Manifest

$ rpki-client -vvf krill.byhill.de/repo/byhill-ca/0/F2ADBCD3E44C2B9CF63C25F6594F643284A5980E.mft
File:                     F2ADBCD3E44C2B9CF63C25F6594F643284A5980E.mft (raw, json)
Hash identifier:          gCKTZgVjLyNpETjHyDmo4yfaw5mNcQVup3+Oba31S4A=
Subject key identifier:   04:F8:62:82:09:0C:BC:6C:C0:C5:68:E6:26:48:6E:30:BC:1C:CF:3D
Authority key identifier: F2:AD:BC:D3:E4:4C:2B:9C:F6:3C:25:F6:59:4F:64:32:84:A5:98:0E
Certificate issuer:       /CN=f2adbcd3e44c2b9cf63c25f6594f643284a5980e
Certificate serial:       113949EB27692FF01F17D3E36BEA102F82C15DAB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8q280-RMK5z2PCX2WU9kMoSlmA4.cer
Subject info access:      rsync://krill.byhill.de/repo/byhill-ca/0/F2ADBCD3E44C2B9CF63C25F6594F643284A5980E.mft
Manifest number:          1D
Signing time:             Tue 12 May 2026 04:45:49 +0000
Manifest this update:     Tue 12 May 2026 04:40:49 +0000
Manifest next update:     Wed 13 May 2026 08:18:49 +0000
Files and hashes:         1: F2ADBCD3E44C2B9CF63C25F6594F643284A5980E.crl (hash: XPsXe5KEw2aRoyD8ueG/n2ceV/pbhaYqUU95p9L7cpY=)
                          2: AS215110.asa (hash: Hc9JFrBKfI0crp6laqSMj4BCAqSdUXL5ADwGb2UQ0SU=)
Validation:               OK
Signature path:           rsync://krill.byhill.de/repo/byhill-ca/0/F2ADBCD3E44C2B9CF63C25F6594F643284A5980E.crl
                          rsync://krill.byhill.de/repo/byhill-ca/0/F2ADBCD3E44C2B9CF63C25F6594F643284A5980E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8q280-RMK5z2PCX2WU9kMoSlmA4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 08:18:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:39:49:eb:27:69:2f:f0:1f:17:d3:e3:6b:ea:10:2f:82:c1:5d:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2adbcd3e44c2b9cf63c25f6594f643284a5980e
        Validity
            Not Before: May 12 04:40:49 2026 GMT
            Not After : May 13 08:18:49 2026 GMT
        Subject: CN=04F86282090CBC6CC0C568E626486E30BC1CCF3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:60:bc:73:24:15:d5:63:ef:74:a4:a7:80:42:
                    27:f2:fd:53:45:1b:f2:43:02:f8:2c:a7:72:03:bd:
                    7e:a1:1e:78:14:d0:18:67:16:9d:1a:42:d2:8a:b7:
                    ce:b1:27:17:b8:6c:1b:1f:88:38:6c:a0:75:b8:95:
                    3e:68:96:39:0e:6e:c3:6c:dc:0f:6d:00:97:3b:09:
                    f8:51:57:19:82:0a:fa:ea:ce:c1:71:31:96:ba:a9:
                    1d:e1:3d:28:ad:68:68:dd:40:9e:57:e3:9f:b6:2a:
                    e4:d3:29:3c:3d:aa:e8:f0:dd:cf:94:9c:22:91:1c:
                    71:42:84:23:39:35:8a:80:fa:75:9c:78:96:d1:e3:
                    ea:21:3a:ed:3e:8c:9c:95:d1:5f:f5:b3:d2:a0:6c:
                    0a:b9:04:7e:69:56:33:d9:c4:38:4d:e1:46:96:2c:
                    fe:1e:cb:a6:f1:ad:21:02:72:9f:13:d8:ca:f8:da:
                    b8:7d:b7:e9:dc:cf:de:2f:49:1d:33:0c:2b:6f:9a:
                    bb:b0:96:ee:b0:40:cb:83:0d:7b:6a:67:50:ae:f3:
                    d5:4a:58:c9:66:68:96:67:e6:b1:44:d3:61:72:08:
                    34:91:92:33:20:52:5e:69:96:21:35:79:1b:43:13:
                    28:da:17:ae:ee:8e:62:a8:d9:55:3c:22:2a:27:c9:
                    e6:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:F8:62:82:09:0C:BC:6C:C0:C5:68:E6:26:48:6E:30:BC:1C:CF:3D
            X509v3 Authority Key Identifier:
                keyid:F2:AD:BC:D3:E4:4C:2B:9C:F6:3C:25:F6:59:4F:64:32:84:A5:98:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.byhill.de/repo/byhill-ca/0/F2ADBCD3E44C2B9CF63C25F6594F643284A5980E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8q280-RMK5z2PCX2WU9kMoSlmA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.byhill.de/repo/byhill-ca/0/F2ADBCD3E44C2B9CF63C25F6594F643284A5980E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:9d:3d:87:18:3a:36:2b:e6:29:86:cc:72:26:7b:6c:70:2b:
         19:c3:a2:19:14:c7:a6:ab:af:94:06:38:49:da:f9:23:05:64:
         19:c3:04:19:9f:44:fe:d2:8d:0e:a7:d9:37:a8:4d:df:00:62:
         a8:b3:df:d3:3d:d6:5a:d3:b3:1b:84:4d:17:b2:6b:2a:40:3c:
         e7:c8:7e:1c:d1:f1:16:1f:0a:f4:4a:ab:31:7e:1d:8b:c5:30:
         8f:1b:8a:49:41:12:f0:9c:80:32:7c:5d:d0:a6:79:d6:f4:d2:
         55:3c:b6:31:65:a9:7b:ea:bf:46:c4:ca:e2:cd:48:73:6d:2d:
         c9:69:95:2a:8a:b1:bb:91:f9:81:c1:7c:8d:58:69:c3:93:9c:
         4a:e6:4a:14:81:18:20:6b:d2:5b:4f:49:4d:1b:8a:54:89:32:
         d9:63:e7:28:13:33:bf:49:71:a4:18:0c:bc:e4:e5:1e:5a:07:
         62:6e:cd:21:5a:1a:1e:dc:69:28:bf:e7:26:5d:e9:8c:da:23:
         5b:a2:6c:4d:5e:cb:4c:2d:87:6e:a7:b9:c8:99:6b:2e:c9:5e:
         58:22:c1:4e:20:ad:8b:41:5e:86:f0:b1:30:a8:3a:ad:8a:b3:
         30:22:ea:c5:91:cf:e8:b0:d0:f8:f2:89:7d:38:ed:23:25:c3:
         d8:31:52:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:15:42 2026 by rpki-client