$ rpki-client -vvf krill.byhill.de/repo/byhill-ca/1/F55C2745322CEC1805815DCD65BC6AFFD99168DA.mft File: F55C2745322CEC1805815DCD65BC6AFFD99168DA.mft (raw, json) Hash identifier: fU6+zVXgQohGG99Q6vHAOJvIOJImXALSXqVGtvq+XcY= Subject key identifier: DC:D4:31:EA:F6:CD:92:2A:3A:EE:ED:F4:6B:47:91:28:BD:FB:B8:6B Authority key identifier: F5:5C:27:45:32:2C:EC:18:05:81:5D:CD:65:BC:6A:FF:D9:91:68:DA Certificate issuer: /CN=F55C2745322CEC1805815DCD65BC6AFFD99168DA Certificate serial: 3AF4712FDFFF0C8B9E703F87FF2E7A035678439F Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/F55C2745322CEC1805815DCD65BC6AFFD99168DA.cer Subject info access: rsync://krill.byhill.de/repo/byhill-ca/1/F55C2745322CEC1805815DCD65BC6AFFD99168DA.mft Manifest number: 1F Signing time: Thu 14 May 2026 19:15:49 +0000 Manifest this update: Thu 14 May 2026 19:10:49 +0000 Manifest next update: Fri 15 May 2026 20:33:49 +0000 Files and hashes: 1: F55C2745322CEC1805815DCD65BC6AFFD99168DA.crl (hash: 6xJs8ro9zfC3+lg5P6ohJOAUlxVUwGgzEwB+ytIBEbA=) 2: 326131333a633863343a373130303a3a2f34302d3430203d3e20323032333538.roa (hash: d+Wfk22NHdZ1Lc1JTtegQebaE82OrinSLcgeTPsLLUs=) Validation: OK Signature path: rsync://krill.byhill.de/repo/byhill-ca/1/F55C2745322CEC1805815DCD65BC6AFFD99168DA.crl rsync://krill.byhill.de/repo/byhill-ca/1/F55C2745322CEC1805815DCD65BC6AFFD99168DA.mft rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/F55C2745322CEC1805815DCD65BC6AFFD99168DA.cer rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.crl rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.mft rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/1E74494683D8D2A4E029AAD4573928D2A55FA411.cer rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.crl rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 15 May 2026 15:02:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:f4:71:2f:df:ff:0c:8b:9e:70:3f:87:ff:2e:7a:03:56:78:43:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F55C2745322CEC1805815DCD65BC6AFFD99168DA Validity Not Before: May 14 19:10:49 2026 GMT Not After : May 15 20:33:49 2026 GMT Subject: CN=DCD431EAF6CD922A3AEEEDF46B479128BDFBB86B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:ab:65:1a:32:92:c9:ab:ee:71:8b:aa:73:18: d2:1c:b7:f3:7a:f1:d4:17:26:a3:f3:db:f7:86:d4: 2d:79:72:15:b9:2a:e5:98:31:ef:d1:d5:1b:ee:fb: db:23:e5:87:40:f9:a6:12:23:d4:41:e2:5f:81:4d: 66:cf:89:c6:2c:db:0a:92:cd:f1:d3:70:85:98:8f: 90:31:e5:5c:6e:64:73:64:5f:9f:d5:80:71:a0:50: d8:57:2b:79:b9:67:9e:1a:0c:02:3a:d4:14:4d:56: ca:85:c1:c7:d3:c9:ef:11:be:bd:1c:95:f0:3f:38: 38:c9:cd:fe:f6:80:62:7b:cc:d8:59:c4:37:b7:d9: cf:66:a6:65:81:cd:6f:d1:10:02:1f:bf:0c:10:9e: 27:1c:4b:8e:4e:1d:c7:0b:eb:38:e0:0f:62:9c:a0: ce:43:10:e9:06:8b:ae:9e:e1:79:b0:54:4b:9b:92: 8e:e0:21:c7:b5:2e:97:c3:44:80:0c:05:ff:14:11: f9:46:47:10:23:a7:fc:20:19:84:d0:0f:1a:91:93: 4e:3f:54:2a:c4:a7:17:e6:e9:1f:54:7e:52:94:f5: 6e:7f:8e:9c:82:04:a3:8a:39:72:42:c6:48:54:65: 45:66:fc:25:9f:d5:12:d1:0a:14:29:bf:29:0f:5e: 0e:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:D4:31:EA:F6:CD:92:2A:3A:EE:ED:F4:6B:47:91:28:BD:FB:B8:6B X509v3 Authority Key Identifier: keyid:F5:5C:27:45:32:2C:EC:18:05:81:5D:CD:65:BC:6A:FF:D9:91:68:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.byhill.de/repo/byhill-ca/1/F55C2745322CEC1805815DCD65BC6AFFD99168DA.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/F55C2745322CEC1805815DCD65BC6AFFD99168DA.cer Subject Information Access: Signed Object - URI:rsync://krill.byhill.de/repo/byhill-ca/1/F55C2745322CEC1805815DCD65BC6AFFD99168DA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:1d:14:a5:50:f6:5f:79:c7:50:16:e9:40:47:45:4a:8a:e1: fe:b8:32:93:6b:6d:02:73:40:df:a9:87:c5:e0:71:70:d9:88: d8:f3:1d:ff:79:41:f3:ee:8a:47:06:f3:cb:27:8d:30:52:10: ac:fd:6d:36:cf:81:7c:f9:30:02:12:e9:42:70:bc:73:10:c1: 04:27:e1:04:6c:a2:74:03:56:b4:df:00:8f:f7:2d:86:ea:9f: 97:fe:46:1d:81:34:13:13:82:07:f1:36:94:04:23:eb:e3:96: d9:9f:15:8f:12:d4:c1:ab:e5:e2:bf:61:f2:39:bc:32:2a:20: e2:a9:37:c1:57:8b:e3:65:e9:35:b6:85:d4:c4:5e:34:23:2a: 84:ec:30:34:1d:56:45:a6:5e:28:33:7e:18:11:0b:56:54:60: 4c:57:dc:89:cd:ba:05:81:4b:be:1f:bf:9f:b0:31:1e:44:82: fa:ff:36:57:0a:c7:ad:22:17:bc:b9:dc:a6:07:09:23:89:e7: e6:cc:50:0c:b1:22:bc:dd:3d:f4:ef:16:60:f0:a2:da:63:3c: d7:47:d6:9f:fd:14:30:84:0d:50:1f:b0:6b:ac:a8:7d:52:b4: 9b:74:b0:b8:e6:af:69:38:d5:30:f6:21:e9:27:74:09:cd:00: b4:95:f6:6b -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgIUOvRxL9//DIuecD+H/y56A1Z4Q58wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjU1QzI3NDUzMjJDRUMxODA1ODE1RENENjVCQzZBRkZE OTkxNjhEQTAeFw0yNjA1MTQxOTEwNDlaFw0yNjA1MTUyMDMzNDlaMDMxMTAvBgNV BAMTKERDRDQzMUVBRjZDRDkyMkEzQUVFRURGNDZCNDc5MTI4QkRGQkI4NkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgq2UaMpLJq+5xi6pzGNIct/N6 8dQXJqPz2/eG1C15chW5KuWYMe/R1Rvu+9sj5YdA+aYSI9RB4l+BTWbPicYs2wqS zfHTcIWYj5Ax5VxuZHNkX5/VgHGgUNhXK3m5Z54aDAI61BRNVsqFwcfTye8Rvr0c lfA/ODjJzf72gGJ7zNhZxDe32c9mpmWBzW/REAIfvwwQniccS45OHccL6zjgD2Kc oM5DEOkGi66e4XmwVEubko7gIce1LpfDRIAMBf8UEflGRxAjp/wgGYTQDxqRk04/ VCrEpxfm6R9UflKU9W5/jpyCBKOKOXJCxkhUZUVm/CWf1RLRChQpvykPXg7PAgMB AAGjggIkMIICIDAdBgNVHQ4EFgQU3NQx6vbNkio67u30a0eRKL37uGswHwYDVR0j BBgwFoAU9VwnRTIs7BgFgV3NZbxq/9mRaNowDgYDVR0PAQH/BAQDAgeAMGYGA1Ud HwRfMF0wW6BZoFeGVXJzeW5jOi8va3JpbGwuYnloaWxsLmRlL3JlcG8vYnloaWxs LWNhLzEvRjU1QzI3NDUzMjJDRUMxODA1ODE1RENENjVCQzZBRkZEOTkxNjhEQS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wMDJmOGVlNi1hYmU3LTRh ZTgtOTY0Yy03ODhiYjk4Yzk3NWMvMS9GNTVDMjc0NTMyMkNFQzE4MDU4MTVEQ0Q2 NUJDNkFGRkQ5OTE2OERBLmNlcjBxBggrBgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuG VXJzeW5jOi8va3JpbGwuYnloaWxsLmRlL3JlcG8vYnloaWxsLWNhLzEvRjU1QzI3 NDUzMjJDRUMxODA1ODE1RENENjVCQzZBRkZEOTkxNjhEQS5tZnQwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAHcd FKVQ9l95x1AW6UBHRUqK4f64MpNrbQJzQN+ph8XgcXDZiNjzHf95QfPuikcG88sn jTBSEKz9bTbPgXz5MAIS6UJwvHMQwQQn4QRsonQDVrTfAI/3LYbqn5f+Rh2BNBMT ggfxNpQEI+vjltmfFY8S1MGr5eK/YfI5vDIqIOKpN8FXi+Nl6TW2hdTEXjQjKoTs MDQdVkWmXigzfhgRC1ZUYExX3InNugWBS74fv5+wMR5Egvr/NlcKx60iF7y53KYH CSOJ5+bMUAyxIrzdPfTvFmDwotpjPNdH1p/9FDCEDVAfsGusqH1StJt0sLjmr2k4 1TD2IekndAnNALSV9ms= -----END CERTIFICATE-----Generated at Fri May 15 06:55:08 2026 by rpki-client