$ rpki-client -vvvf krill.byhill.de/repo/byhill-ca/1/F55C2745322CEC1805815DCD65BC6AFFD99168DA.mft File: F55C2745322CEC1805815DCD65BC6AFFD99168DA.mft (raw, json) Hash identifier: WWzrrHDUM6im8so+4T+D9G/klUH77oOs8pTevk9YMew= Subject key identifier: 66:87:E7:1A:63:B1:E4:43:1C:53:38:EB:96:9D:C3:35:E5:08:15:4E Authority key identifier: F5:5C:27:45:32:2C:EC:18:05:81:5D:CD:65:BC:6A:FF:D9:91:68:DA Certificate issuer: /CN=F55C2745322CEC1805815DCD65BC6AFFD99168DA Certificate serial: 2C79154F9CFD22C785B9CD736BCCD08A6BF5B45F Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/F55C2745322CEC1805815DCD65BC6AFFD99168DA.cer Subject info access: rsync://krill.byhill.de/repo/byhill-ca/1/F55C2745322CEC1805815DCD65BC6AFFD99168DA.mft Manifest number: D4 Signing time: Sun 20 Sep 2026 18:30:18 +0000 Manifest this update: Sun 20 Sep 2026 18:25:18 +0000 Manifest next update: Mon 21 Sep 2026 20:24:18 +0000 Files and hashes: 1: 326131333a633863343a373031383a3a2f34382d3438203d3e20323139343138.roa (hash: ZyEmmv2NtM1cJBidwRboYBKa7EjRkpw/Hw7NvcYUYx4=) 2: F55C2745322CEC1805815DCD65BC6AFFD99168DA.crl (hash: 7YtauN+P4d3xVHJf+kOq/vFfnPg+B0kFvfty5VniaOk=) 3: 326131333a633863343a373031393a3a2f34382d3438203d3e20323139343138.roa (hash: OcmweSrCgsMNuPf6ZZytHU9NxvCytKfcDUyLD9zAQ1Y=) 4: 326131333a633863343a373130303a3a2f34302d3430203d3e20323135313130.roa (hash: cEpZqnCUCXvDnH3pSPMSUOx1tDbxwMrkTLWn8/Sj84U=) Validation: OK Signature path: rsync://krill.byhill.de/repo/byhill-ca/1/F55C2745322CEC1805815DCD65BC6AFFD99168DA.crl rsync://krill.byhill.de/repo/byhill-ca/1/F55C2745322CEC1805815DCD65BC6AFFD99168DA.mft rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/F55C2745322CEC1805815DCD65BC6AFFD99168DA.cer rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.crl rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.mft rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/1E74494683D8D2A4E029AAD4573928D2A55FA411.cer rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.crl rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 09:15:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:79:15:4f:9c:fd:22:c7:85:b9:cd:73:6b:cc:d0:8a:6b:f5:b4:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F55C2745322CEC1805815DCD65BC6AFFD99168DA Validity Not Before: Sep 20 18:25:18 2026 GMT Not After : Sep 21 20:24:18 2026 GMT Subject: CN=6687E71A63B1E4431C5338EB969DC335E508154E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:3a:51:d9:10:cc:1b:6f:ac:c6:26:97:1d:03: 7c:c8:4f:5e:37:fb:ce:ba:0b:bc:10:58:e6:ed:bb: 3c:6b:23:fb:04:2f:fa:4f:14:27:9e:2c:d2:6e:d8: 6b:87:5d:0a:ce:5b:42:40:4e:ac:40:16:b2:1f:fd: a4:34:bf:da:63:65:27:ce:31:47:5e:06:ce:a2:c1: b4:33:20:2d:3d:af:84:1e:eb:6e:b9:b8:c4:c2:38: e8:a5:db:88:89:af:fb:60:35:79:5f:26:dc:52:37: 0c:9c:bc:7e:f1:e6:2e:63:1f:a8:35:bd:16:ca:0e: a7:d9:ae:f2:55:5c:e8:b3:15:c6:68:45:42:34:81: d4:66:10:9f:56:b0:7f:5b:26:02:53:56:e1:ff:82: aa:a9:5a:d6:62:20:b2:e9:ec:34:15:9b:83:19:58: ec:d8:19:6d:66:24:aa:3f:b6:5f:17:8d:f1:dc:76: 98:12:20:f6:d8:c1:7c:5e:59:e0:6c:ca:02:8a:ee: 5a:47:0f:d9:12:a6:85:a1:26:43:fc:b5:06:e7:91: 02:a5:8d:f3:93:e5:a9:5a:23:1f:94:a9:e9:38:06: af:8e:0d:c2:7e:c9:07:c7:cd:1e:e3:ce:ce:4a:53: d5:b8:e4:e3:12:47:37:a7:b7:70:9e:5d:2b:f9:f1: e3:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:87:E7:1A:63:B1:E4:43:1C:53:38:EB:96:9D:C3:35:E5:08:15:4E X509v3 Authority Key Identifier: keyid:F5:5C:27:45:32:2C:EC:18:05:81:5D:CD:65:BC:6A:FF:D9:91:68:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.byhill.de/repo/byhill-ca/1/F55C2745322CEC1805815DCD65BC6AFFD99168DA.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/F55C2745322CEC1805815DCD65BC6AFFD99168DA.cer Subject Information Access: Signed Object - URI:rsync://krill.byhill.de/repo/byhill-ca/1/F55C2745322CEC1805815DCD65BC6AFFD99168DA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:db:17:f3:ce:b4:34:f6:fc:1a:d3:c2:ba:98:1f:ea:ad:54: c8:f8:81:9f:8d:90:ad:64:20:d6:8b:dc:22:5d:c0:ad:c7:f3: 7b:1d:08:ae:28:2f:5f:61:f8:73:00:0f:71:80:74:96:b9:38: 00:42:b0:6f:2a:98:c0:f8:22:ab:6d:51:42:d5:a1:29:48:d9: 4b:a2:2c:d4:50:a5:be:de:23:fb:d9:10:a7:8b:9a:65:69:b5: be:75:3e:5b:52:80:55:da:81:5e:56:50:56:96:83:0d:3d:21: 8e:52:d5:a4:84:82:73:41:5b:22:c8:e1:c0:3a:2c:fb:30:6d: 8d:ac:15:ab:4b:c9:20:3f:35:93:a3:3e:98:24:9b:c9:b4:9c: d5:47:89:b0:11:14:10:c7:9b:ff:69:f2:ee:ab:c1:91:37:92: da:fa:7b:73:b3:5d:3e:54:ca:e4:1e:b2:c2:b4:54:6e:87:75: 6f:ab:f7:1a:35:12:ea:eb:31:f7:14:68:64:fb:35:d7:0f:47: c2:0c:51:9d:60:69:03:a4:f2:f1:79:9c:b3:27:6f:38:fb:13: e9:8a:ab:b0:58:c8:e5:45:70:45:50:67:07:a4:56:d8:5e:1f: 6f:df:85:92:02:22:a2:d7:78:b6:b9:42:e2:67:05:11:b0:18: e8:0b:57:0d -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgIULHkVT5z9IseFuc1za8zQimv1tF8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjU1QzI3NDUzMjJDRUMxODA1ODE1RENENjVCQzZBRkZE OTkxNjhEQTAeFw0yNjA5MjAxODI1MThaFw0yNjA5MjEyMDI0MThaMDMxMTAvBgNV BAMTKDY2ODdFNzFBNjNCMUU0NDMxQzUzMzhFQjk2OURDMzM1RTUwODE1NEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwOlHZEMwbb6zGJpcdA3zIT143 +866C7wQWObtuzxrI/sEL/pPFCeeLNJu2GuHXQrOW0JATqxAFrIf/aQ0v9pjZSfO MUdeBs6iwbQzIC09r4Qe6265uMTCOOil24iJr/tgNXlfJtxSNwycvH7x5i5jH6g1 vRbKDqfZrvJVXOizFcZoRUI0gdRmEJ9WsH9bJgJTVuH/gqqpWtZiILLp7DQVm4MZ WOzYGW1mJKo/tl8XjfHcdpgSIPbYwXxeWeBsygKK7lpHD9kSpoWhJkP8tQbnkQKl jfOT5alaIx+Uqek4Bq+ODcJ+yQfHzR7jzs5KU9W45OMSRzent3CeXSv58ePrAgMB AAGjggIkMIICIDAdBgNVHQ4EFgQUZofnGmOx5EMcUzjrlp3DNeUIFU4wHwYDVR0j BBgwFoAU9VwnRTIs7BgFgV3NZbxq/9mRaNowDgYDVR0PAQH/BAQDAgeAMGYGA1Ud HwRfMF0wW6BZoFeGVXJzeW5jOi8va3JpbGwuYnloaWxsLmRlL3JlcG8vYnloaWxs LWNhLzEvRjU1QzI3NDUzMjJDRUMxODA1ODE1RENENjVCQzZBRkZEOTkxNjhEQS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wMDJmOGVlNi1hYmU3LTRh ZTgtOTY0Yy03ODhiYjk4Yzk3NWMvMS9GNTVDMjc0NTMyMkNFQzE4MDU4MTVEQ0Q2 NUJDNkFGRkQ5OTE2OERBLmNlcjBxBggrBgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuG VXJzeW5jOi8va3JpbGwuYnloaWxsLmRlL3JlcG8vYnloaWxsLWNhLzEvRjU1QzI3 NDUzMjJDRUMxODA1ODE1RENENjVCQzZBRkZEOTkxNjhEQS5tZnQwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAFzb F/POtDT2/BrTwrqYH+qtVMj4gZ+NkK1kINaL3CJdwK3H83sdCK4oL19h+HMAD3GA dJa5OABCsG8qmMD4IqttUULVoSlI2UuiLNRQpb7eI/vZEKeLmmVptb51PltSgFXa gV5WUFaWgw09IY5S1aSEgnNBWyLI4cA6LPswbY2sFatLySA/NZOjPpgkm8m0nNVH ibARFBDHm/9p8u6rwZE3ktr6e3OzXT5UyuQessK0VG6HdW+r9xo1EurrMfcUaGT7 NdcPR8IMUZ1gaQOk8vF5nLMnbzj7E+mKq7BYyOVFcEVQZwekVtheH2/fhZICIqLX eLa5QuJnBRGwGOgLVw0= -----END CERTIFICATE-----Generated at Sun Sep 20 22:32:08 2026 by rpki-client