Manifest

$ rpki-client -vvf krill.byhill.de/repo/byhill-ca/2/185B1D68A461FA242686542750142382ADF2C53B.mft
File:                     185B1D68A461FA242686542750142382ADF2C53B.mft (raw, json)
Hash identifier:          ZUm+5iMQ4aDAiY6M3xvM/cos/gLE6IV61MOGB3O8CMk=
Subject key identifier:   8F:6F:41:8E:06:4A:23:05:78:BF:F7:3B:56:63:0E:99:69:0A:AA:D9
Authority key identifier: 18:5B:1D:68:A4:61:FA:24:26:86:54:27:50:14:23:82:AD:F2:C5:3B
Certificate issuer:       /CN=185b1d68a461fa242686542750142382adf2c53b
Certificate serial:       2E5FACC7E428C7BCE99FF5C8581C2989FA18926F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GFsdaKRh-iQmhlQnUBQjgq3yxTs.cer
Subject info access:      rsync://krill.byhill.de/repo/byhill-ca/2/185B1D68A461FA242686542750142382ADF2C53B.mft
Manifest number:          35
Signing time:             Thu 23 Jul 2026 07:21:16 +0000
Manifest this update:     Thu 23 Jul 2026 07:16:16 +0000
Manifest next update:     Fri 24 Jul 2026 07:23:16 +0000
Files and hashes:         1: 185B1D68A461FA242686542750142382ADF2C53B.crl (hash: 3Pyv5EEN+Nxh4FesrVTOty9HTEssPRQpWNFSeETYpjY=)
                          2: AS219418.asa (hash: iaRvn9nOOjZZtyPFGRsaQCPWyIYIEPJx77RGcLpTrY0=)
Validation:               OK
Signature path:           rsync://krill.byhill.de/repo/byhill-ca/2/185B1D68A461FA242686542750142382ADF2C53B.crl
                          rsync://krill.byhill.de/repo/byhill-ca/2/185B1D68A461FA242686542750142382ADF2C53B.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GFsdaKRh-iQmhlQnUBQjgq3yxTs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 07:23:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:5f:ac:c7:e4:28:c7:bc:e9:9f:f5:c8:58:1c:29:89:fa:18:92:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=185b1d68a461fa242686542750142382adf2c53b
        Validity
            Not Before: Jul 23 07:16:16 2026 GMT
            Not After : Jul 24 07:23:16 2026 GMT
        Subject: CN=8F6F418E064A230578BFF73B56630E99690AAAD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:03:2d:29:9e:b8:ea:44:51:d6:f2:bb:35:0b:
                    3b:3b:cb:d1:37:d8:d5:f5:84:1c:ee:8f:3e:4d:c9:
                    b9:40:24:80:18:dd:38:44:92:b8:b0:95:dd:00:2c:
                    74:64:3a:eb:8f:aa:6a:b5:63:43:eb:42:12:78:11:
                    18:b0:d6:56:c1:00:88:4c:68:08:8d:77:49:79:b6:
                    73:d0:bb:91:78:53:37:9f:0d:a4:88:b0:14:16:32:
                    27:69:0a:8a:a4:1a:56:42:06:12:8a:b7:79:c8:29:
                    d4:00:d4:bf:6c:b3:29:06:0e:05:79:40:13:cb:fe:
                    94:6e:48:9a:7e:0b:d7:01:b8:bb:81:6e:29:8f:7b:
                    0f:c4:71:3c:4e:03:67:42:e5:a5:b2:29:1d:75:fb:
                    52:de:e6:59:de:89:f9:f1:56:c6:d2:ab:76:11:5a:
                    0c:1a:6a:f1:7f:2b:b9:8d:07:2e:bf:78:26:97:40:
                    5f:4f:88:74:9b:18:76:d3:fa:1e:b3:26:e9:21:4b:
                    02:de:2b:ba:59:10:27:49:22:9f:ef:bb:e7:51:d6:
                    47:da:43:e2:7f:da:82:0b:2f:a5:18:dd:ab:a7:e2:
                    d5:ac:48:8e:34:12:30:a3:2f:40:64:be:72:e8:60:
                    94:ec:3e:b2:dd:ad:57:a8:bb:e3:93:dd:90:7a:78:
                    f9:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:6F:41:8E:06:4A:23:05:78:BF:F7:3B:56:63:0E:99:69:0A:AA:D9
            X509v3 Authority Key Identifier:
                keyid:18:5B:1D:68:A4:61:FA:24:26:86:54:27:50:14:23:82:AD:F2:C5:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.byhill.de/repo/byhill-ca/2/185B1D68A461FA242686542750142382ADF2C53B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GFsdaKRh-iQmhlQnUBQjgq3yxTs.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.byhill.de/repo/byhill-ca/2/185B1D68A461FA242686542750142382ADF2C53B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:4e:09:a5:16:3b:e1:67:1a:37:d8:4f:86:ee:a6:b8:42:b9:
         f1:07:8c:10:d8:04:db:97:66:95:ae:17:08:3b:a5:78:2c:a1:
         cc:c6:e3:64:f1:1e:a8:df:e2:27:bc:d3:d8:62:7c:47:91:b1:
         ce:f9:d0:05:84:ff:32:ad:3d:bc:39:5b:f2:38:88:75:8c:b7:
         16:cc:cd:d8:1a:0b:5d:a4:6d:17:b7:7c:29:e4:e6:bc:9f:f6:
         7a:41:24:c1:b0:73:a1:46:3e:60:38:5c:4a:76:e5:c1:17:4a:
         38:55:1a:9c:55:95:d2:65:42:f0:db:cc:1d:b9:a2:88:74:9c:
         b3:29:16:0d:d0:4d:97:17:aa:d9:c0:b6:9f:a5:7b:00:9e:54:
         f8:fc:4c:d4:a8:2b:22:4c:08:ea:e9:10:ed:1b:3f:f5:27:d0:
         61:75:49:26:b3:11:6d:30:d7:c1:c9:73:e1:ac:b5:eb:04:4b:
         6a:39:b5:ce:5e:52:6d:85:96:94:b8:0e:2e:9b:14:c0:8b:85:
         a3:57:9d:38:48:9f:d0:2e:e0:48:e8:14:86:30:d3:29:72:16:
         1c:90:c0:54:0a:cb:85:73:37:1d:8a:9c:7d:8c:f9:67:7a:9a:
         a3:48:10:ad:0a:24:61:d0:a0:df:98:66:a9:62:ba:f0:94:be:
         f5:7b:18:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 18:59:08 2026 by rpki-client