RPKI Manifest
Location:                 rpki.ripe.net/repository/ripe-ncc-ta.mft (download)

Subject key identifier:   16:22:DB:77:FA:DB:8E:1E:94:7E:FA:36:14:59:34:D3:77:A7:1E:B9
Authority key identifier: E8:55:2B:1F:D6:D1:A4:F7:E4:04:C6:D8:E5:68:0D:1E:BC:16:3F:C3
Manifest Number:          3D
Files:
    1: 2a7dd1d787d793e4c8af56e197d4eed92af6ba13.cer
	hash YAqLF5aS1hFANw/BNzvnks3tbHjYwOsNQ2aWIQlVqh0=
    2: ripe-ncc-ta.crl
	hash 8UsD82SsBlHZfmlrx6mrK9CfE2Zul+DmLiW0JhogdnQ=

--
$ test-mft -p rpki.ripe.net/repository/ripe-ncc-ta.mft | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 237 (0xed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ripe-ncc-ta
        Validity
            Not Before: Jul 13 11:43:27 2021 GMT
            Not After : Oct 13 11:43:27 2021 GMT
        Subject: CN=1622db77fadb8e1e947efa36145934d377a71eb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:2c:c8:23:fe:fd:07:63:c0:32:7d:82:dc:9d:
                    14:cb:3a:3d:d1:b8:0d:d7:0a:36:8e:d6:0e:a4:00:
                    81:24:c8:9a:65:35:5a:7a:22:66:3e:c9:ac:78:6a:
                    6b:ae:71:60:c9:cc:57:21:f3:19:79:8b:56:24:fe:
                    e9:17:5e:ee:20:ec:76:a3:33:64:a2:f6:5f:a1:db:
                    36:4d:3e:9b:4a:10:4d:4d:1e:9a:c5:f8:f6:c7:af:
                    7b:bd:d2:c0:99:af:bf:dd:c4:a3:a2:c3:cc:46:82:
                    fb:31:61:d5:59:a5:a9:ff:27:1f:9a:3a:fb:b5:9c:
                    44:78:d6:b4:0e:eb:00:0d:a9:97:ed:41:2b:0d:6e:
                    f0:cd:23:f0:ca:c5:0f:9b:48:e8:bd:c3:bf:15:07:
                    a1:9b:10:b7:7c:ad:c7:92:48:01:8e:31:b7:5a:a6:
                    70:84:a6:6f:12:14:e9:69:91:0d:72:09:52:b6:bd:
                    63:76:86:eb:ce:d2:35:7e:d4:c2:1f:e0:b6:1a:d3:
                    a9:81:99:4e:56:9b:6c:44:e4:4c:07:97:f7:24:47:
                    bc:d9:19:bb:77:71:9a:7f:1a:d8:e3:2e:86:47:27:
                    8a:6d:84:39:a7:a3:65:ff:55:df:14:7f:94:74:8b:
                    24:95:a8:48:0a:5f:a3:fe:2d:fc:47:30:5c:82:e2:
                    66:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                16:22:DB:77:FA:DB:8E:1E:94:7E:FA:36:14:59:34:D3:77:A7:1E:B9
            X509v3 Authority Key Identifier: 
                keyid:E8:55:2B:1F:D6:D1:A4:F7:E4:04:C6:D8:E5:68:0D:1E:BC:16:3F:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0.0.......0.......
            sbgp-autonomousSysNum: critical
                0.....
    Signature Algorithm: sha256WithRSAEncryption
         3a:76:22:08:03:ca:54:20:25:f3:77:67:63:41:97:60:0a:47:
         b4:d7:bb:de:d7:27:45:ca:54:f1:81:cc:69:b8:ad:78:ba:08:
         f3:f8:e0:99:97:d8:75:27:88:ff:28:f0:d5:7a:1c:8c:13:66:
         43:32:dd:60:a9:58:8e:73:e0:f4:f4:07:47:a4:58:9e:3b:10:
         95:9d:57:01:50:60:87:8b:dc:f7:a2:21:bb:e7:aa:e4:99:84:
         60:1f:ed:0a:4f:39:99:e3:28:49:a7:c1:3a:c8:52:d9:dc:03:
         b5:5d:15:9e:02:78:e5:b3:f8:30:29:0b:ec:01:9f:90:6d:a2:
         4a:c7:2f:05:1e:cb:c1:3f:f6:fb:6e:c5:66:11:bc:61:a6:6b:
         32:7c:cf:05:11:ef:f6:8d:21:b5:f2:1c:a1:c9:d7:aa:be:57:
         9f:37:c4:c0:a4:c8:6e:ce:f5:c0:93:d1:a8:89:b4:e3:ce:63:
         b6:45:df:82:00:65:c8:43:c8:cd:fe:30:34:d6:76:f1:9a:af:
         83:ed:c5:fd:13:d9:5c:da:ad:a2:10:5d:35:35:7a:4e:ee:be:
         d2:c5:52:e0:53:79:07:9c:62:70:ba:fe:e9:b0:03:ef:cd:4e:
         a9:08:28:6f:c2:41:fc:82:61:3d:1a:6f:43:74:6a:cd:3a:20:
         77:d2:50:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Tue Aug 3 22:19:03 2021 by LibreSSL & rpki-client.