Manifest

$ rpki-client -vvf krill.byhill.de/repo/byhill-ca/2/185B1D68A461FA242686542750142382ADF2C53B.mft
File:                     185B1D68A461FA242686542750142382ADF2C53B.mft (raw, json)
Hash identifier:          u3C/yhg88DeIIQTb3xyjboo8WxmNiQLFieJAUaZVF5Q=
Subject key identifier:   7D:8F:B6:D2:9F:6F:5D:D1:A2:CF:06:1F:72:7C:83:F2:80:0B:DC:4D
Authority key identifier: 18:5B:1D:68:A4:61:FA:24:26:86:54:27:50:14:23:82:AD:F2:C5:3B
Certificate issuer:       /CN=185b1d68a461fa242686542750142382adf2c53b
Certificate serial:       6EAB22E73C8A9A8E661CB4F2B6236BCEFDCFE9D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GFsdaKRh-iQmhlQnUBQjgq3yxTs.cer
Subject info access:      rsync://krill.byhill.de/repo/byhill-ca/2/185B1D68A461FA242686542750142382ADF2C53B.mft
Manifest number:          3C
Signing time:             Tue 28 Jul 2026 10:28:50 +0000
Manifest this update:     Tue 28 Jul 2026 10:23:50 +0000
Manifest next update:     Wed 29 Jul 2026 10:43:50 +0000
Files and hashes:         1: AS219418.asa (hash: iaRvn9nOOjZZtyPFGRsaQCPWyIYIEPJx77RGcLpTrY0=)
                          2: 185B1D68A461FA242686542750142382ADF2C53B.crl (hash: qmUcgYg+Xms1HzR+ZVx/Q0Ir0pPcvzW1fHKC0iW9Du0=)
Validation:               OK
Signature path:           rsync://krill.byhill.de/repo/byhill-ca/2/185B1D68A461FA242686542750142382ADF2C53B.crl
                          rsync://krill.byhill.de/repo/byhill-ca/2/185B1D68A461FA242686542750142382ADF2C53B.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GFsdaKRh-iQmhlQnUBQjgq3yxTs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 10:43:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:ab:22:e7:3c:8a:9a:8e:66:1c:b4:f2:b6:23:6b:ce:fd:cf:e9:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=185b1d68a461fa242686542750142382adf2c53b
        Validity
            Not Before: Jul 28 10:23:50 2026 GMT
            Not After : Jul 29 10:43:50 2026 GMT
        Subject: CN=7D8FB6D29F6F5DD1A2CF061F727C83F2800BDC4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d6:35:4f:42:43:5e:ad:47:a3:77:ac:d6:90:
                    ac:80:67:90:06:99:9b:12:57:3a:37:b8:f4:44:f3:
                    61:9d:73:60:31:14:27:a0:9c:43:71:cb:4c:ec:f1:
                    d7:a4:71:cd:40:5a:43:d4:45:f3:bc:89:cc:0c:86:
                    3f:6b:88:70:18:2d:1b:28:d4:6c:8b:a7:2e:f2:53:
                    c1:14:22:fa:ae:f0:94:2c:fb:37:5a:a8:90:1f:55:
                    dd:c6:f9:94:6e:e1:00:b0:b4:1b:0f:fc:f7:98:11:
                    24:2d:82:90:9f:2b:20:16:f4:46:c6:a4:6d:26:7a:
                    11:9e:51:0d:28:f8:9a:eb:7e:5c:01:32:3a:b3:f4:
                    8a:ec:c2:63:3f:2f:37:e5:43:d3:5f:8d:5f:cd:89:
                    57:8d:9b:8d:24:ef:6b:57:13:36:99:0e:2d:91:cb:
                    4a:f2:05:05:3a:4a:5a:7a:00:db:75:75:52:b8:02:
                    bb:0e:c3:e6:43:8a:69:d9:56:03:fa:eb:90:f3:f0:
                    1f:dd:cc:fe:8d:80:ab:77:37:0c:7d:cb:66:21:90:
                    dd:3b:3f:cc:aa:f8:4c:35:4a:3a:60:81:02:ab:7e:
                    d7:4e:be:23:77:77:c2:20:52:a1:80:1b:3e:99:43:
                    6c:7d:32:04:93:20:ec:af:53:91:1a:c7:9b:e1:79:
                    ec:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:8F:B6:D2:9F:6F:5D:D1:A2:CF:06:1F:72:7C:83:F2:80:0B:DC:4D
            X509v3 Authority Key Identifier:
                keyid:18:5B:1D:68:A4:61:FA:24:26:86:54:27:50:14:23:82:AD:F2:C5:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.byhill.de/repo/byhill-ca/2/185B1D68A461FA242686542750142382ADF2C53B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GFsdaKRh-iQmhlQnUBQjgq3yxTs.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.byhill.de/repo/byhill-ca/2/185B1D68A461FA242686542750142382ADF2C53B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:ed:78:7a:1f:f5:e3:a7:f5:f0:a0:81:68:fc:b6:ba:1f:78:
         73:c7:4e:7f:86:cc:ae:01:0b:44:2b:85:f7:58:de:24:b3:af:
         df:17:8f:d1:4a:85:2b:bb:49:70:e0:f9:03:0c:b9:70:d5:b1:
         94:ec:85:07:1c:49:2c:e8:9e:8d:e6:db:9e:d4:74:85:de:19:
         7b:3a:16:6e:60:e9:6e:05:c9:b5:2a:8c:cd:08:a2:85:76:25:
         ae:14:1b:60:27:77:40:13:17:fe:7f:6e:a1:9c:a8:59:5b:5c:
         34:fd:ed:9c:51:67:90:a7:50:0b:6d:46:ca:9d:ef:3d:24:db:
         97:10:27:81:b3:a7:6d:8a:fc:5e:9e:59:b2:fb:89:fc:91:db:
         77:d4:69:0c:e4:b2:18:ca:51:56:a1:f5:06:0a:4f:fe:19:37:
         cd:5f:4d:15:0d:fa:3c:f9:0b:5c:5c:ac:ef:b3:38:95:cc:d2:
         6f:5e:78:e6:d7:ee:39:5f:54:71:be:b0:0d:40:0e:9a:b5:d0:
         d4:80:61:b8:02:92:2d:c4:7c:95:1a:2e:69:cf:e3:6c:af:3e:
         9d:db:2b:a1:7d:58:1d:78:16:45:b7:89:69:8b:f5:a0:c8:1f:
         26:27:30:8c:6e:74:06:45:e9:4b:8e:92:a5:a6:22:43:31:1a:
         21:ec:5d:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:39:26 2026 by rpki-client