$ rpki-client -vvf krill.byhill.de/repo/byhill-ca/1/F55C2745322CEC1805815DCD65BC6AFFD99168DA.mft File: F55C2745322CEC1805815DCD65BC6AFFD99168DA.mft (raw, json) Hash identifier: D9NtP7gagBjycagAVwUKiHj7JgmrniUjfTCNHVNPDm0= Subject key identifier: D6:EC:59:6F:2E:89:58:62:EA:D9:18:12:96:D2:79:34:A8:2A:E7:1A Authority key identifier: F5:5C:27:45:32:2C:EC:18:05:81:5D:CD:65:BC:6A:FF:D9:91:68:DA Certificate issuer: /CN=F55C2745322CEC1805815DCD65BC6AFFD99168DA Certificate serial: 40B494461211B566ECE086BFE790FD4A56F06B13 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/F55C2745322CEC1805815DCD65BC6AFFD99168DA.cer Subject info access: rsync://krill.byhill.de/repo/byhill-ca/1/F55C2745322CEC1805815DCD65BC6AFFD99168DA.mft Manifest number: A5 Signing time: Mon 17 Aug 2026 18:13:51 +0000 Manifest this update: Mon 17 Aug 2026 18:08:51 +0000 Manifest next update: Tue 18 Aug 2026 21:43:51 +0000 Files and hashes: 1: F55C2745322CEC1805815DCD65BC6AFFD99168DA.crl (hash: 2dBqtbXPxBplzmGbPFC3aJ//qUdiO21k/e43WaZ9oIM=) 2: 326131333a633863343a373031393a3a2f34382d3438203d3e20323139343138.roa (hash: OcmweSrCgsMNuPf6ZZytHU9NxvCytKfcDUyLD9zAQ1Y=) 3: 326131333a633863343a373130303a3a2f34302d3430203d3e20323032333538.roa (hash: d+Wfk22NHdZ1Lc1JTtegQebaE82OrinSLcgeTPsLLUs=) 4: 326131333a633863343a373031383a3a2f34382d3438203d3e20323139343138.roa (hash: ZyEmmv2NtM1cJBidwRboYBKa7EjRkpw/Hw7NvcYUYx4=) Validation: OK Signature path: rsync://krill.byhill.de/repo/byhill-ca/1/F55C2745322CEC1805815DCD65BC6AFFD99168DA.crl rsync://krill.byhill.de/repo/byhill-ca/1/F55C2745322CEC1805815DCD65BC6AFFD99168DA.mft rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/F55C2745322CEC1805815DCD65BC6AFFD99168DA.cer rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.crl rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.mft rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/1E74494683D8D2A4E029AAD4573928D2A55FA411.cer rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.crl rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 18 Aug 2026 20:29:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:b4:94:46:12:11:b5:66:ec:e0:86:bf:e7:90:fd:4a:56:f0:6b:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F55C2745322CEC1805815DCD65BC6AFFD99168DA Validity Not Before: Aug 17 18:08:51 2026 GMT Not After : Aug 18 21:43:51 2026 GMT Subject: CN=D6EC596F2E895862EAD9181296D27934A82AE71A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:aa:a7:71:ed:65:f0:90:bc:37:46:a1:01:12: 3c:44:aa:e2:0b:61:b0:2d:9b:3e:e1:9e:09:b7:28: b0:97:dc:f2:29:8b:f8:c9:bc:1f:84:ea:3f:e0:14: ec:01:ca:be:83:45:dc:10:d8:f2:e6:d2:54:ec:80: 4f:4c:43:db:76:3a:32:4a:86:81:26:03:df:fe:40: 67:dc:99:40:28:96:85:5f:d8:b5:ee:a0:f0:e9:51: 34:6f:a5:e5:28:d9:a7:bd:25:40:a0:9d:d1:62:df: e8:b7:6a:cb:23:56:4a:04:35:98:f9:9f:61:44:bc: ff:a4:99:b3:bc:f2:61:35:83:77:fb:8d:4c:1a:e3: 29:d2:a1:1f:33:e7:02:6d:c8:71:83:74:9a:14:37: 3c:5c:d4:85:a9:f7:86:fc:f7:7a:64:de:34:79:32: 1c:00:03:9f:6c:09:2b:b8:56:26:e5:a3:42:9c:50: a3:a6:19:73:15:11:95:b3:e8:cc:11:f6:85:fd:50: c6:ae:dd:a6:9d:c1:f4:9e:e3:38:2a:54:7c:4f:3c: fe:1c:03:85:2c:ed:c5:e7:d4:d9:89:9b:c8:bd:bb: f2:26:84:27:64:04:1b:96:6c:27:4c:e9:ac:2f:95: 48:4d:dc:fe:a5:2d:cf:3d:87:60:5c:9d:82:37:ba: a4:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:EC:59:6F:2E:89:58:62:EA:D9:18:12:96:D2:79:34:A8:2A:E7:1A X509v3 Authority Key Identifier: keyid:F5:5C:27:45:32:2C:EC:18:05:81:5D:CD:65:BC:6A:FF:D9:91:68:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.byhill.de/repo/byhill-ca/1/F55C2745322CEC1805815DCD65BC6AFFD99168DA.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/F55C2745322CEC1805815DCD65BC6AFFD99168DA.cer Subject Information Access: Signed Object - URI:rsync://krill.byhill.de/repo/byhill-ca/1/F55C2745322CEC1805815DCD65BC6AFFD99168DA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:de:67:57:99:b3:af:90:9f:22:dc:04:e1:76:42:65:25:ff: 9a:7f:cc:f8:c6:c7:f9:59:b6:2c:f7:5d:b7:d4:68:3d:8b:e1: 16:bb:4d:3e:c8:46:b8:2a:fa:a0:ba:13:d1:17:ed:49:4d:a4: b8:ac:aa:6c:51:b6:d2:b9:10:45:29:4f:97:ff:15:28:5b:e5: da:c6:87:a0:36:1b:78:60:93:b7:b8:d4:df:8d:f7:c2:03:e5: 50:1b:db:c7:43:81:1c:68:c7:5d:cb:53:59:b0:51:4b:15:38: 5e:3e:e4:1d:dc:d3:16:ff:a2:fc:74:8a:0a:8d:63:da:05:2f: ca:b4:84:05:3e:b5:08:62:5d:64:3c:c8:55:05:f7:9a:b8:9a: c1:c7:79:92:c9:e3:c1:9d:1b:0c:52:37:3a:67:fb:f2:af:92: 7f:9d:11:49:09:54:b2:1d:52:16:06:e2:1b:45:77:89:36:68: dd:ac:d1:31:26:0d:c6:f9:bc:2e:d2:09:e7:d3:2c:ea:00:13: 92:14:0b:ca:0a:67:af:0c:8e:fe:a4:7d:dc:42:e9:91:fc:30: 3a:de:44:c8:0d:17:84:14:da:48:f7:a8:93:5d:bf:0c:79:bc: 18:e3:6a:ab:f1:dc:3f:8f:b3:99:80:9d:e0:7e:e9:c9:e2:36: 66:35:6e:6c -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgIUQLSURhIRtWbs4Ia/55D9SlbwaxMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjU1QzI3NDUzMjJDRUMxODA1ODE1RENENjVCQzZBRkZE OTkxNjhEQTAeFw0yNjA4MTcxODA4NTFaFw0yNjA4MTgyMTQzNTFaMDMxMTAvBgNV BAMTKEQ2RUM1OTZGMkU4OTU4NjJFQUQ5MTgxMjk2RDI3OTM0QTgyQUU3MUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdqqdx7WXwkLw3RqEBEjxEquIL YbAtmz7hngm3KLCX3PIpi/jJvB+E6j/gFOwByr6DRdwQ2PLm0lTsgE9MQ9t2OjJK hoEmA9/+QGfcmUAoloVf2LXuoPDpUTRvpeUo2ae9JUCgndFi3+i3assjVkoENZj5 n2FEvP+kmbO88mE1g3f7jUwa4ynSoR8z5wJtyHGDdJoUNzxc1IWp94b893pk3jR5 MhwAA59sCSu4Viblo0KcUKOmGXMVEZWz6MwR9oX9UMau3aadwfSe4zgqVHxPPP4c A4Us7cXn1NmJm8i9u/ImhCdkBBuWbCdM6awvlUhN3P6lLc89h2BcnYI3uqSnAgMB AAGjggIkMIICIDAdBgNVHQ4EFgQU1uxZby6JWGLq2RgSltJ5NKgq5xowHwYDVR0j BBgwFoAU9VwnRTIs7BgFgV3NZbxq/9mRaNowDgYDVR0PAQH/BAQDAgeAMGYGA1Ud HwRfMF0wW6BZoFeGVXJzeW5jOi8va3JpbGwuYnloaWxsLmRlL3JlcG8vYnloaWxs LWNhLzEvRjU1QzI3NDUzMjJDRUMxODA1ODE1RENENjVCQzZBRkZEOTkxNjhEQS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wMDJmOGVlNi1hYmU3LTRh ZTgtOTY0Yy03ODhiYjk4Yzk3NWMvMS9GNTVDMjc0NTMyMkNFQzE4MDU4MTVEQ0Q2 NUJDNkFGRkQ5OTE2OERBLmNlcjBxBggrBgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuG VXJzeW5jOi8va3JpbGwuYnloaWxsLmRlL3JlcG8vYnloaWxsLWNhLzEvRjU1QzI3 NDUzMjJDRUMxODA1ODE1RENENjVCQzZBRkZEOTkxNjhEQS5tZnQwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBALHe Z1eZs6+QnyLcBOF2QmUl/5p/zPjGx/lZtiz3XbfUaD2L4Ra7TT7IRrgq+qC6E9EX 7UlNpLisqmxRttK5EEUpT5f/FShb5drGh6A2G3hgk7e41N+N98ID5VAb28dDgRxo x13LU1mwUUsVOF4+5B3c0xb/ovx0igqNY9oFL8q0hAU+tQhiXWQ8yFUF95q4msHH eZLJ48GdGwxSNzpn+/Kvkn+dEUkJVLIdUhYG4htFd4k2aN2s0TEmDcb5vC7SCefT LOoAE5IUC8oKZ68Mjv6kfdxC6ZH8MDreRMgNF4QU2kj3qJNdvwx5vBjjaqvx3D+P s5mAneB+6cniNmY1bmw= -----END CERTIFICATE-----Generated at Tue Aug 18 02:39:24 2026 by rpki-client