Manifest

$ rpki-client -vvvf krill.byhill.de/repo/byhill-ca/0/F2ADBCD3E44C2B9CF63C25F6594F643284A5980E.mft
File:                     F2ADBCD3E44C2B9CF63C25F6594F643284A5980E.mft (raw, json)
Hash identifier:          YFz2uozaUvwiQOs/MJaYdEtHa7MjBUfHV4MSPSV1+q8=
Subject key identifier:   A6:45:59:07:0C:93:64:A6:F9:87:F6:76:AD:F8:60:A9:54:76:66:93
Authority key identifier: F2:AD:BC:D3:E4:4C:2B:9C:F6:3C:25:F6:59:4F:64:32:84:A5:98:0E
Certificate issuer:       /CN=f2adbcd3e44c2b9cf63c25f6594f643284a5980e
Certificate serial:       3C858B4C4AF6F4122664D51226768C5C6BEAA25F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8q280-RMK5z2PCX2WU9kMoSlmA4.cer
Subject info access:      rsync://krill.byhill.de/repo/byhill-ca/0/F2ADBCD3E44C2B9CF63C25F6594F643284A5980E.mft
Manifest number:          E2
Signing time:             Tue 29 Sep 2026 20:25:32 +0000
Manifest this update:     Tue 29 Sep 2026 20:20:32 +0000
Manifest next update:     Wed 30 Sep 2026 21:24:32 +0000
Files and hashes:         1: F2ADBCD3E44C2B9CF63C25F6594F643284A5980E.crl (hash: J6GxObjk/ABKCpJO7FHH/5hTwXNYdAF9x4jZb2Rccqg=)
                          2: AS215110.asa (hash: 8XjGwMUuG9cC3E2HQVmxZ+VSNbwuyJO7IUq0o2HjpeM=)
Validation:               OK
Signature path:           rsync://krill.byhill.de/repo/byhill-ca/0/F2ADBCD3E44C2B9CF63C25F6594F643284A5980E.crl
                          rsync://krill.byhill.de/repo/byhill-ca/0/F2ADBCD3E44C2B9CF63C25F6594F643284A5980E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8q280-RMK5z2PCX2WU9kMoSlmA4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Sep 2026 21:24:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:85:8b:4c:4a:f6:f4:12:26:64:d5:12:26:76:8c:5c:6b:ea:a2:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2adbcd3e44c2b9cf63c25f6594f643284a5980e
        Validity
            Not Before: Sep 29 20:20:32 2026 GMT
            Not After : Sep 30 21:24:32 2026 GMT
        Subject: CN=A64559070C9364A6F987F676ADF860A954766693
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:1d:83:e9:49:4c:80:0a:9e:8a:02:fb:12:fa:
                    0f:ae:6c:e9:81:20:a1:88:71:29:75:a9:16:ae:82:
                    87:03:90:d9:80:11:7c:8f:41:55:93:30:73:2f:06:
                    ef:18:45:90:12:d9:38:90:49:8a:e9:e8:03:47:f6:
                    66:61:05:2e:64:66:2f:78:33:bc:1b:bd:f9:18:bb:
                    44:1e:5e:9b:13:16:30:37:37:f6:57:18:83:99:24:
                    f9:2a:1c:59:79:1c:db:49:54:a7:b3:d3:2f:ed:19:
                    30:a7:57:5b:f8:10:37:f7:78:9d:4b:c1:bd:7a:97:
                    e1:d6:40:2d:67:5d:71:7e:b5:2e:bf:ae:1f:34:f1:
                    f3:62:a3:54:09:17:94:45:57:44:1b:58:72:db:88:
                    db:c2:f8:44:92:08:52:db:96:ca:68:2b:03:f6:32:
                    f5:45:e4:db:be:61:69:6e:1c:65:90:bb:fd:ab:fa:
                    fb:ed:39:14:67:65:06:8d:d6:2e:bc:09:fc:13:5e:
                    e1:dd:ec:60:fe:80:85:84:60:74:b5:6d:27:3e:3b:
                    a9:36:f9:02:0e:20:77:61:2f:96:4d:de:10:44:80:
                    ca:2d:92:c3:40:8f:44:89:06:94:33:55:3e:6f:21:
                    3b:8d:e4:30:c8:3c:8d:41:9e:26:98:5d:f3:b9:20:
                    77:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:45:59:07:0C:93:64:A6:F9:87:F6:76:AD:F8:60:A9:54:76:66:93
            X509v3 Authority Key Identifier:
                keyid:F2:AD:BC:D3:E4:4C:2B:9C:F6:3C:25:F6:59:4F:64:32:84:A5:98:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.byhill.de/repo/byhill-ca/0/F2ADBCD3E44C2B9CF63C25F6594F643284A5980E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8q280-RMK5z2PCX2WU9kMoSlmA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.byhill.de/repo/byhill-ca/0/F2ADBCD3E44C2B9CF63C25F6594F643284A5980E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:61:94:e1:e4:36:9f:4f:64:83:6a:bc:55:df:d6:64:8f:fc:
         8f:65:d8:a7:9a:ca:52:31:67:56:ed:7d:ea:e2:ee:92:8a:9c:
         05:c0:37:c3:71:16:0a:0b:34:4e:bd:8b:53:98:56:b9:f1:2d:
         48:96:08:a5:37:b9:14:41:d8:80:7e:94:6d:84:bb:0f:1d:94:
         70:c3:12:af:be:40:66:c8:2e:0e:a2:24:b5:50:c0:a5:5c:28:
         e3:df:f5:05:65:db:b2:e4:b4:02:3b:0d:43:4d:41:4d:c4:53:
         48:89:0d:b1:44:2a:65:3e:86:f8:3f:92:d6:b6:e0:2a:13:c2:
         0d:18:03:4e:da:c9:6e:ec:f4:b9:23:97:f9:ab:6f:a9:63:14:
         de:09:f8:f8:73:b8:f3:d6:10:d5:52:2c:e6:31:44:02:1f:43:
         e5:e2:4a:f0:3a:35:af:db:a5:70:2b:d1:1a:30:12:e8:9d:8b:
         70:a1:90:b9:9a:53:96:b3:1d:1e:3e:f5:88:ee:b5:ea:a0:c5:
         96:ed:28:ab:d0:9f:56:5f:bb:1d:97:da:27:6d:88:47:00:6f:
         82:c2:3e:be:44:9b:e2:54:7b:47:40:e6:f2:d3:ee:d6:38:98:
         ab:fb:76:60:45:5f:52:ec:8d:e7:5b:45:1d:27:0c:70:b5:d2:
         b3:30:65:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 15:09:02 2026 by rpki-client