cer Subject Information Access: Signed Object - URI:rsync://krill.byhill.de/repo/byhill-ca/1/F55C2745322CEC1805815DCD65BC6AFFD99168DA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:23:95:d3:40:80:9b:a1:fc:e0:50:b1:ba:e4:f0:fd:cd:f7: 5d:39:99:79:51:0e:b8:b3:0e:b9:70:3b:b8:a0:5c:01:3a:c0: f6:11:89:fd:b3:0b:69:c7:23:60:94:53:37:88:ee:fe:da:0f: d3:c8:eb:12:cd:b6:7a:9a:0e:a0:56:e5:e9:06:85:a4:fc:ef: da:35:b7:7f:22:5d:96:71:f2:d8:5e:fa:f1:2f:e6:fa:87:1c: 81:5a:4b:7f:ea:92:c1:e7:14:b0:95:b2:ba:b9:86:f0:c5:76: bc:53:ac:3a:88:8f:16:81:dd:75:4b:91:8a:82:8a:fc:e9:17: ef:eb:b5:f2:d0:c2:6b:c5:ac:56:4f:85:1a:ee:21:46:1c:b9: 28:10:11:6c:89:c1:1a:bf:28:bd:f9:cb:89:bd:7f:1a:c6:b5: 62:86:78:3e:15:a0:94:a9:78:d5:66:1e:5d:9f:aa:ea:9e:5c: 9a:f3:3b:02:43:8c:e9:ac:f5:26:9f:f5:8a:27:b0:dc:c2:aa: 24:ec:e4:ad:59:56:79:f8:8c:57:e1:61:14:db:c4:8e:4b:5d: 52:55:33:e6:71:a6:4a:0b:06:99:f3:60:2d:92:6c:ff:d3:6a: f0:d1:95:7b:1e:4c:a4:52:c5:98:99:c7:9d:9a:df:b2:bb:17: b8:95:b7:b9 -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgIUY+BJwGQM1Gy7tAR8zMhn3ubPmH4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjU1QzI3NDUzMjJDRUMxODA1ODE1RENENjVCQzZBRkZE OTkxNjhEQTAeFw0yNjA2MTIxMzM1NDlaFw0yNjA2MTMxNzE0NDlaMDMxMTAvBgNV BAMTKEFBOUE4MEUwREIyRTg1QzE5OTRFRjZDNkEzNkRCQjhBQzFBN0Q2RDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4Rgv3V4gbUpPsD4I2PiJTgf4l gw2vrhJesvRGX6VSpGQACmJIiDmVAat/fS6S51CfLc5OMOnyfaAMJDLbiPtOSC6H /XueOHKaTWH2D+L/jwMyWjGRlhGtN+VaQYyo05ar8JODo15D1ZMfRiKnGSjq4JN3 YJX0EU6zJRcF7gMil5a2JOOlQ2e4gnAJgJ3uDp71k9EMt6B8cUgiLXRhEVzN2rw9 CFv5sOKY4XE8oWY8N5eUyMq9aaoLMO1eZuBkyliLMtGuPN7I2Xl6tIibzNUibUmT SWOpbX+hSN4FTh6dn4DwidTHrNfnGudQihpY9Lfz2v2pSLHgpS4b2Ox1zhVvAgMB AAGjggIkMIICIDAdBgNVHQ4EFgQUqpqA4NsuhcGZTvbGo227isGn1tMwHwYDVR0j BBgwFoAU9VwnRTIs7BgFgV3NZbxq/9mRaNowDgYDVR0PAQH/BAQDAgeAMGYGA1Ud HwRfMF0wW6BZoFeGVXJzeW5jOi8va3JpbGwuYnloaWxsLmRlL3JlcG8vYnloaWxs LWNhLzEvRjU1QzI3NDUzMjJDRUMxODA1ODE1RENENjVCQzZBRkZEOTkxNjhEQS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wMDJmOGVlNi1hYmU3LTRh ZTgtOTY0Yy03ODhiYjk4Yzk3NWMvMS9GNTVDMjc0NTMyMkNFQzE4MDU4MTVEQ0Q2 NUJDNkFGRkQ5OTE2OERBLmNlcjBxBggrBgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuG VXJzeW5jOi8va3JpbGwuYnloaWxsLmRlL3JlcG8vYnloaWxsLWNhLzEvRjU1QzI3 NDUzMjJDRUMxODA1ODE1RENENjVCQzZBRkZEOTkxNjhEQS5tZnQwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAG4j ldNAgJuh/OBQsbrk8P3N9105mXlRDrizDrlwO7igXAE6wPYRif2zC2nHI2CUUzeI 7v7aD9PI6xLNtnqaDqBW5ekGhaT879o1t38iXZZx8the+vEv5vqHHIFaS3/qksHn FLCVsrq5hvDFdrxTrDqIjxaB3XVLkYqCivzpF+/rtfLQwmvFrFZPhRruIUYcuSgQ EWyJwRq/KL35y4m9fxrGtWKGeD4VoJSpeNVmHl2fquqeXJrzOwJDjOms9Saf9Yon sNzCqiTs5K1ZVnn4jFfhYRTbxI5LXVJVM+ZxpkoLBpnzYC2SbP/TavDRlXseTKRS xZiZx52a37K7F7iVt7k= -----END CERTIFICATE-----Generated at Sat Jun 13 10:16:31 2026 by rpki-client