RPKI Manifest
Location:                 rpki.ripe.net/repository/ripe-ncc-ta.mft (download)

Subject key identifier:   0C:77:4F:A2:AF:6C:EC:15:B9:C7:E7:71:67:2B:B0:17:73:19:FD:E5
Authority key identifier: E8:55:2B:1F:D6:D1:A4:F7:E4:04:C6:D8:E5:68:0D:1E:BC:16:3F:C3
Manifest Number:          43
Files:
    1: 2a7dd1d787d793e4c8af56e197d4eed92af6ba13.cer
	hash ruCt9UTCuWhW+UGbhrASBftguyZw+iHw4+n9cNMBBKU=
    2: ripe-ncc-ta.crl
	hash UdNY0Eccg9YdZqmZdhOfr2VCWlvmg80NiwKViowBkw0=

--
$ test-mft -p rpki.ripe.net/repository/ripe-ncc-ta.mft | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 249 (0xf9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ripe-ncc-ta
        Validity
            Not Before: Sep  6 11:06:16 2022 GMT
            Not After : Dec  6 11:06:16 2022 GMT
        Subject: CN=0c774fa2af6cec15b9c7e771672bb0177319fde5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f4:16:fa:86:80:a2:ee:73:26:34:17:28:f5:
                    01:e2:cf:d6:0a:81:32:fd:2e:f6:0b:42:5c:72:1d:
                    a4:e5:e8:57:14:f4:bf:ea:33:46:db:83:07:df:37:
                    a5:59:fd:6f:01:1b:00:f1:f7:a6:55:4a:9c:b6:5a:
                    89:5e:f9:16:98:4f:eb:8e:0b:d0:ea:17:a8:16:d5:
                    26:ab:ae:b0:ec:48:91:03:8c:7c:81:43:85:a4:b5:
                    55:21:c1:78:95:4d:e8:7c:57:ca:24:ad:d3:15:3e:
                    37:9c:70:f7:60:cf:a7:9d:be:b5:e9:de:79:76:b1:
                    bf:87:4d:66:3e:79:73:b0:f6:de:3f:65:48:2c:c5:
                    1a:e8:a3:bf:b0:0a:64:cc:40:59:a7:9b:22:0a:fa:
                    a9:5f:91:34:5e:24:87:8b:2f:b5:44:1b:97:1a:b9:
                    34:b3:fd:9d:a7:15:03:5b:d8:2b:a8:f3:23:f6:0a:
                    c0:05:d4:25:7a:c8:59:fd:e7:4e:6f:b7:aa:ca:ae:
                    1f:3e:f1:0f:a4:35:da:56:7e:c6:26:00:19:d4:c6:
                    9d:eb:7e:6b:8d:be:47:10:a1:82:12:33:74:14:be:
                    26:ee:c4:ed:9d:62:d0:1f:89:8b:1a:13:ba:ac:70:
                    81:55:d6:39:d9:31:b1:9d:06:cd:de:63:fd:02:ee:
                    1b:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                0C:77:4F:A2:AF:6C:EC:15:B9:C7:E7:71:67:2B:B0:17:73:19:FD:E5
            X509v3 Authority Key Identifier: 
                keyid:E8:55:2B:1F:D6:D1:A4:F7:E4:04:C6:D8:E5:68:0D:1E:BC:16:3F:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:e9:ce:5b:d6:38:36:54:91:65:ba:d9:e9:70:13:1a:0d:0d:
         07:f7:29:05:3d:70:de:5b:15:42:89:d9:e3:12:80:5a:33:16:
         76:e4:f9:1e:7e:ea:50:82:2e:64:a9:a4:cc:a5:22:b0:ba:92:
         ab:47:59:0f:cc:89:16:77:75:b5:14:45:45:8a:2d:83:63:6b:
         22:78:75:c2:4c:ce:8f:74:f4:3b:87:99:61:24:00:ed:cf:ea:
         2d:87:f4:6c:22:d4:6e:2c:84:ff:73:19:e0:af:3d:f8:fc:61:
         32:8b:1b:45:0d:09:fe:f1:5a:fa:1a:03:c0:5a:f3:17:a4:48:
         b5:94:a7:09:44:4e:b0:af:87:2a:fd:28:78:85:92:f9:c9:87:
         86:24:3e:17:d8:bd:bf:c9:15:af:63:15:9d:4f:58:ad:3c:2c:
         cb:60:d9:a5:a7:7e:4a:1c:0a:49:12:3a:ce:e3:09:fc:72:6f:
         7f:bd:0a:a2:80:30:d6:aa:14:a5:a1:57:4d:25:5f:40:2c:75:
         d9:48:df:bd:ff:cf:82:87:bc:63:c1:cd:ef:a9:f3:18:ba:23:
         da:31:d5:53:bd:5e:cd:92:1e:5c:e4:33:fd:6b:3e:ef:27:b4:
         c7:d0:f0:22:1a:13:f3:a7:38:c2:49:95:44:8d:1d:1e:f4:8b:
         97:ac:a5:fd
-----BEGIN CERTIFICATE-----
MIIERjCCAy6gAwIBAgICAPkwDQYJKoZIhvcNAQELBQAwFjEUMBIGA1UEAxMLcmlw
ZS1uY2MtdGEwHhcNMjIwOTA2MTEwNjE2WhcNMjIxMjA2MTEwNjE2WjAzMTEwLwYD
VQQDEygwYzc3NGZhMmFmNmNlYzE1YjljN2U3NzE2NzJiYjAxNzczMTlmZGU1MIIB
IjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/QW+oaAou5zJjQXKPUB4s/W
CoEy/S72C0Jcch2k5ehXFPS/6jNG24MH3zelWf1vARsA8femVUqctlqJXvkWmE/r
jgvQ6heoFtUmq66w7EiRA4x8gUOFpLVVIcF4lU3ofFfKJK3TFT43nHD3YM+nnb61
6d55drG/h01mPnlzsPbeP2VILMUa6KO/sApkzEBZp5siCvqpX5E0XiSHiy+1RBuX
Grk0s/2dpxUDW9grqPMj9grABdQleshZ/edOb7eqyq4fPvEPpDXaVn7GJgAZ1Mad
635rjb5HEKGCEjN0FL4m7sTtnWLQH4mLGhO6rHCBVdY52TGxnQbN3mP9Au4b2wID
AQABo4IBfzCCAXswHQYDVR0OBBYEFAx3T6KvbOwVucfncWcrsBdzGf3lMB8GA1Ud
IwQYMBaAFOhVKx/W0aT35ATG2OVoDR68Fj/DMA4GA1UdDwEB/wQEAwIHgDBEBggr
BgEFBQcBAQQ4MDYwNAYIKwYBBQUHMAKGKHJzeW5jOi8vcnBraS5yaXBlLm5ldC90
YS9yaXBlLW5jYy10YS5jZXIwTAYIKwYBBQUHAQsEQDA+MDwGCCsGAQUFBzALhjBy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9yaXBlLW5jYy10YS5tZnQw
QQYDVR0fBDowODA2oDSgMoYwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvcmlwZS1uY2MtdGEuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQG
MASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCF6c5b1jg2VJFlutnpcBMaDQ0H9ykF
PXDeWxVCidnjEoBaMxZ25PkefupQgi5kqaTMpSKwupKrR1kPzIkWd3W1FEVFii2D
Y2sieHXCTM6PdPQ7h5lhJADtz+oth/RsItRuLIT/cxngrz34/GEyixtFDQn+8Vr6
GgPAWvMXpEi1lKcJRE6wr4cq/Sh4hZL5yYeGJD4X2L2/yRWvYxWdT1itPCzLYNml
p35KHApJEjrO4wn8cm9/vQqigDDWqhSloVdNJV9ALHXZSN+9/8+Ch7xjwc3vqfMY
uiPaMdVTvV7Nkh5c5DP9az7vJ7TH0PAiGhPzpzjCSZVEjR0e9IuXrKX9
-----END CERTIFICATE-----