RPKI Manifest
Location:                 rpki.ripe.net/repository/ripe-ncc-ta.mft (download)

Subject key identifier:   E4:50:37:5E:B7:9B:F3:3B:8A:72:F2:9D:6C:88:58:6E:EE:9A:58:38
Authority key identifier: E8:55:2B:1F:D6:D1:A4:F7:E4:04:C6:D8:E5:68:0D:1E:BC:16:3F:C3
Manifest Number:          3C
Files:
    1: 2a7dd1d787d793e4c8af56e197d4eed92af6ba13.cer
	hash amfH/KZgqYZMqtnjuEuqU3ponjf2vt+TNpvCt7joM9w=
    2: ripe-ncc-ta.crl
	hash GjYXyztCEZVdhQ+GxxC4naykO3njc8GddEbgzzmxPs0=

--
$ test-mft -p rpki.ripe.net/repository/ripe-ncc-ta.mft | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 235 (0xeb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ripe-ncc-ta
        Validity
            Not Before: May  4 10:29:04 2021 GMT
            Not After : Aug  4 10:29:04 2021 GMT
        Subject: CN=e450375eb79bf33b8a72f29d6c88586eee9a5838
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:37:fd:57:2b:19:2d:e1:f8:93:7a:cc:66:81:
                    df:1e:5d:44:e7:2b:e8:62:66:63:78:a5:39:fe:21:
                    3c:b1:00:e0:97:72:64:ba:5b:e8:2c:3a:0f:b6:cf:
                    f9:e6:8d:b5:a4:52:6a:b1:41:ab:0b:1a:20:fb:b7:
                    dd:bd:bf:27:6f:e8:61:4c:03:68:06:f4:57:b3:c0:
                    fa:b9:61:63:bf:e3:f7:d4:e6:d1:8f:bf:f9:86:2d:
                    01:69:af:1f:ed:3c:a5:a1:2b:df:db:1d:3c:3c:d8:
                    b1:0a:ae:07:a1:9a:52:b1:e1:7a:37:14:61:2d:28:
                    1e:b5:dd:d6:04:d6:67:48:8b:63:2d:15:05:cd:6d:
                    e2:29:48:23:73:d2:de:3f:c3:84:b9:ed:6c:07:44:
                    ce:d3:fe:03:8e:80:74:b9:0f:1a:6b:d0:a2:4b:ff:
                    40:82:40:3f:0f:03:06:9d:e6:12:ea:97:00:ef:19:
                    fe:54:2b:aa:d8:05:07:98:3e:03:f3:bb:ea:35:13:
                    83:f2:96:85:05:ea:8e:88:59:17:e4:75:a6:ff:e3:
                    0f:41:8c:aa:bd:1b:a2:4f:32:85:bd:aa:e7:e9:3e:
                    8d:e7:0d:82:a2:a0:de:bd:23:b6:4b:11:d3:c4:34:
                    d1:c9:0c:1e:48:ad:6f:f6:5d:5b:21:4a:6e:2b:d9:
                    70:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                E4:50:37:5E:B7:9B:F3:3B:8A:72:F2:9D:6C:88:58:6E:EE:9A:58:38
            X509v3 Authority Key Identifier: 
                keyid:E8:55:2B:1F:D6:D1:A4:F7:E4:04:C6:D8:E5:68:0D:1E:BC:16:3F:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0.0.......0.......
            sbgp-autonomousSysNum: critical
                0.....
    Signature Algorithm: sha256WithRSAEncryption
         4d:c1:48:12:ec:a7:d7:4a:ef:b3:32:35:f3:e6:a7:58:a2:fd:
         20:42:31:4e:1c:17:d7:e2:4b:d5:cb:34:16:d9:ed:dd:2d:2c:
         ca:ca:b9:71:c4:3a:53:38:5d:34:43:a5:72:9f:b0:9c:c4:c8:
         84:18:ac:41:c8:41:fb:23:44:0d:dd:23:5b:7e:eb:8c:5b:a3:
         a8:c5:a2:11:89:d1:a3:df:18:74:f4:e5:34:9d:42:07:21:7d:
         33:13:e4:fd:f6:e1:ba:b3:4b:2e:46:4c:80:70:de:60:f9:67:
         93:c0:e8:13:12:a7:8e:cd:3d:c3:b1:2e:0a:e9:1a:38:37:af:
         93:9e:69:63:34:da:8d:fb:48:90:39:44:07:ac:20:a3:95:16:
         9f:b7:2a:d8:3b:71:3b:f1:1f:c7:2e:71:e0:63:4b:91:3d:28:
         49:fa:25:08:a6:f1:1c:0f:ea:56:b9:1c:80:c5:69:4b:4a:f6:
         19:d0:ff:e3:3e:61:97:6f:78:75:3d:f0:94:05:02:d2:ee:7f:
         a3:60:24:48:3a:45:f4:98:ad:b9:19:fd:18:e7:98:58:5a:3c:
         23:74:8d:d0:46:eb:a3:7d:78:02:39:6a:34:f1:6e:df:92:3c:
         c5:b5:68:f0:8b:93:ab:40:ff:94:8f:17:a7:27:26:19:d0:6c:
         c6:43:4d:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Tue May 18 07:47:37 2021 by LibreSSL & rpki-client.