The final line in a KSR ";; KeySigningRequest generated at ..." was missing the version number, that has now been fixed. Thanks Libor Peltan for reporting.