$ rpki-client -vvvf krill.byhill.de/repo/byhill-ca/1/F55C2745322CEC1805815DCD65BC6AFFD99168DA.mft File: F55C2745322CEC1805815DCD65BC6AFFD99168DA.mft (raw, json) Hash identifier: eV/O/eLOIwDJxncMkgqFxaJNCkjzA4i3WdP7oNPlJ8M= Subject key identifier: B8:B2:8D:5F:83:28:26:20:5C:44:CE:B8:16:F8:24:05:A5:D4:B4:48 Authority key identifier: F5:5C:27:45:32:2C:EC:18:05:81:5D:CD:65:BC:6A:FF:D9:91:68:DA Certificate issuer: /CN=F55C2745322CEC1805815DCD65BC6AFFD99168DA Certificate serial: 1C9B3890144FCDED0E001B17D5856E78D6A2B353 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/F55C2745322CEC1805815DCD65BC6AFFD99168DA.cer Subject info access: rsync://krill.byhill.de/repo/byhill-ca/1/F55C2745322CEC1805815DCD65BC6AFFD99168DA.mft Manifest number: D8 Signing time: Wed 23 Sep 2026 14:40:26 +0000 Manifest this update: Wed 23 Sep 2026 14:35:26 +0000 Manifest next update: Thu 24 Sep 2026 18:31:26 +0000 Files and hashes: 1: 326131333a633863343a373031383a3a2f34382d3438203d3e20323139343138.roa (hash: ZyEmmv2NtM1cJBidwRboYBKa7EjRkpw/Hw7NvcYUYx4=) 2: 326131333a633863343a373031393a3a2f34382d3438203d3e20323139343138.roa (hash: OcmweSrCgsMNuPf6ZZytHU9NxvCytKfcDUyLD9zAQ1Y=) 3: F55C2745322CEC1805815DCD65BC6AFFD99168DA.crl (hash: LMiDGVdolPLMbKLC11t7g+ULZ2al54MyO0YofMamKJ8=) 4: 326131333a633863343a373130303a3a2f34302d3430203d3e20323135313130.roa (hash: cEpZqnCUCXvDnH3pSPMSUOx1tDbxwMrkTLWn8/Sj84U=) Validation: OK Signature path: rsync://krill.byhill.de/repo/byhill-ca/1/F55C2745322CEC1805815DCD65BC6AFFD99168DA.crl rsync://krill.byhill.de/repo/byhill-ca/1/F55C2745322CEC1805815DCD65BC6AFFD99168DA.mft rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/F55C2745322CEC1805815DCD65BC6AFFD99168DA.cer rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.crl rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.mft rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/1E74494683D8D2A4E029AAD4573928D2A55FA411.cer rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.crl rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 01:58:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:9b:38:90:14:4f:cd:ed:0e:00:1b:17:d5:85:6e:78:d6:a2:b3:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F55C2745322CEC1805815DCD65BC6AFFD99168DA Validity Not Before: Sep 23 14:35:26 2026 GMT Not After : Sep 24 18:31:26 2026 GMT Subject: CN=B8B28D5F832826205C44CEB816F82405A5D4B448 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:ae:72:a5:68:35:28:65:92:da:2b:e9:85:af: af:8a:43:47:40:1a:0b:89:79:a5:98:f8:29:d5:61: 92:a4:a9:75:28:5b:6f:41:5f:82:00:59:fb:51:e6: 37:ec:aa:d3:62:a5:2d:78:3e:9c:fa:f8:30:22:01: 98:ff:49:22:97:cb:ee:a5:b9:98:33:9c:7a:4d:59: 43:af:fb:5a:7b:f5:4e:70:da:5c:bc:af:8d:49:f5: ef:c4:b8:ea:6c:21:57:d0:7c:aa:5a:1f:68:33:11: 85:56:c9:94:3a:3d:f8:29:62:d8:d4:a1:e4:ca:6e: 8f:96:a3:9f:14:dd:ee:70:d3:c4:e0:4f:01:e4:3a: 77:c5:13:c1:69:31:b3:67:76:2c:8f:e9:8d:fb:37: fd:36:a3:5d:ba:d0:58:4a:99:4e:d5:f3:d9:92:c0: c7:19:cf:73:a8:9d:5b:6f:5a:e2:85:76:04:08:77: c7:a8:9b:83:05:bb:cd:ae:87:55:a9:51:49:8c:2e: 4f:b4:51:c3:0c:88:ed:1b:3f:eb:ab:be:83:74:c8: c2:67:ed:1c:74:f8:d1:92:d2:b0:d3:44:7f:09:40: eb:fc:f6:49:36:ad:60:5d:d5:79:c9:fd:e6:6b:2a: 0a:fa:56:b7:2c:3b:e2:3c:13:8d:26:9d:c7:b3:e4: c1:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:B2:8D:5F:83:28:26:20:5C:44:CE:B8:16:F8:24:05:A5:D4:B4:48 X509v3 Authority Key Identifier: keyid:F5:5C:27:45:32:2C:EC:18:05:81:5D:CD:65:BC:6A:FF:D9:91:68:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.byhill.de/repo/byhill-ca/1/F55C2745322CEC1805815DCD65BC6AFFD99168DA.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/F55C2745322CEC1805815DCD65BC6AFFD99168DA.cer Subject Information Access: Signed Object - URI:rsync://krill.byhill.de/repo/byhill-ca/1/F55C2745322CEC1805815DCD65BC6AFFD99168DA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d1:67:ce:f6:75:8b:f2:a2:4a:9d:b7:4d:22:72:f0:46:c4:3e: 69:f3:6e:84:6e:f4:3e:fc:ce:5e:e4:7b:1e:3c:c2:f4:d4:15: b0:37:8b:51:aa:9f:14:ed:0d:2a:4c:9e:d8:b3:94:6e:fb:ce: b3:cd:3a:b9:7d:27:b4:95:83:e6:17:ef:9f:67:9a:50:51:30: d6:5e:5d:30:d0:59:42:e4:0a:1f:af:93:c8:0d:5b:b3:d9:0e: 49:0d:f2:39:81:80:30:14:2b:d9:36:0c:49:2d:6e:8c:e3:6b: 40:a9:76:ba:a8:9a:9a:25:77:cb:f9:89:ba:a5:10:a7:da:88: b0:0c:9e:5a:8a:73:c8:e8:cd:a3:45:5c:5a:3e:82:af:d7:03: 0a:cb:42:90:91:fb:ce:6c:bf:61:ee:a2:cb:7d:07:18:06:a3: fa:26:62:10:a2:32:0f:00:3e:71:ec:ed:fc:10:5a:eb:3b:41: 3a:d9:cf:03:0f:7a:48:96:a1:a6:ec:3e:19:86:45:e9:6f:a7: 69:a6:26:d4:d2:f3:5c:7e:a9:7e:ee:aa:55:4a:9a:92:91:00: 51:f7:d2:a0:3a:68:db:67:fe:5c:b3:0b:74:39:12:a4:8e:d3: 4b:87:ad:7c:26:44:dd:00:a6:e9:a3:48:9b:72:22:02:92:4b: a8:21:02:45 -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgIUHJs4kBRPze0OABsX1YVueNais1MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjU1QzI3NDUzMjJDRUMxODA1ODE1RENENjVCQzZBRkZE OTkxNjhEQTAeFw0yNjA5MjMxNDM1MjZaFw0yNjA5MjQxODMxMjZaMDMxMTAvBgNV BAMTKEI4QjI4RDVGODMyODI2MjA1QzQ0Q0VCODE2RjgyNDA1QTVENEI0NDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsrnKlaDUoZZLaK+mFr6+KQ0dA GguJeaWY+CnVYZKkqXUoW29BX4IAWftR5jfsqtNipS14Ppz6+DAiAZj/SSKXy+6l uZgznHpNWUOv+1p79U5w2ly8r41J9e/EuOpsIVfQfKpaH2gzEYVWyZQ6PfgpYtjU oeTKbo+Wo58U3e5w08TgTwHkOnfFE8FpMbNndiyP6Y37N/02o1260FhKmU7V89mS wMcZz3OonVtvWuKFdgQId8eom4MFu82uh1WpUUmMLk+0UcMMiO0bP+urvoN0yMJn 7Rx0+NGS0rDTRH8JQOv89kk2rWBd1XnJ/eZrKgr6VrcsO+I8E40mncez5MEzAgMB AAGjggIkMIICIDAdBgNVHQ4EFgQUuLKNX4MoJiBcRM64FvgkBaXUtEgwHwYDVR0j BBgwFoAU9VwnRTIs7BgFgV3NZbxq/9mRaNowDgYDVR0PAQH/BAQDAgeAMGYGA1Ud HwRfMF0wW6BZoFeGVXJzeW5jOi8va3JpbGwuYnloaWxsLmRlL3JlcG8vYnloaWxs LWNhLzEvRjU1QzI3NDUzMjJDRUMxODA1ODE1RENENjVCQzZBRkZEOTkxNjhEQS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wMDJmOGVlNi1hYmU3LTRh ZTgtOTY0Yy03ODhiYjk4Yzk3NWMvMS9GNTVDMjc0NTMyMkNFQzE4MDU4MTVEQ0Q2 NUJDNkFGRkQ5OTE2OERBLmNlcjBxBggrBgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuG VXJzeW5jOi8va3JpbGwuYnloaWxsLmRlL3JlcG8vYnloaWxsLWNhLzEvRjU1QzI3 NDUzMjJDRUMxODA1ODE1RENENjVCQzZBRkZEOTkxNjhEQS5tZnQwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBANFn zvZ1i/KiSp23TSJy8EbEPmnzboRu9D78zl7kex48wvTUFbA3i1GqnxTtDSpMntiz lG77zrPNOrl9J7SVg+YX759nmlBRMNZeXTDQWULkCh+vk8gNW7PZDkkN8jmBgDAU K9k2DEktbozja0Cpdrqompold8v5ibqlEKfaiLAMnlqKc8jozaNFXFo+gq/XAwrL QpCR+85sv2Huost9BxgGo/omYhCiMg8APnHs7fwQWus7QTrZzwMPekiWoabsPhmG Relvp2mmJtTS81x+qX7uqlVKmpKRAFH30qA6aNtn/lyzC3Q5EqSO00uHrXwmRN0A pumjSJtyIgKSS6ghAkU= -----END CERTIFICATE-----Generated at Wed Sep 23 18:49:25 2026 by rpki-client