$ rpki-client -vvf krill.byhill.de/repo/byhill-ca/1/F55C2745322CEC1805815DCD65BC6AFFD99168DA.mft File: F55C2745322CEC1805815DCD65BC6AFFD99168DA.mft (raw, json) Hash identifier: gjvnjuLc74+PUpi3SZsJSVaZseRoGeFvgmmp4h9giQ0= Subject key identifier: 1D:03:74:3E:DA:7B:DE:00:90:B3:1B:7B:7A:E1:C5:6A:C8:4B:5B:7D Authority key identifier: F5:5C:27:45:32:2C:EC:18:05:81:5D:CD:65:BC:6A:FF:D9:91:68:DA Certificate issuer: /CN=F55C2745322CEC1805815DCD65BC6AFFD99168DA Certificate serial: 463B6126F396DC9C2D6AC15FD7219006536EFA9B Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/F55C2745322CEC1805815DCD65BC6AFFD99168DA.cer Subject info access: rsync://krill.byhill.de/repo/byhill-ca/1/F55C2745322CEC1805815DCD65BC6AFFD99168DA.mft Manifest number: 61 Signing time: Mon 29 Jun 2026 08:05:49 +0000 Manifest this update: Mon 29 Jun 2026 08:00:49 +0000 Manifest next update: Tue 30 Jun 2026 10:29:49 +0000 Files and hashes: 1: 326131333a633863343a373031383a3a2f34382d3438203d3e20323139343138.roa (hash: ZyEmmv2NtM1cJBidwRboYBKa7EjRkpw/Hw7NvcYUYx4=) 2: F55C2745322CEC1805815DCD65BC6AFFD99168DA.crl (hash: 6enouA42vMkhsHqz1HP36//n7lzL/XvBYmY7uYSiW8Q=) 3: 326131333a633863343a373130303a3a2f34302d3430203d3e20323032333538.roa (hash: d+Wfk22NHdZ1Lc1JTtegQebaE82OrinSLcgeTPsLLUs=) 4: 326131333a633863343a373031393a3a2f34382d3438203d3e20323139343138.roa (hash: OcmweSrCgsMNuPf6ZZytHU9NxvCytKfcDUyLD9zAQ1Y=) Validation: OK Signature path: rsync://krill.byhill.de/repo/byhill-ca/1/F55C2745322CEC1805815DCD65BC6AFFD99168DA.crl rsync://krill.byhill.de/repo/byhill-ca/1/F55C2745322CEC1805815DCD65BC6AFFD99168DA.mft rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/F55C2745322CEC1805815DCD65BC6AFFD99168DA.cer rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.crl rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.mft rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/1E74494683D8D2A4E029AAD4573928D2A55FA411.cer rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.crl rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Jun 2026 21:28:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:3b:61:26:f3:96:dc:9c:2d:6a:c1:5f:d7:21:90:06:53:6e:fa:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F55C2745322CEC1805815DCD65BC6AFFD99168DA Validity Not Before: Jun 29 08:00:49 2026 GMT Not After : Jun 30 10:29:49 2026 GMT Subject: CN=1D03743EDA7BDE0090B31B7B7AE1C56AC84B5B7D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:0d:7d:96:74:43:fd:5a:e4:f2:a8:48:0d:ff: 46:33:09:13:80:3e:ef:5f:b3:10:7c:dd:29:84:89: 22:c0:42:aa:50:f6:23:eb:5b:2c:41:45:64:e8:fa: bb:01:50:e3:c1:9c:31:bc:8e:d3:0e:76:7b:47:eb: 71:a7:ae:bc:0d:3b:bd:21:48:41:06:af:2f:f8:93: 85:5d:81:19:e1:61:07:34:79:18:65:2b:47:57:05: 32:4d:fd:b3:31:25:cb:80:8d:d7:08:c5:27:f3:8a: cd:e0:4d:37:66:bf:cd:7a:a6:9f:70:6a:d5:46:56: 7a:96:da:59:e4:f7:2e:0d:71:b4:29:22:7d:89:f0: 25:cc:2f:44:95:cf:67:29:a7:31:ee:13:7f:38:18: 27:86:44:28:93:fc:87:6b:af:a1:e4:3e:0c:b0:d6: 9c:b4:2b:4d:3d:d2:fd:b0:09:0a:d0:33:2b:7c:3e: b5:8a:30:68:7d:dc:8b:aa:31:a2:86:56:a9:88:de: 5b:c3:cb:3d:f3:2e:49:97:fb:bf:97:5f:d9:d0:6c: 42:4d:14:60:9a:53:82:3f:d3:19:e5:8b:dc:2c:39: bb:de:a0:79:19:b2:19:f5:54:e0:e9:1d:b7:6e:7a: 73:71:df:72:68:9a:e4:97:b7:01:68:33:f6:ec:cf: d2:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:03:74:3E:DA:7B:DE:00:90:B3:1B:7B:7A:E1:C5:6A:C8:4B:5B:7D X509v3 Authority Key Identifier: keyid:F5:5C:27:45:32:2C:EC:18:05:81:5D:CD:65:BC:6A:FF:D9:91:68:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.byhill.de/repo/byhill-ca/1/F55C2745322CEC1805815DCD65BC6AFFD99168DA.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/F55C2745322CEC1805815DCD65BC6AFFD99168DA.cer Subject Information Access: Signed Object - URI:rsync://krill.byhill.de/repo/byhill-ca/1/F55C2745322CEC1805815DCD65BC6AFFD99168DA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d6:10:0a:dc:34:1f:c1:5c:45:e8:0a:29:28:fa:67:5f:d4:00: ec:5d:5f:cb:dc:de:df:5a:05:8b:5e:e3:ab:13:d7:27:de:76: 01:e8:0a:3e:da:ba:ec:2a:36:59:fb:53:77:5e:43:8c:06:65: 4e:95:36:c3:6d:28:ba:83:03:4d:84:37:e2:33:1f:67:c1:33: 1c:b3:d3:78:cb:6b:fa:5b:65:cf:0a:e4:16:ca:80:90:0d:61: 9c:98:2d:a9:e2:f0:4e:ce:2f:4e:11:7a:91:db:0b:20:b3:53: f3:0c:13:3c:d7:be:28:23:fb:12:b2:4a:e6:10:b1:b4:35:af: f0:25:26:09:30:26:4b:b7:ed:37:e6:61:cb:c6:dd:ab:b2:22: bf:b0:57:22:6f:79:9e:ac:4b:90:3d:fe:de:14:86:13:cd:e3: a4:1b:7f:cc:af:bc:b7:09:9c:30:6f:65:45:30:7c:4a:fb:1e: 12:ec:d2:92:56:c3:a0:06:43:e1:3e:07:c2:3f:92:f4:77:83: a8:5e:0d:59:16:69:26:84:80:9c:90:ba:2c:74:51:b8:6a:6d: c5:48:a4:cd:27:8a:48:81:09:9c:60:c0:ed:6f:38:f5:ef:e1: c3:8d:ee:05:9c:ca:0f:4d:da:f3:55:08:3b:45:6b:6d:b7:a4: 22:dc:c0:94 -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgIURjthJvOW3JwtasFf1yGQBlNu+pswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjU1QzI3NDUzMjJDRUMxODA1ODE1RENENjVCQzZBRkZE OTkxNjhEQTAeFw0yNjA2MjkwODAwNDlaFw0yNjA2MzAxMDI5NDlaMDMxMTAvBgNV BAMTKDFEMDM3NDNFREE3QkRFMDA5MEIzMUI3QjdBRTFDNTZBQzg0QjVCN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIDX2WdEP9WuTyqEgN/0YzCROA Pu9fsxB83SmEiSLAQqpQ9iPrWyxBRWTo+rsBUOPBnDG8jtMOdntH63GnrrwNO70h SEEGry/4k4VdgRnhYQc0eRhlK0dXBTJN/bMxJcuAjdcIxSfzis3gTTdmv816pp9w atVGVnqW2lnk9y4NcbQpIn2J8CXML0SVz2cppzHuE384GCeGRCiT/Idrr6HkPgyw 1py0K0090v2wCQrQMyt8PrWKMGh93IuqMaKGVqmI3lvDyz3zLkmX+7+XX9nQbEJN FGCaU4I/0xnli9wsObveoHkZshn1VODpHbduenNx33JomuSXtwFoM/bsz9LBAgMB AAGjggIkMIICIDAdBgNVHQ4EFgQUHQN0Ptp73gCQsxt7euHFashLW30wHwYDVR0j BBgwFoAU9VwnRTIs7BgFgV3NZbxq/9mRaNowDgYDVR0PAQH/BAQDAgeAMGYGA1Ud HwRfMF0wW6BZoFeGVXJzeW5jOi8va3JpbGwuYnloaWxsLmRlL3JlcG8vYnloaWxs LWNhLzEvRjU1QzI3NDUzMjJDRUMxODA1ODE1RENENjVCQzZBRkZEOTkxNjhEQS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wMDJmOGVlNi1hYmU3LTRh ZTgtOTY0Yy03ODhiYjk4Yzk3NWMvMS9GNTVDMjc0NTMyMkNFQzE4MDU4MTVEQ0Q2 NUJDNkFGRkQ5OTE2OERBLmNlcjBxBggrBgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuG VXJzeW5jOi8va3JpbGwuYnloaWxsLmRlL3JlcG8vYnloaWxsLWNhLzEvRjU1QzI3 NDUzMjJDRUMxODA1ODE1RENENjVCQzZBRkZEOTkxNjhEQS5tZnQwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBANYQ Ctw0H8FcRegKKSj6Z1/UAOxdX8vc3t9aBYte46sT1yfedgHoCj7auuwqNln7U3de Q4wGZU6VNsNtKLqDA02EN+IzH2fBMxyz03jLa/pbZc8K5BbKgJANYZyYLani8E7O L04RepHbCyCzU/MMEzzXvigj+xKySuYQsbQ1r/AlJgkwJku37TfmYcvG3auyIr+w VyJveZ6sS5A9/t4UhhPN46Qbf8yvvLcJnDBvZUUwfEr7HhLs0pJWw6AGQ+E+B8I/ kvR3g6heDVkWaSaEgJyQuix0UbhqbcVIpM0nikiBCZxgwO1vOPXv4cON7gWcyg9N 2vNVCDtFa223pCLcwJQ= -----END CERTIFICATE-----Generated at Mon Jun 29 11:34:06 2026 by rpki-client