$ rpki-client -vvf krill.byhill.de/repo/byhill-ca/1/F55C2745322CEC1805815DCD65BC6AFFD99168DA.mft File: F55C2745322CEC1805815DCD65BC6AFFD99168DA.mft (raw, json) Hash identifier: KMoJwkiOmH9fHfoRrYLPXUFWGjUsdvpcYCRDnUzQk9U= Subject key identifier: 32:13:5D:25:33:6C:C8:2D:49:55:A5:93:4D:94:37:07:2B:00:2B:6E Authority key identifier: F5:5C:27:45:32:2C:EC:18:05:81:5D:CD:65:BC:6A:FF:D9:91:68:DA Certificate issuer: /CN=F55C2745322CEC1805815DCD65BC6AFFD99168DA Certificate serial: 624DF69393722629E7F3333E84BC7626B26D06BC Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/F55C2745322CEC1805815DCD65BC6AFFD99168DA.cer Subject info access: rsync://krill.byhill.de/repo/byhill-ca/1/F55C2745322CEC1805815DCD65BC6AFFD99168DA.mft Manifest number: 82 Signing time: Thu 23 Jul 2026 15:42:26 +0000 Manifest this update: Thu 23 Jul 2026 15:37:26 +0000 Manifest next update: Fri 24 Jul 2026 16:38:26 +0000 Files and hashes: 1: F55C2745322CEC1805815DCD65BC6AFFD99168DA.crl (hash: e9XqzlAZQGh5ZeDECfvyDSgW6LcIzJKNGNlLteLqD0w=) 2: 326131333a633863343a373031393a3a2f34382d3438203d3e20323139343138.roa (hash: OcmweSrCgsMNuPf6ZZytHU9NxvCytKfcDUyLD9zAQ1Y=) 3: 326131333a633863343a373130303a3a2f34302d3430203d3e20323032333538.roa (hash: d+Wfk22NHdZ1Lc1JTtegQebaE82OrinSLcgeTPsLLUs=) 4: 326131333a633863343a373031383a3a2f34382d3438203d3e20323139343138.roa (hash: ZyEmmv2NtM1cJBidwRboYBKa7EjRkpw/Hw7NvcYUYx4=) Validation: OK Signature path: rsync://krill.byhill.de/repo/byhill-ca/1/F55C2745322CEC1805815DCD65BC6AFFD99168DA.crl rsync://krill.byhill.de/repo/byhill-ca/1/F55C2745322CEC1805815DCD65BC6AFFD99168DA.mft rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/F55C2745322CEC1805815DCD65BC6AFFD99168DA.cer rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.crl rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.mft rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/1E74494683D8D2A4E029AAD4573928D2A55FA411.cer rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.crl rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 14:03:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:4d:f6:93:93:72:26:29:e7:f3:33:3e:84:bc:76:26:b2:6d:06:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F55C2745322CEC1805815DCD65BC6AFFD99168DA Validity Not Before: Jul 23 15:37:26 2026 GMT Not After : Jul 24 16:38:26 2026 GMT Subject: CN=32135D25336CC82D4955A5934D9437072B002B6E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:2a:10:5b:f7:59:f7:9f:7b:5f:7d:96:30:a7: 35:08:ba:62:7c:85:23:a7:56:77:e2:7e:49:7c:88: 1c:0b:7a:68:30:96:8d:63:21:bc:13:7b:eb:61:46: 1f:f6:f6:f9:b5:91:77:cc:02:02:e5:13:d5:97:fc: d1:3e:aa:8c:c4:94:e4:6a:57:68:f3:25:03:2f:9f: aa:1a:80:af:88:c5:00:e6:c7:54:be:9e:b0:5c:80: 45:c5:03:b0:52:f0:c9:75:7c:04:03:08:8a:8e:8d: ec:cf:dc:cc:da:06:cd:16:5e:55:57:5b:a5:25:9f: fd:98:84:a5:2a:8e:31:67:3b:fa:c4:dd:aa:33:57: 8f:9d:78:f2:05:41:b2:ee:be:91:d0:7d:7e:f4:94: c8:3c:57:cc:93:09:be:9d:af:88:25:6a:a6:aa:2e: a6:bb:4f:6a:2b:02:c0:b5:33:0f:2b:ac:32:c8:fb: 4b:a1:74:ca:27:45:b7:61:8a:19:d8:07:d0:44:25: 6e:9d:da:66:06:37:f2:55:23:c1:74:33:1e:8d:0e: 17:b8:2c:58:27:fb:3c:25:5b:e5:fd:3e:14:95:85: 8e:1d:9a:ac:c6:74:af:19:36:03:96:36:0d:4b:c0: 3d:42:59:46:13:13:99:41:29:bd:9e:76:2e:3c:22: ea:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:13:5D:25:33:6C:C8:2D:49:55:A5:93:4D:94:37:07:2B:00:2B:6E X509v3 Authority Key Identifier: keyid:F5:5C:27:45:32:2C:EC:18:05:81:5D:CD:65:BC:6A:FF:D9:91:68:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.byhill.de/repo/byhill-ca/1/F55C2745322CEC1805815DCD65BC6AFFD99168DA.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/F55C2745322CEC1805815DCD65BC6AFFD99168DA.cer Subject Information Access: Signed Object - URI:rsync://krill.byhill.de/repo/byhill-ca/1/F55C2745322CEC1805815DCD65BC6AFFD99168DA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:95:50:3c:76:50:42:d4:78:66:36:a8:f2:e0:76:45:98:38: f7:2e:6d:63:ce:3d:a6:b6:5c:23:54:e5:2b:49:b8:5b:af:65: b8:a3:01:c6:f7:bb:e8:3d:be:f6:8d:f9:12:69:5b:65:a7:d1: d8:04:b2:95:e3:21:fa:ec:bf:fa:59:ed:da:3a:0e:eb:05:6f: 17:73:93:94:f6:e2:25:69:a2:a6:df:5b:5a:03:36:12:27:88: 31:1d:04:cd:22:45:5a:89:b1:94:b5:d2:c4:83:a6:3c:87:c4: 9b:cd:90:51:c2:85:2e:ff:9e:48:a0:f2:c9:24:82:06:58:0c: 4d:cb:87:72:50:6a:1d:61:3d:5f:e4:e3:e2:5e:79:82:22:fb: 4b:ee:86:60:e1:d7:cf:b1:26:b0:11:cb:b8:c4:b8:07:b0:04: 68:d6:ae:c5:ae:64:d2:fe:65:49:2a:15:40:8d:30:cc:a5:d0: 0f:10:a5:6f:96:22:23:cb:c8:59:ea:22:a1:7c:f9:be:d5:c3: 47:e4:e0:07:b7:0c:33:f4:30:bb:28:eb:41:6f:44:b1:9e:ae: 34:32:9e:24:83:a3:32:50:d0:93:5a:6e:1a:4f:ba:79:4d:76: 63:83:c6:e9:fc:90:3d:7b:05:8c:db:be:d8:7f:8a:78:42:cf: e8:83:6c:18 -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgIUYk32k5NyJinn8zM+hLx2JrJtBrwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjU1QzI3NDUzMjJDRUMxODA1ODE1RENENjVCQzZBRkZE OTkxNjhEQTAeFw0yNjA3MjMxNTM3MjZaFw0yNjA3MjQxNjM4MjZaMDMxMTAvBgNV BAMTKDMyMTM1RDI1MzM2Q0M4MkQ0OTU1QTU5MzREOTQzNzA3MkIwMDJCNkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiKhBb91n3n3tffZYwpzUIumJ8 hSOnVnfifkl8iBwLemgwlo1jIbwTe+thRh/29vm1kXfMAgLlE9WX/NE+qozElORq V2jzJQMvn6oagK+IxQDmx1S+nrBcgEXFA7BS8Ml1fAQDCIqOjezP3MzaBs0WXlVX W6Uln/2YhKUqjjFnO/rE3aozV4+dePIFQbLuvpHQfX70lMg8V8yTCb6dr4glaqaq Lqa7T2orAsC1Mw8rrDLI+0uhdMonRbdhihnYB9BEJW6d2mYGN/JVI8F0Mx6NDhe4 LFgn+zwlW+X9PhSVhY4dmqzGdK8ZNgOWNg1LwD1CWUYTE5lBKb2edi48IurpAgMB AAGjggIkMIICIDAdBgNVHQ4EFgQUMhNdJTNsyC1JVaWTTZQ3BysAK24wHwYDVR0j BBgwFoAU9VwnRTIs7BgFgV3NZbxq/9mRaNowDgYDVR0PAQH/BAQDAgeAMGYGA1Ud HwRfMF0wW6BZoFeGVXJzeW5jOi8va3JpbGwuYnloaWxsLmRlL3JlcG8vYnloaWxs LWNhLzEvRjU1QzI3NDUzMjJDRUMxODA1ODE1RENENjVCQzZBRkZEOTkxNjhEQS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wMDJmOGVlNi1hYmU3LTRh ZTgtOTY0Yy03ODhiYjk4Yzk3NWMvMS9GNTVDMjc0NTMyMkNFQzE4MDU4MTVEQ0Q2 NUJDNkFGRkQ5OTE2OERBLmNlcjBxBggrBgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuG VXJzeW5jOi8va3JpbGwuYnloaWxsLmRlL3JlcG8vYnloaWxsLWNhLzEvRjU1QzI3 NDUzMjJDRUMxODA1ODE1RENENjVCQzZBRkZEOTkxNjhEQS5tZnQwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAJaV UDx2UELUeGY2qPLgdkWYOPcubWPOPaa2XCNU5StJuFuvZbijAcb3u+g9vvaN+RJp W2Wn0dgEspXjIfrsv/pZ7do6DusFbxdzk5T24iVpoqbfW1oDNhIniDEdBM0iRVqJ sZS10sSDpjyHxJvNkFHChS7/nkig8skkggZYDE3Lh3JQah1hPV/k4+JeeYIi+0vu hmDh18+xJrARy7jEuAewBGjWrsWuZNL+ZUkqFUCNMMyl0A8QpW+WIiPLyFnqIqF8 +b7Vw0fk4Ae3DDP0MLso60FvRLGerjQyniSDozJQ0JNabhpPunlNdmODxun8kD17 BYzbvth/inhCz+iDbBg= -----END CERTIFICATE-----Generated at Thu Jul 23 21:06:08 2026 by rpki-client