Manifest

$ rpki-client -vvf krill.byhill.de/repo/byhill-ca/2/185B1D68A461FA242686542750142382ADF2C53B.mft
File:                     185B1D68A461FA242686542750142382ADF2C53B.mft (raw, json)
Hash identifier:          qCVVfxvZ3ZhrmXutDSw9Za0VqoSRp2zqOjAdEog3tlw=
Subject key identifier:   24:8C:0D:7A:A8:CF:79:E4:26:05:0D:98:6B:E9:E9:60:A5:6F:C3:D0
Authority key identifier: 18:5B:1D:68:A4:61:FA:24:26:86:54:27:50:14:23:82:AD:F2:C5:3B
Certificate issuer:       /CN=185b1d68a461fa242686542750142382adf2c53b
Certificate serial:       1A4D896044CE105A01D84B867C3EEE0F73EDF281
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GFsdaKRh-iQmhlQnUBQjgq3yxTs.cer
Subject info access:      rsync://krill.byhill.de/repo/byhill-ca/2/185B1D68A461FA242686542750142382ADF2C53B.mft
Manifest number:          58
Signing time:             Mon 17 Aug 2026 22:38:51 +0000
Manifest this update:     Mon 17 Aug 2026 22:33:51 +0000
Manifest next update:     Tue 18 Aug 2026 23:35:51 +0000
Files and hashes:         1: AS219418.asa (hash: PiKx0h9wCnHnrTngq1cjJXYHaYtLXx9ibb8Wpi+TW8Q=)
                          2: 185B1D68A461FA242686542750142382ADF2C53B.crl (hash: B4snhku0uwT9GflQJlqU3isqCCnxm95lNEOFBnzLdC8=)
Validation:               OK
Signature path:           rsync://krill.byhill.de/repo/byhill-ca/2/185B1D68A461FA242686542750142382ADF2C53B.crl
                          rsync://krill.byhill.de/repo/byhill-ca/2/185B1D68A461FA242686542750142382ADF2C53B.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GFsdaKRh-iQmhlQnUBQjgq3yxTs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 18 Aug 2026 23:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:4d:89:60:44:ce:10:5a:01:d8:4b:86:7c:3e:ee:0f:73:ed:f2:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=185b1d68a461fa242686542750142382adf2c53b
        Validity
            Not Before: Aug 17 22:33:51 2026 GMT
            Not After : Aug 18 23:35:51 2026 GMT
        Subject: CN=248C0D7AA8CF79E426050D986BE9E960A56FC3D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:48:a8:f7:05:23:a2:b9:3a:f0:33:e5:f8:35:
                    72:8a:a0:3b:46:83:4f:0a:6f:13:00:c7:9c:9c:0d:
                    fd:54:d9:10:a1:9f:4b:d7:a9:7a:c2:05:97:b2:08:
                    fb:72:c3:0f:ae:12:96:d9:52:70:91:71:8d:8f:05:
                    9f:f0:6b:d3:82:41:a4:38:56:6b:f2:38:a9:19:39:
                    43:bc:31:8e:78:25:77:4a:46:cf:11:ea:48:77:30:
                    b7:32:69:a5:a2:f3:bc:86:71:9e:d2:d0:98:64:b2:
                    1f:81:80:54:e7:14:89:ad:a4:b4:51:6b:cf:7b:09:
                    ac:cd:e2:14:63:7a:a4:44:e7:11:2c:87:66:0b:7e:
                    8a:4b:b4:93:23:18:51:c1:98:2b:66:29:c0:a4:f5:
                    be:30:89:3f:fd:60:cb:7f:7c:bf:0a:20:4e:cb:ee:
                    18:3b:cd:d3:db:b5:91:11:f1:3b:77:b7:3c:4a:7f:
                    2e:f2:e1:9e:3d:c6:fc:38:d2:c1:a2:66:d1:63:0e:
                    81:42:0e:a5:a8:2b:7f:4b:46:90:39:06:82:b2:cf:
                    51:cd:50:79:c0:9f:8c:f4:8d:8e:e1:32:ef:fe:a3:
                    3b:c9:f2:77:b7:66:ec:bc:d8:b3:be:46:41:0e:92:
                    ed:37:3c:c5:2e:41:5a:ab:fc:2b:3a:fb:17:49:12:
                    f5:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:8C:0D:7A:A8:CF:79:E4:26:05:0D:98:6B:E9:E9:60:A5:6F:C3:D0
            X509v3 Authority Key Identifier:
                keyid:18:5B:1D:68:A4:61:FA:24:26:86:54:27:50:14:23:82:AD:F2:C5:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.byhill.de/repo/byhill-ca/2/185B1D68A461FA242686542750142382ADF2C53B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GFsdaKRh-iQmhlQnUBQjgq3yxTs.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.byhill.de/repo/byhill-ca/2/185B1D68A461FA242686542750142382ADF2C53B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:4b:65:ca:d6:92:26:da:2e:cf:c6:84:1c:34:fa:45:b6:58:
         b1:68:52:69:fb:30:42:08:89:12:38:5d:1d:89:aa:f0:77:e6:
         fa:1f:61:81:76:96:21:21:c7:41:8a:ee:ee:75:f6:ac:7c:91:
         42:b4:29:66:e9:44:a2:e9:a9:f8:64:49:b0:ea:8d:4d:13:f6:
         29:05:fd:0c:64:b6:12:62:26:f3:f8:3e:a0:0f:04:d9:5c:b1:
         97:3b:0a:68:77:7c:9d:8d:31:31:0d:8c:99:56:2c:87:68:8f:
         d5:89:b2:5f:c4:9a:9f:78:9b:30:d8:f2:ce:70:df:ff:b6:85:
         02:a4:0b:a3:e4:39:9f:c3:17:60:23:5a:66:21:72:85:67:f5:
         54:1a:7b:ee:f3:99:c8:dd:67:cf:43:d1:16:0d:17:a0:09:e6:
         d5:39:68:cb:ac:2f:61:fe:dd:1a:11:5c:1e:e1:01:15:e5:6c:
         43:e8:3d:0e:7a:c0:94:cd:3b:f9:00:b4:17:d8:e6:50:27:f0:
         44:6e:d4:e0:bf:56:90:bb:6c:5d:c5:bc:d4:02:48:14:b9:56:
         88:90:f3:64:45:7d:5d:5c:bd:0c:f3:64:a1:da:ee:d5:55:bd:
         52:a0:20:1d:33:0f:c9:43:bf:0c:11:57:18:e4:5d:46:c9:75:
         d2:02:29:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 18 06:27:37 2026 by rpki-client