RPKI Manifest
Location: rpki.ripe.net/repository/ripe-ncc-ta.mft (download)

Subject key identifier:   94:B8:2A:6A:3B:6F:21:AE:A4:0E:8D:1C:61:EA:52:94:7D:A1:F6:B9
Authority key identifier: E8:55:2B:1F:D6:D1:A4:F7:E4:04:C6:D8:E5:68:0D:1E:BC:16:3F:C3
Files:
    1: 2a7dd1d787d793e4c8af56e197d4eed92af6ba13.cer
	hash IgnErWpczK0ChM1wz5nbrrHwTIyfK6Hv/66RhaeaiW8=
    2: ripe-ncc-ta.crl
	hash qKF3wWhd794GG5YoxvgvMdWPzhz8t3/L5AXbEdSkiKk=

--
$ test-mft -p rpki.ripe.net/repository/ripe-ncc-ta.mft | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 233 (0xe9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ripe-ncc-ta
        Validity
            Not Before: Feb 12 08:34:33 2021 GMT
            Not After : May 12 08:34:33 2021 GMT
        Subject: CN=94b82a6a3b6f21aea40e8d1c61ea52947da1f6b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:64:1f:18:57:d2:61:9e:fe:50:4f:5b:58:fe:
                    b3:5b:29:d6:48:bf:73:f3:85:b4:64:2e:44:90:11:
                    f3:84:59:c9:cc:d7:1e:94:6e:70:98:55:ec:b3:15:
                    91:3a:1c:1d:f1:a1:68:ff:47:b3:16:f1:83:2a:98:
                    2e:b7:c7:08:73:67:f2:9d:91:14:38:2f:49:b7:1f:
                    28:5b:84:c4:12:b0:4c:06:22:68:09:31:df:33:8a:
                    77:41:3c:c4:fd:2e:67:9a:8e:e6:cb:05:f3:82:52:
                    4e:3a:9c:fd:95:12:3e:fd:c8:d3:09:5e:e7:d7:e5:
                    d8:8d:a3:ea:c0:34:88:c0:17:54:47:63:d0:45:95:
                    a5:8f:47:56:04:2f:2e:21:f1:f1:a5:f7:bf:57:cb:
                    e0:46:89:83:2f:85:81:bd:55:fd:39:0d:95:19:6f:
                    4b:c2:f2:67:bc:90:44:08:ea:78:6c:4e:6d:11:85:
                    cf:4d:7f:51:c0:00:3d:bd:67:1f:cb:e8:c5:8a:4d:
                    aa:77:71:54:58:06:ef:18:56:50:67:c5:f6:f6:aa:
                    c0:2d:03:f7:3b:95:0f:b0:c6:19:e3:51:49:3d:7e:
                    a3:7b:35:aa:14:3d:55:09:cf:e0:00:72:62:a3:76:
                    ee:c8:05:3a:3c:7c:4e:d9:86:fb:74:16:9f:b1:52:
                    b0:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                94:B8:2A:6A:3B:6F:21:AE:A4:0E:8D:1C:61:EA:52:94:7D:A1:F6:B9
            X509v3 Authority Key Identifier: 
                keyid:E8:55:2B:1F:D6:D1:A4:F7:E4:04:C6:D8:E5:68:0D:1E:BC:16:3F:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer

            Subject Information Access: 
                1.3.6.1.5.5.7.48.11 - URI:rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl

            X509v3 Certificate Policies: critical
                Policy: 1.3.6.1.5.5.7.14.2

            sbgp-ipAddrBlock: critical
                0.0.......0.......
            sbgp-autonomousSysNum: critical
                0.....
    Signature Algorithm: sha256WithRSAEncryption
         8e:c0:04:c1:9d:2e:53:e9:84:e1:9e:e1:1b:30:af:52:77:bb:
         2d:0f:37:7f:63:06:de:85:6b:3a:15:e5:a0:2c:f5:93:76:ff:
         b2:cb:17:35:fa:e0:e0:ab:d9:e2:c4:de:b2:97:9c:19:44:a5:
         35:3a:a1:fe:fe:7e:4b:cc:9f:af:f7:9c:31:5e:93:43:be:de:
         9b:58:32:11:13:f9:f2:17:9c:7a:24:89:ed:c3:9d:ae:33:c2:
         2f:c0:53:12:14:f5:f6:ff:ae:83:85:a7:bf:6a:0f:03:fe:a9:
         90:d1:9f:1b:fd:2e:8a:20:e8:3f:cd:d3:f3:04:8b:3d:07:04:
         66:91:0e:b8:3a:88:8c:30:2f:41:3c:90:4e:57:6d:eb:1e:ca:
         8a:1d:22:86:16:a0:a7:60:75:7b:56:c9:7d:44:0a:b6:7b:32:
         ef:51:5f:fc:88:62:54:0c:da:3d:3d:11:05:f9:fa:5f:fd:0d:
         86:d7:d1:a4:fe:5d:5e:8f:52:c7:0e:4d:2c:68:1c:98:14:30:
         fb:64:b4:91:28:11:9b:b3:8e:1f:df:ae:fc:7c:09:20:db:1c:
         c1:76:a6:96:c3:f6:51:b7:5e:6a:f2:3a:3d:02:6c:7d:f2:df:
         96:99:77:f2:35:e7:af:d1:f3:34:41:13:71:0c:64:90:69:de:
         b7:34:55:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Wed Mar 3 04:34:44 2021 by LibreSSL & rpki-client.