$ rpki-client -vvf krill.byhill.de/repo/byhill-ca/1/F55C2745322CEC1805815DCD65BC6AFFD99168DA.mft File: F55C2745322CEC1805815DCD65BC6AFFD99168DA.mft (raw, json) Hash identifier: D8XUdZuMlkp8vJq3De0msKRfiDcJwqMvZXujPX+JXX8= Subject key identifier: CF:71:1A:99:FD:5D:C8:57:4D:CB:D0:AC:8A:FD:00:2E:A7:31:30:B7 Authority key identifier: F5:5C:27:45:32:2C:EC:18:05:81:5D:CD:65:BC:6A:FF:D9:91:68:DA Certificate issuer: /CN=F55C2745322CEC1805815DCD65BC6AFFD99168DA Certificate serial: 3E8463B5929E147B27F1EE0DAD3BBE8C2C292846 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/F55C2745322CEC1805815DCD65BC6AFFD99168DA.cer Subject info access: rsync://krill.byhill.de/repo/byhill-ca/1/F55C2745322CEC1805815DCD65BC6AFFD99168DA.mft Manifest number: 1C Signing time: Tue 12 May 2026 11:50:49 +0000 Manifest this update: Tue 12 May 2026 11:45:49 +0000 Manifest next update: Wed 13 May 2026 13:01:49 +0000 Files and hashes: 1: F55C2745322CEC1805815DCD65BC6AFFD99168DA.crl (hash: oBaL4BNqNyFsJ2YqMxOPScX5pIa+nwgqHjewosds4Wc=) 2: 326131333a633863343a373130303a3a2f34302d3430203d3e20323032333538.roa (hash: d+Wfk22NHdZ1Lc1JTtegQebaE82OrinSLcgeTPsLLUs=) Validation: OK Signature path: rsync://krill.byhill.de/repo/byhill-ca/1/F55C2745322CEC1805815DCD65BC6AFFD99168DA.crl rsync://krill.byhill.de/repo/byhill-ca/1/F55C2745322CEC1805815DCD65BC6AFFD99168DA.mft rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/F55C2745322CEC1805815DCD65BC6AFFD99168DA.cer rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.crl rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.mft rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/1E74494683D8D2A4E029AAD4573928D2A55FA411.cer rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.crl rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 07:49:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:84:63:b5:92:9e:14:7b:27:f1:ee:0d:ad:3b:be:8c:2c:29:28:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F55C2745322CEC1805815DCD65BC6AFFD99168DA Validity Not Before: May 12 11:45:49 2026 GMT Not After : May 13 13:01:49 2026 GMT Subject: CN=CF711A99FD5DC8574DCBD0AC8AFD002EA73130B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:93:d0:09:7d:7a:e9:9c:73:db:ce:ae:64:4e: e6:ae:54:f7:cd:47:88:58:99:e6:e0:6f:72:c5:fd: 44:86:d9:a6:ed:fc:a8:79:87:a5:26:be:ba:df:9f: c2:ee:4c:f3:09:b1:39:7f:77:77:75:07:6e:20:5e: e6:b0:8d:26:30:e8:6c:d6:95:e4:e6:a2:a0:62:1e: f7:2c:d6:75:38:ee:b1:17:19:39:fc:73:5a:d8:d3: 40:7b:d3:1f:5c:44:9b:99:2d:93:71:c4:d8:73:22: 3e:b1:c1:90:dd:08:91:ea:36:90:a5:63:c7:15:c3: 8c:14:2f:3e:6a:82:8c:0f:e3:ba:04:97:07:33:5d: 30:20:8a:7c:73:90:94:9f:19:47:b5:fc:df:51:be: 81:7d:5e:93:09:89:04:9c:b0:b3:56:19:fe:e3:87: ff:80:8c:fa:53:86:c9:55:a6:b6:3e:e5:c4:02:77: ec:5b:8c:80:da:ba:32:9e:53:e6:26:e1:8f:ba:f2: 67:6a:38:32:c5:74:ae:97:93:e0:e6:d2:dc:7b:11: 2b:8d:53:ac:2a:6a:b1:15:b7:ef:69:a9:0a:50:17: d6:57:cb:0f:e6:13:aa:5b:57:6a:20:c6:73:d3:c4: 7a:75:59:70:0a:2f:82:98:68:be:5c:08:ea:23:88: fb:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:71:1A:99:FD:5D:C8:57:4D:CB:D0:AC:8A:FD:00:2E:A7:31:30:B7 X509v3 Authority Key Identifier: keyid:F5:5C:27:45:32:2C:EC:18:05:81:5D:CD:65:BC:6A:FF:D9:91:68:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.byhill.de/repo/byhill-ca/1/F55C2745322CEC1805815DCD65BC6AFFD99168DA.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/F55C2745322CEC1805815DCD65BC6AFFD99168DA.cer Subject Information Access: Signed Object - URI:rsync://krill.byhill.de/repo/byhill-ca/1/F55C2745322CEC1805815DCD65BC6AFFD99168DA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:d5:61:1f:42:1c:d9:1e:5f:84:d1:a5:84:a8:59:d8:9b:ef: 52:be:25:01:80:e7:8c:ff:2e:ee:1d:44:51:82:f3:4d:32:65: 7a:a6:1b:35:59:a5:13:26:85:82:04:40:be:b3:70:3a:35:35: d9:bb:d4:20:f6:33:db:88:b5:bd:5d:13:39:a5:9b:48:3e:87: 2b:54:ed:ae:45:7e:d3:04:4e:20:d0:38:7c:ad:39:ac:80:de: e8:8c:b6:88:b6:74:cc:63:b9:24:ae:7f:76:c4:8a:06:83:62: 2e:44:73:21:ac:fb:3e:92:01:6a:c5:b1:64:d0:d1:96:94:a2: 1c:e3:62:d9:da:eb:62:a1:b0:3b:19:0b:e2:cb:62:90:a2:18: c6:84:92:22:2c:13:b0:b2:64:32:fc:ae:af:ad:0e:f0:67:77: a2:fe:a8:3f:4c:d6:f9:b2:e8:93:b6:3b:a1:9f:07:23:24:c0: 04:3f:78:c5:08:fa:76:12:e9:4f:83:dd:2e:8a:e6:23:9d:f6: bb:ab:99:9b:91:b3:4a:a1:b4:86:76:1a:36:a5:e9:0a:8d:ad: 8f:ae:a7:ff:75:9f:3b:16:cf:e3:84:c4:6d:9d:cf:70:07:25: e0:6b:2a:b1:e3:e6:09:cc:39:57:ba:b3:fc:43:3d:7b:51:69: dc:e9:01:fc -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgIUPoRjtZKeFHsn8e4NrTu+jCwpKEYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjU1QzI3NDUzMjJDRUMxODA1ODE1RENENjVCQzZBRkZE OTkxNjhEQTAeFw0yNjA1MTIxMTQ1NDlaFw0yNjA1MTMxMzAxNDlaMDMxMTAvBgNV BAMTKENGNzExQTk5RkQ1REM4NTc0RENCRDBBQzhBRkQwMDJFQTczMTMwQjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/k9AJfXrpnHPbzq5kTuauVPfN R4hYmebgb3LF/USG2abt/Kh5h6Umvrrfn8LuTPMJsTl/d3d1B24gXuawjSYw6GzW leTmoqBiHvcs1nU47rEXGTn8c1rY00B70x9cRJuZLZNxxNhzIj6xwZDdCJHqNpCl Y8cVw4wULz5qgowP47oElwczXTAginxzkJSfGUe1/N9RvoF9XpMJiQScsLNWGf7j h/+AjPpThslVprY+5cQCd+xbjIDaujKeU+Ym4Y+68mdqODLFdK6Xk+Dm0tx7ESuN U6wqarEVt+9pqQpQF9ZXyw/mE6pbV2ogxnPTxHp1WXAKL4KYaL5cCOojiPtPAgMB AAGjggIkMIICIDAdBgNVHQ4EFgQUz3Eamf1dyFdNy9Csiv0ALqcxMLcwHwYDVR0j BBgwFoAU9VwnRTIs7BgFgV3NZbxq/9mRaNowDgYDVR0PAQH/BAQDAgeAMGYGA1Ud HwRfMF0wW6BZoFeGVXJzeW5jOi8va3JpbGwuYnloaWxsLmRlL3JlcG8vYnloaWxs LWNhLzEvRjU1QzI3NDUzMjJDRUMxODA1ODE1RENENjVCQzZBRkZEOTkxNjhEQS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wMDJmOGVlNi1hYmU3LTRh ZTgtOTY0Yy03ODhiYjk4Yzk3NWMvMS9GNTVDMjc0NTMyMkNFQzE4MDU4MTVEQ0Q2 NUJDNkFGRkQ5OTE2OERBLmNlcjBxBggrBgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuG VXJzeW5jOi8va3JpbGwuYnloaWxsLmRlL3JlcG8vYnloaWxsLWNhLzEvRjU1QzI3 NDUzMjJDRUMxODA1ODE1RENENjVCQzZBRkZEOTkxNjhEQS5tZnQwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAMLV YR9CHNkeX4TRpYSoWdib71K+JQGA54z/Lu4dRFGC800yZXqmGzVZpRMmhYIEQL6z cDo1Ndm71CD2M9uItb1dEzmlm0g+hytU7a5FftMETiDQOHytOayA3uiMtoi2dMxj uSSuf3bEigaDYi5EcyGs+z6SAWrFsWTQ0ZaUohzjYtna62KhsDsZC+LLYpCiGMaE kiIsE7CyZDL8rq+tDvBnd6L+qD9M1vmy6JO2O6GfByMkwAQ/eMUI+nYS6U+D3S6K 5iOd9rurmZuRs0qhtIZ2Gjal6QqNrY+up/91nzsWz+OExG2dz3AHJeBrKrHj5gnM OVe6s/xDPXtRadzpAfw= -----END CERTIFICATE-----Generated at Tue May 12 22:10:26 2026 by rpki-client