Manifest

$ rpki-client -vvf krill.byhill.de/repo/byhill-ca/2/185B1D68A461FA242686542750142382ADF2C53B.mft
File:                     185B1D68A461FA242686542750142382ADF2C53B.mft (raw, json)
Hash identifier:          QrlR2dnr7+rKo5XP8w0rGUhMDmftW4rAYpjKpvOmNCc=
Subject key identifier:   89:9D:40:D0:40:01:3A:B3:30:E8:64:B3:57:61:69:8C:DA:F2:B7:CF
Authority key identifier: 18:5B:1D:68:A4:61:FA:24:26:86:54:27:50:14:23:82:AD:F2:C5:3B
Certificate issuer:       /CN=185b1d68a461fa242686542750142382adf2c53b
Certificate serial:       7B1A52114A0559A57400233745B306F81F114C66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GFsdaKRh-iQmhlQnUBQjgq3yxTs.cer
Subject info access:      rsync://krill.byhill.de/repo/byhill-ca/2/185B1D68A461FA242686542750142382ADF2C53B.mft
Manifest number:          15
Signing time:             Sun 28 Jun 2026 15:24:15 +0000
Manifest this update:     Sun 28 Jun 2026 15:19:15 +0000
Manifest next update:     Mon 29 Jun 2026 18:54:15 +0000
Files and hashes:         1: 185B1D68A461FA242686542750142382ADF2C53B.crl (hash: YZ+mOtOZP1MH5xyvypuPYyx1TpbDPhGiI3NEeTvynNw=)
                          2: AS219418.asa (hash: 85zYMAfPgJ7347VD1GJbW6WPSxglg1aAJlGhje3Kuxs=)
Validation:               OK
Signature path:           rsync://krill.byhill.de/repo/byhill-ca/2/185B1D68A461FA242686542750142382ADF2C53B.crl
                          rsync://krill.byhill.de/repo/byhill-ca/2/185B1D68A461FA242686542750142382ADF2C53B.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GFsdaKRh-iQmhlQnUBQjgq3yxTs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 29 Jun 2026 18:54:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:1a:52:11:4a:05:59:a5:74:00:23:37:45:b3:06:f8:1f:11:4c:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=185b1d68a461fa242686542750142382adf2c53b
        Validity
            Not Before: Jun 28 15:19:15 2026 GMT
            Not After : Jun 29 18:54:15 2026 GMT
        Subject: CN=899D40D040013AB330E864B35761698CDAF2B7CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:01:d3:a2:1b:ff:56:e6:fc:24:c9:22:20:36:
                    55:03:58:15:b5:76:51:cb:e4:f2:16:ba:7d:ff:ce:
                    11:3c:f8:bc:83:2f:4e:6f:4a:5c:a3:8d:f1:b9:e8:
                    bf:df:54:76:77:68:34:de:1e:b2:5d:b7:22:1b:54:
                    d3:f4:ab:82:4e:33:b6:61:8c:4d:6f:e9:37:5e:10:
                    a2:41:79:a9:bb:b8:d1:c4:17:0d:05:88:46:30:94:
                    3b:6e:59:6f:07:ec:bb:d6:52:c0:b9:08:2c:e1:90:
                    dc:c9:1a:7a:58:44:f7:43:24:59:bf:64:c9:d3:0c:
                    28:20:9e:e0:e5:bf:05:cf:e6:cb:33:98:97:5d:2c:
                    5e:a0:3a:e9:69:f1:8f:ee:1c:0c:3a:71:8f:59:fe:
                    44:52:33:d7:4a:6a:f9:10:ea:ae:f2:30:bc:df:16:
                    80:67:84:98:29:76:52:dc:83:05:b7:e0:a3:2a:c7:
                    33:b2:d3:0a:e3:ce:61:00:3d:2e:71:35:4c:cd:76:
                    88:8a:d5:30:d1:f2:7b:89:61:13:83:14:6b:4c:91:
                    03:2c:21:d8:59:c2:b1:bc:e5:56:74:4d:f0:0d:27:
                    f3:5a:48:61:dc:d0:e1:60:63:4a:56:ef:57:b9:df:
                    f7:9b:28:76:f0:15:0b:d9:4b:ae:04:e4:81:87:68:
                    16:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:9D:40:D0:40:01:3A:B3:30:E8:64:B3:57:61:69:8C:DA:F2:B7:CF
            X509v3 Authority Key Identifier:
                keyid:18:5B:1D:68:A4:61:FA:24:26:86:54:27:50:14:23:82:AD:F2:C5:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.byhill.de/repo/byhill-ca/2/185B1D68A461FA242686542750142382ADF2C53B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GFsdaKRh-iQmhlQnUBQjgq3yxTs.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.byhill.de/repo/byhill-ca/2/185B1D68A461FA242686542750142382ADF2C53B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:ee:82:36:82:2e:b4:ee:93:d5:c8:92:4d:d9:c7:4e:78:ca:
         03:61:d9:ca:eb:81:b1:87:6b:63:7f:4c:a0:72:d4:4e:52:e7:
         6d:a9:96:4a:c2:bc:43:53:ac:2f:c5:90:52:e8:b2:eb:b2:a7:
         9a:f1:f3:15:2c:40:9f:78:14:37:bd:c9:03:b5:39:e6:f1:b8:
         d3:91:b4:d3:c8:54:32:72:ae:50:eb:c5:14:b8:a3:e8:59:13:
         29:da:cd:ee:79:b2:cb:60:4a:d9:2d:0b:b0:c4:95:2e:b0:8c:
         21:20:e9:8c:44:1a:8f:d2:c4:19:ff:c8:ce:97:20:08:09:27:
         da:37:05:d3:f5:7d:33:bb:29:2e:a8:f6:00:d5:d1:19:55:77:
         7b:bb:d3:b8:6d:be:35:00:a5:d9:e6:b5:fc:d9:60:13:f4:c5:
         e8:8a:f4:9b:7a:6b:7a:e8:f6:fc:f0:8e:0e:88:e8:e8:51:61:
         6e:19:9e:03:36:44:a2:70:92:ef:df:7e:dc:3c:ea:98:fc:5c:
         da:4a:7c:b9:9c:a7:8c:45:e6:42:08:fd:6e:20:26:31:bd:e6:
         9f:54:ab:49:6f:7e:bc:ec:7d:5d:ff:2f:1c:2b:93:ef:19:f0:
         b3:c4:72:e5:78:7c:ca:e3:4f:e0:81:30:24:9f:cc:2f:86:5c:
         19:ca:d8:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:30:26 2026 by rpki-client