Manifest

$ rpki-client -vvf krill.byhill.de/repo/byhill-ca/0/F2ADBCD3E44C2B9CF63C25F6594F643284A5980E.mft
File:                     F2ADBCD3E44C2B9CF63C25F6594F643284A5980E.mft (raw, json)
Hash identifier:          nUB3tKsq1FzHNXz3MyxDNgh9R+vTFvglgECwlAQ6/BY=
Subject key identifier:   85:50:39:3D:8C:25:5D:72:5F:C1:12:F5:BD:DC:62:72:C4:E3:D2:8C
Authority key identifier: F2:AD:BC:D3:E4:4C:2B:9C:F6:3C:25:F6:59:4F:64:32:84:A5:98:0E
Certificate issuer:       /CN=f2adbcd3e44c2b9cf63c25f6594f643284a5980e
Certificate serial:       33D86A310EB620B1C37D4A6DADD14AA9009AE0E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8q280-RMK5z2PCX2WU9kMoSlmA4.cer
Subject info access:      rsync://krill.byhill.de/repo/byhill-ca/0/F2ADBCD3E44C2B9CF63C25F6594F643284A5980E.mft
Manifest number:          5C
Signing time:             Thu 25 Jun 2026 06:30:49 +0000
Manifest this update:     Thu 25 Jun 2026 06:25:49 +0000
Manifest next update:     Fri 26 Jun 2026 09:32:49 +0000
Files and hashes:         1: F2ADBCD3E44C2B9CF63C25F6594F643284A5980E.crl (hash: dPVRrjnyd9LebhTuJTXzkBb45MN2k2Sa6fCH2he2J9I=)
                          2: AS215110.asa (hash: LrafDexqJEVFyUjGUqgsdclNBUwlnGAU0+Q7MrY76BY=)
Validation:               OK
Signature path:           rsync://krill.byhill.de/repo/byhill-ca/0/F2ADBCD3E44C2B9CF63C25F6594F643284A5980E.crl
                          rsync://krill.byhill.de/repo/byhill-ca/0/F2ADBCD3E44C2B9CF63C25F6594F643284A5980E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8q280-RMK5z2PCX2WU9kMoSlmA4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 25 Jun 2026 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:d8:6a:31:0e:b6:20:b1:c3:7d:4a:6d:ad:d1:4a:a9:00:9a:e0:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2adbcd3e44c2b9cf63c25f6594f643284a5980e
        Validity
            Not Before: Jun 25 06:25:49 2026 GMT
            Not After : Jun 26 09:32:49 2026 GMT
        Subject: CN=8550393D8C255D725FC112F5BDDC6272C4E3D28C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c2:2a:f5:f4:ef:eb:a8:f4:db:37:d4:6a:fc:
                    c7:3a:4e:fe:f7:42:e8:6d:e8:cb:f7:59:00:70:68:
                    b6:b9:a1:61:93:fe:5e:8c:49:82:fc:ed:46:aa:ab:
                    7b:c2:09:22:92:e3:02:6b:fb:93:f6:37:df:ff:c4:
                    03:30:bf:44:e8:a3:fc:28:d6:09:e1:52:c5:5b:72:
                    12:ed:fe:b7:c5:3e:1c:f9:32:a8:00:68:0b:6c:7a:
                    bb:e5:d3:70:39:e9:98:1d:8b:e2:e9:4f:fc:d1:8f:
                    9e:1d:c7:af:b1:ba:9c:ee:cb:aa:ab:ef:1b:13:9f:
                    2a:e0:31:cd:53:31:3d:40:ed:0f:2b:b6:f0:5c:b1:
                    0c:42:ea:3f:dd:2e:11:d4:aa:d8:32:74:b9:88:31:
                    d1:2d:12:30:e5:cf:e1:0c:e8:30:37:67:17:16:c1:
                    28:61:f0:f6:5f:37:a1:2c:1a:3f:3b:72:e5:c7:7f:
                    eb:5a:af:6d:72:23:6a:cf:05:ff:4d:c6:d6:da:63:
                    b8:53:6a:8b:a2:e9:41:44:eb:4b:68:7d:0f:59:e5:
                    e2:6e:0c:a7:5f:d9:68:e1:27:85:6c:da:59:75:50:
                    3b:e2:dc:74:3c:7f:7a:4a:40:0c:17:08:02:79:d7:
                    ee:07:e4:7a:9d:e6:ce:d2:54:c9:3f:26:71:33:30:
                    dd:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:50:39:3D:8C:25:5D:72:5F:C1:12:F5:BD:DC:62:72:C4:E3:D2:8C
            X509v3 Authority Key Identifier:
                keyid:F2:AD:BC:D3:E4:4C:2B:9C:F6:3C:25:F6:59:4F:64:32:84:A5:98:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.byhill.de/repo/byhill-ca/0/F2ADBCD3E44C2B9CF63C25F6594F643284A5980E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8q280-RMK5z2PCX2WU9kMoSlmA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.byhill.de/repo/byhill-ca/0/F2ADBCD3E44C2B9CF63C25F6594F643284A5980E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:62:21:e3:80:9b:74:ad:d7:a7:38:9b:6a:bd:8d:73:d6:19:
         d5:39:55:c9:0f:92:a1:ba:b9:4e:23:0b:12:69:97:a2:b6:ab:
         72:36:80:dd:d3:5a:7f:b9:b9:6f:d4:6f:7c:f1:78:45:44:2f:
         67:3f:4e:86:40:61:51:7b:d5:01:78:23:b7:ce:26:74:eb:9a:
         9f:de:0a:93:52:b5:c3:f7:fd:7b:61:50:91:cc:43:5b:d9:0e:
         c8:69:97:99:87:f0:31:46:e6:0c:df:24:28:ef:b2:ea:2c:86:
         95:83:bd:71:5f:be:5b:ab:bd:b4:96:0a:bb:a8:f5:ef:0c:2f:
         5f:d4:d1:4d:47:02:26:02:f3:b4:18:a8:14:34:5a:2c:c9:5a:
         5d:fa:fd:24:f9:db:bf:c2:08:ff:dc:df:8a:3a:9e:f6:02:39:
         9b:4e:93:e9:48:5e:ca:c6:b6:d3:57:b4:60:af:04:e1:fe:67:
         76:29:48:98:aa:7d:a2:2d:a5:3b:5a:37:35:0c:26:ca:c0:f8:
         7b:d9:14:b9:70:e0:a0:16:22:0d:ea:01:00:f1:4b:30:95:26:
         0d:dc:d8:1f:a4:6a:05:6f:7c:f8:86:33:f0:d3:06:03:3d:01:
         e3:6e:d4:fe:5d:71:40:68:cc:b8:b7:24:1c:cd:47:64:74:be:
         b1:88:ba:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 08:34:44 2026 by rpki-client