Manifest

$ rpki-client -vvf krill.byhill.de/repo/byhill-ca/0/F2ADBCD3E44C2B9CF63C25F6594F643284A5980E.mft
File:                     F2ADBCD3E44C2B9CF63C25F6594F643284A5980E.mft (raw, json)
Hash identifier:          BRPHZ/bOORqQTUXupD12ycHeAJtbNQUEhO1bga3BToA=
Subject key identifier:   20:B1:C0:6D:BA:3A:40:39:FA:FB:9D:E0:58:2D:88:61:EF:15:34:00
Authority key identifier: F2:AD:BC:D3:E4:4C:2B:9C:F6:3C:25:F6:59:4F:64:32:84:A5:98:0E
Certificate issuer:       /CN=f2adbcd3e44c2b9cf63c25f6594f643284a5980e
Certificate serial:       5549A17ACEE1E6D25F50D619B704AEB0B16818DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8q280-RMK5z2PCX2WU9kMoSlmA4.cer
Subject info access:      rsync://krill.byhill.de/repo/byhill-ca/0/F2ADBCD3E44C2B9CF63C25F6594F643284A5980E.mft
Manifest number:          A0
Signing time:             Wed 12 Aug 2026 14:18:51 +0000
Manifest this update:     Wed 12 Aug 2026 14:13:51 +0000
Manifest next update:     Thu 13 Aug 2026 16:03:51 +0000
Files and hashes:         1: F2ADBCD3E44C2B9CF63C25F6594F643284A5980E.crl (hash: UWHN2uSptQE0mfu90plZhL8COPaROVO5V5iER+EPpCg=)
                          2: AS215110.asa (hash: ihSNSdt1ZA3Kj7qVuZjPLz9ZdQEHgO8zvOnfv4K5Z8Q=)
Validation:               OK
Signature path:           rsync://krill.byhill.de/repo/byhill-ca/0/F2ADBCD3E44C2B9CF63C25F6594F643284A5980E.crl
                          rsync://krill.byhill.de/repo/byhill-ca/0/F2ADBCD3E44C2B9CF63C25F6594F643284A5980E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8q280-RMK5z2PCX2WU9kMoSlmA4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Aug 2026 16:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:49:a1:7a:ce:e1:e6:d2:5f:50:d6:19:b7:04:ae:b0:b1:68:18:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2adbcd3e44c2b9cf63c25f6594f643284a5980e
        Validity
            Not Before: Aug 12 14:13:51 2026 GMT
            Not After : Aug 13 16:03:51 2026 GMT
        Subject: CN=20B1C06DBA3A4039FAFB9DE0582D8861EF153400
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:62:d5:75:c8:ef:01:72:13:67:fd:e1:52:79:
                    82:a9:04:8f:a8:4a:d9:af:fe:83:4e:70:a6:39:f7:
                    73:8a:68:91:79:a7:24:39:3c:ab:c3:d2:1e:0c:98:
                    b4:0b:cc:20:0d:a4:2d:7f:41:7d:b0:38:59:c5:cb:
                    31:1e:37:e1:d5:9c:43:e5:72:7c:07:e3:15:ae:aa:
                    44:4b:1e:9f:96:ca:d4:17:64:b5:df:20:c1:48:7d:
                    c3:16:a2:fa:b1:68:be:cb:2a:32:f7:d8:ba:bc:30:
                    30:01:d0:fd:25:57:c6:4f:48:7d:1d:7d:7b:ba:94:
                    9d:54:23:89:ad:b0:d2:72:3e:e1:f2:71:60:e6:05:
                    36:8d:a1:5b:35:2a:ae:b8:68:05:37:d6:2f:dd:81:
                    9f:46:3e:62:c2:f6:f4:63:dd:af:69:b4:fb:4c:b0:
                    a3:81:11:29:10:f1:4a:a5:1c:37:11:f1:b5:40:d3:
                    8a:fb:39:6f:d7:d7:55:30:1f:cb:88:21:07:35:e8:
                    7f:1d:3a:60:8e:d8:ac:69:e5:17:a2:92:f5:52:02:
                    c5:b3:99:f8:ea:62:9a:d7:07:cd:47:0c:0c:dc:46:
                    6d:ec:ce:48:0f:97:43:d4:98:ad:5e:13:c9:84:51:
                    53:c0:7b:24:89:8e:09:55:90:72:63:c7:7a:c3:c3:
                    a3:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:B1:C0:6D:BA:3A:40:39:FA:FB:9D:E0:58:2D:88:61:EF:15:34:00
            X509v3 Authority Key Identifier:
                keyid:F2:AD:BC:D3:E4:4C:2B:9C:F6:3C:25:F6:59:4F:64:32:84:A5:98:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.byhill.de/repo/byhill-ca/0/F2ADBCD3E44C2B9CF63C25F6594F643284A5980E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8q280-RMK5z2PCX2WU9kMoSlmA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.byhill.de/repo/byhill-ca/0/F2ADBCD3E44C2B9CF63C25F6594F643284A5980E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:a5:b6:f7:cf:51:01:6d:a7:0f:73:8f:11:fd:fb:9b:1f:a5:
         2a:6b:d4:49:db:82:71:da:cf:ef:e4:e7:7e:13:be:21:41:5f:
         b7:0d:2b:7a:fc:2d:7a:a7:83:c4:2d:24:3a:c1:b1:c6:e4:41:
         56:d1:fd:b6:ea:ce:ac:4f:cf:cf:aa:31:25:4a:e1:9b:b0:9d:
         41:c9:55:51:06:a8:4b:b5:3a:3d:27:3a:8d:67:b3:bc:56:cd:
         c2:90:da:69:12:21:83:d5:2a:e0:bc:44:92:9b:75:48:6b:cd:
         11:cb:08:82:f9:3b:42:dd:42:9b:4f:d3:ff:f9:73:84:a4:00:
         5b:fd:3d:df:26:b9:b2:c2:cd:33:8a:3f:99:26:37:6a:0a:75:
         d8:16:26:2d:a7:95:d5:1e:0c:7c:5f:06:a7:2f:5e:da:64:04:
         a5:b5:6b:4b:41:65:fc:c9:bf:15:1a:c0:91:cc:be:a0:be:79:
         33:5a:e2:cd:75:af:2e:47:f8:db:40:1e:56:bc:f9:63:5c:e0:
         5b:f4:a5:da:87:17:fc:f4:7c:bc:e4:ed:47:e4:58:52:1f:d2:
         d3:72:ee:49:a9:c5:b1:84:a7:95:17:d0:02:b8:90:5d:45:4d:
         57:6e:f0:31:a1:58:5c:73:41:3a:60:a5:fa:23:6d:7a:75:46:
         76:d1:2f:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 01:08:43 2026 by rpki-client