$ rpki-client -vvf krill.byhill.de/repo/byhill-ca/1/F55C2745322CEC1805815DCD65BC6AFFD99168DA.mft File: F55C2745322CEC1805815DCD65BC6AFFD99168DA.mft (raw, json) Hash identifier: Q+I8yZ4C9llVAN6a493oOkUH176YYvBQaP9nLh3phHQ= Subject key identifier: C2:EF:54:44:11:A8:BE:CA:AB:11:0C:CB:AC:BF:64:54:94:47:38:30 Authority key identifier: F5:5C:27:45:32:2C:EC:18:05:81:5D:CD:65:BC:6A:FF:D9:91:68:DA Certificate issuer: /CN=F55C2745322CEC1805815DCD65BC6AFFD99168DA Certificate serial: 1387034B94412A5FD051774B55BFA15207902832 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/F55C2745322CEC1805815DCD65BC6AFFD99168DA.cer Subject info access: rsync://krill.byhill.de/repo/byhill-ca/1/F55C2745322CEC1805815DCD65BC6AFFD99168DA.mft Manifest number: 88 Signing time: Tue 28 Jul 2026 01:08:50 +0000 Manifest this update: Tue 28 Jul 2026 01:03:50 +0000 Manifest next update: Wed 29 Jul 2026 04:23:50 +0000 Files and hashes: 1: F55C2745322CEC1805815DCD65BC6AFFD99168DA.crl (hash: 4tby6axnssfW4qKL4MfPm1ldhbSrbUteMLOFmCZbghA=) 2: 326131333a633863343a373130303a3a2f34302d3430203d3e20323032333538.roa (hash: d+Wfk22NHdZ1Lc1JTtegQebaE82OrinSLcgeTPsLLUs=) 3: 326131333a633863343a373031383a3a2f34382d3438203d3e20323139343138.roa (hash: ZyEmmv2NtM1cJBidwRboYBKa7EjRkpw/Hw7NvcYUYx4=) 4: 326131333a633863343a373031393a3a2f34382d3438203d3e20323139343138.roa (hash: OcmweSrCgsMNuPf6ZZytHU9NxvCytKfcDUyLD9zAQ1Y=) Validation: OK Signature path: rsync://krill.byhill.de/repo/byhill-ca/1/F55C2745322CEC1805815DCD65BC6AFFD99168DA.crl rsync://krill.byhill.de/repo/byhill-ca/1/F55C2745322CEC1805815DCD65BC6AFFD99168DA.mft rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/F55C2745322CEC1805815DCD65BC6AFFD99168DA.cer rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.crl rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.mft rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/1E74494683D8D2A4E029AAD4573928D2A55FA411.cer rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.crl rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 03:52:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:87:03:4b:94:41:2a:5f:d0:51:77:4b:55:bf:a1:52:07:90:28:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F55C2745322CEC1805815DCD65BC6AFFD99168DA Validity Not Before: Jul 28 01:03:50 2026 GMT Not After : Jul 29 04:23:50 2026 GMT Subject: CN=C2EF544411A8BECAAB110CCBACBF645494473830 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:da:c3:a4:a6:a1:71:d3:58:9c:78:dd:1a:15: 12:29:bb:01:36:a2:f6:b6:2e:87:aa:93:96:1a:9e: 86:51:91:0a:b0:e1:5c:9a:c1:44:30:fa:cb:56:e1: fa:6f:2e:c2:95:6e:0a:9c:eb:b5:e1:4c:42:4a:98: 1d:f3:e6:c9:6b:a4:0e:5c:07:52:82:95:5b:20:78: 8a:b6:f9:2e:67:e4:9c:c5:13:81:01:79:e4:42:e1: 9a:ca:41:c2:6e:93:4b:94:d0:30:5a:86:19:74:c2: 15:43:c7:84:1f:e1:2f:dd:55:5e:c4:81:67:26:1e: b5:3d:e1:0c:1e:77:2f:d7:69:5c:cf:f9:43:2e:d0: 09:32:82:3c:77:c9:17:86:fe:59:62:75:db:26:d8: a9:86:e7:3b:6a:b1:f4:1b:3c:eb:9e:b0:d1:99:9b: 88:2f:af:d7:44:71:ba:0f:5b:d9:7b:39:2b:c0:e9: 85:bb:e4:49:3c:b5:d5:a2:9a:08:f6:35:23:57:97: 86:93:40:df:db:fe:37:64:0a:89:ca:c5:c7:63:13: 5c:19:2c:47:11:f0:16:ed:be:e6:58:e4:be:f9:25: a4:28:70:f4:58:80:49:f7:fb:9b:5c:1a:45:09:78: 95:4f:0a:c2:e8:4a:88:a0:a2:a7:54:39:b3:f5:ec: 8a:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:EF:54:44:11:A8:BE:CA:AB:11:0C:CB:AC:BF:64:54:94:47:38:30 X509v3 Authority Key Identifier: keyid:F5:5C:27:45:32:2C:EC:18:05:81:5D:CD:65:BC:6A:FF:D9:91:68:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.byhill.de/repo/byhill-ca/1/F55C2745322CEC1805815DCD65BC6AFFD99168DA.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/F55C2745322CEC1805815DCD65BC6AFFD99168DA.cer Subject Information Access: Signed Object - URI:rsync://krill.byhill.de/repo/byhill-ca/1/F55C2745322CEC1805815DCD65BC6AFFD99168DA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:55:17:b2:7c:1d:d1:f0:89:74:99:a0:dc:ca:12:27:cb:a2: dc:fb:55:21:56:25:7a:07:b3:26:0d:18:d2:1e:c1:57:1f:06: a3:8f:62:c8:a1:17:c7:63:d0:6a:3f:08:61:27:07:de:6f:08: 18:ad:78:52:79:67:87:d9:b4:9b:57:13:83:c2:0f:a7:62:4f: 88:29:8f:73:69:1f:5c:24:b4:ec:c0:6f:45:51:72:cb:20:a4: 42:36:c1:c8:b7:36:5f:2e:58:ed:ef:bc:fd:a4:10:b5:6e:f5: 14:2a:78:0b:12:eb:cc:4b:8c:70:89:d3:8e:e1:c1:7e:8d:db: f6:98:99:1b:e7:5f:d4:6b:66:c4:b2:12:79:2a:94:67:49:a1: ca:ea:89:49:98:0c:5c:e3:90:28:de:40:32:4d:e2:be:38:17: 28:58:e4:96:ca:c8:88:38:23:6f:d6:28:3b:94:f6:cf:e1:fd: 91:f6:ae:ff:e3:bf:e1:05:09:db:5b:a1:a6:f6:33:80:85:96: 7d:7e:24:75:f3:e9:5a:cb:5b:21:ea:97:66:a1:72:f2:8a:29: 28:cc:ff:70:ba:61:1f:fb:5e:1d:ed:ee:1b:c7:80:1d:64:8d: 80:d7:66:ae:65:de:56:89:f3:cc:e3:82:9c:4b:ed:32:20:cf: 17:97:cd:fb -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgIUE4cDS5RBKl/QUXdLVb+hUgeQKDIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjU1QzI3NDUzMjJDRUMxODA1ODE1RENENjVCQzZBRkZE OTkxNjhEQTAeFw0yNjA3MjgwMTAzNTBaFw0yNjA3MjkwNDIzNTBaMDMxMTAvBgNV BAMTKEMyRUY1NDQ0MTFBOEJFQ0FBQjExMENDQkFDQkY2NDU0OTQ0NzM4MzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZ2sOkpqFx01iceN0aFRIpuwE2 ova2Loeqk5YanoZRkQqw4VyawUQw+stW4fpvLsKVbgqc67XhTEJKmB3z5slrpA5c B1KClVsgeIq2+S5n5JzFE4EBeeRC4ZrKQcJuk0uU0DBahhl0whVDx4Qf4S/dVV7E gWcmHrU94Qwedy/XaVzP+UMu0Akygjx3yReG/lliddsm2KmG5ztqsfQbPOuesNGZ m4gvr9dEcboPW9l7OSvA6YW75Ek8tdWimgj2NSNXl4aTQN/b/jdkConKxcdjE1wZ LEcR8BbtvuZY5L75JaQocPRYgEn3+5tcGkUJeJVPCsLoSoigoqdUObP17IqvAgMB AAGjggIkMIICIDAdBgNVHQ4EFgQUwu9URBGovsqrEQzLrL9kVJRHODAwHwYDVR0j BBgwFoAU9VwnRTIs7BgFgV3NZbxq/9mRaNowDgYDVR0PAQH/BAQDAgeAMGYGA1Ud HwRfMF0wW6BZoFeGVXJzeW5jOi8va3JpbGwuYnloaWxsLmRlL3JlcG8vYnloaWxs LWNhLzEvRjU1QzI3NDUzMjJDRUMxODA1ODE1RENENjVCQzZBRkZEOTkxNjhEQS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wMDJmOGVlNi1hYmU3LTRh ZTgtOTY0Yy03ODhiYjk4Yzk3NWMvMS9GNTVDMjc0NTMyMkNFQzE4MDU4MTVEQ0Q2 NUJDNkFGRkQ5OTE2OERBLmNlcjBxBggrBgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuG VXJzeW5jOi8va3JpbGwuYnloaWxsLmRlL3JlcG8vYnloaWxsLWNhLzEvRjU1QzI3 NDUzMjJDRUMxODA1ODE1RENENjVCQzZBRkZEOTkxNjhEQS5tZnQwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAL1V F7J8HdHwiXSZoNzKEifLotz7VSFWJXoHsyYNGNIewVcfBqOPYsihF8dj0Go/CGEn B95vCBiteFJ5Z4fZtJtXE4PCD6diT4gpj3NpH1wktOzAb0VRcssgpEI2wci3Nl8u WO3vvP2kELVu9RQqeAsS68xLjHCJ047hwX6N2/aYmRvnX9RrZsSyEnkqlGdJocrq iUmYDFzjkCjeQDJN4r44FyhY5JbKyIg4I2/WKDuU9s/h/ZH2rv/jv+EFCdtboab2 M4CFln1+JHXz6VrLWyHql2ahcvKKKSjM/3C6YR/7Xh3t7hvHgB1kjYDXZq5l3laJ 88zjgpxL7TIgzxeXzfs= -----END CERTIFICATE-----Generated at Tue Jul 28 17:56:45 2026 by rpki-client