RPKI Manifest
Location:                 rpki.ripe.net/repository/ripe-ncc-ta.mft (download)

Subject key identifier:   0B:CC:11:27:55:DE:9C:A0:68:89:E6:B0:E2:04:F5:06:7F:ED:EA:13
Authority key identifier: E8:55:2B:1F:D6:D1:A4:F7:E4:04:C6:D8:E5:68:0D:1E:BC:16:3F:C3
Manifest Number:          41
Files:
    1: 2a7dd1d787d793e4c8af56e197d4eed92af6ba13.cer
	hash 5EmGdEwWxoEdPiNvAkGBlpIgmIp+6742JvszPU0qIbo=
    2: ripe-ncc-ta.crl
	hash Da+WhMD8xTihV9fz9UBoePz/dggJE4t4WB8SdnH0oSk=

--
$ test-mft -p rpki.ripe.net/repository/ripe-ncc-ta.mft | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 245 (0xf5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ripe-ncc-ta
        Validity
            Not Before: Apr 12 12:36:33 2022 GMT
            Not After : Jul 12 12:36:33 2022 GMT
        Subject: CN=0bcc112755de9ca06889e6b0e204f5067fedea13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:80:a6:64:55:f3:3b:84:96:2f:78:a8:33:ac:
                    82:b4:a8:fd:5c:24:1b:36:5e:de:d3:b0:7f:61:80:
                    cb:c2:2d:18:13:15:c8:05:2c:76:ad:42:60:cf:94:
                    74:2d:f5:98:08:1d:d9:7a:7b:aa:f1:26:8e:19:47:
                    80:c2:2b:7c:49:54:d8:4d:50:99:33:cb:9b:38:45:
                    1f:e1:b7:f0:78:66:e1:f1:5e:93:bb:5e:70:a6:24:
                    e4:1b:e5:d2:40:37:c4:58:ea:f3:bb:fb:1f:9a:98:
                    33:0d:82:2e:c8:d1:50:97:62:03:6a:2d:70:f4:c4:
                    35:80:c6:86:61:67:80:d8:8b:46:af:89:5a:90:f9:
                    f0:42:d0:ab:b4:20:99:a0:3b:de:9f:86:57:e8:b9:
                    08:7d:4e:fc:f8:a3:96:a7:f4:0d:95:99:82:f0:8b:
                    21:5b:26:66:d6:4c:99:9d:3a:c0:b5:f7:16:c2:00:
                    6f:88:3d:a7:52:1e:cc:af:cf:99:19:ea:64:f5:cd:
                    f4:53:33:7c:9a:ed:f0:92:39:98:ef:68:c3:e2:57:
                    67:c9:cd:f8:89:49:6d:84:ee:91:6b:36:4e:24:63:
                    05:26:62:44:78:bb:d3:3a:09:99:09:ba:bb:f7:5d:
                    9f:b3:15:5c:67:80:3a:dd:fb:94:b4:0a:77:79:94:
                    71:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                0B:CC:11:27:55:DE:9C:A0:68:89:E6:B0:E2:04:F5:06:7F:ED:EA:13
            X509v3 Authority Key Identifier: 
                keyid:E8:55:2B:1F:D6:D1:A4:F7:E4:04:C6:D8:E5:68:0D:1E:BC:16:3F:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:ee:6f:ec:08:66:23:0f:70:9a:14:58:70:e3:0e:8b:41:7b:
         e8:af:82:4e:4e:14:78:90:b1:ba:81:b7:10:85:98:f0:43:c6:
         9e:e1:79:b1:ba:72:d5:08:73:de:ff:ab:e4:b7:b4:21:24:dd:
         89:72:9f:f8:1b:7b:70:32:e2:46:7f:14:e4:b6:b7:38:77:de:
         98:1e:a9:79:93:af:d7:6f:75:81:9a:31:0b:b3:a2:5b:c0:6a:
         c4:29:6e:76:1f:e7:76:f5:e8:5d:28:74:32:c7:3a:66:4c:51:
         ba:96:c8:0a:09:bb:b4:18:87:9b:6a:af:85:2a:60:b3:71:3a:
         df:bc:d3:19:53:23:21:0d:8c:24:e0:5d:4e:4a:3b:89:b9:55:
         ff:40:4d:d7:79:c4:37:06:82:28:b7:0c:c4:34:ad:1f:78:f7:
         93:e2:92:07:bf:88:29:36:a8:dd:71:7a:d9:43:9b:fa:a7:4a:
         f0:1c:9b:2f:09:02:a0:61:49:f4:6f:c5:b4:e3:ed:8c:f5:19:
         65:86:a1:6a:8b:b2:2d:cc:5b:fa:f9:cf:9b:c8:4e:88:1b:10:
         ae:86:60:fe:ae:50:01:12:fc:6a:62:56:1a:57:69:91:ce:7a:
         31:8d:a7:26:6a:cf:ef:6f:c0:7a:65:fa:f1:a4:e2:04:f5:b2:
         57:41:0d:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----