RPKI Manifest
Location:                 rpki.ripe.net/repository/ripe-ncc-ta.mft (download)

Subject key identifier:   8C:A7:90:98:D2:75:82:B5:B7:AB:6E:C3:26:F2:C8:70:C9:08:7C:A0
Authority key identifier: E8:55:2B:1F:D6:D1:A4:F7:E4:04:C6:D8:E5:68:0D:1E:BC:16:3F:C3
Manifest Number:          3F
Files:
    1: 2a7dd1d787d793e4c8af56e197d4eed92af6ba13.cer
	hash dfgIXbhPt+S3q0/QccQOB6Jwg89tTeZjNp/xK9j5QE4=
    2: ripe-ncc-ta.crl
	hash ixAocY2aPREHoHwTDzxaGAMP/F/E/pGi/MVSsG0kyXg=

--
$ test-mft -p rpki.ripe.net/repository/ripe-ncc-ta.mft | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 241 (0xf1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ripe-ncc-ta
        Validity
            Not Before: Dec  1 13:59:48 2021 GMT
            Not After : Mar  1 13:59:48 2022 GMT
        Subject: CN=8ca79098d27582b5b7ab6ec326f2c870c9087ca0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:eb:0f:b8:01:1d:e3:6b:fa:f7:ad:08:73:5e:
                    3e:69:2c:81:7f:15:d9:63:f0:73:ac:ea:b6:3a:69:
                    ab:c2:33:74:e1:b6:e0:fb:5c:44:d1:93:6a:23:c1:
                    05:35:d2:b8:c1:bc:7f:31:03:a1:3c:ad:a4:75:74:
                    34:fc:0c:1f:82:a5:82:2b:69:50:5f:13:ae:0d:03:
                    ca:f9:3f:86:bf:a5:18:04:48:26:00:93:f5:20:ac:
                    91:f7:09:bf:e8:75:78:34:b7:95:39:0b:87:2b:42:
                    b6:c7:7b:05:9d:ac:0e:a2:31:a7:3e:6b:9e:bd:07:
                    63:be:f4:23:c9:4c:43:bb:4a:13:d9:67:34:65:64:
                    3f:50:e0:df:19:b3:67:82:92:77:b3:9c:4e:ef:12:
                    71:42:e3:94:c1:c5:05:8f:cb:93:a0:2d:8a:14:bd:
                    0d:de:60:0e:65:95:8a:88:b8:1a:bd:da:f1:0a:b7:
                    3c:26:15:9b:c8:9b:e1:33:2d:88:65:1e:de:f2:43:
                    70:91:4b:8e:59:83:09:a1:d6:61:19:cf:f7:31:34:
                    1c:5a:b0:ac:34:3c:57:68:e5:fd:a7:bb:59:c0:41:
                    63:55:54:03:a5:47:c0:e2:7d:00:8d:07:a4:52:4a:
                    95:8f:8d:37:d4:dc:aa:34:d7:79:bd:1d:eb:cf:06:
                    e1:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                8C:A7:90:98:D2:75:82:B5:B7:AB:6E:C3:26:F2:C8:70:C9:08:7C:A0
            X509v3 Authority Key Identifier: 
                keyid:E8:55:2B:1F:D6:D1:A4:F7:E4:04:C6:D8:E5:68:0D:1E:BC:16:3F:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:81:31:5d:9b:1f:c0:2b:f0:d6:5e:fe:31:54:99:0d:5f:d0:
         f7:09:d9:82:05:b0:46:89:e7:d9:ab:25:5b:33:ca:6a:ee:75:
         4e:f2:08:46:41:2b:de:53:ed:65:82:e6:cc:31:74:26:7c:16:
         ec:af:ac:05:ec:ce:66:2b:ba:05:2a:1a:14:9a:f0:de:26:e5:
         a9:51:b1:6a:a3:66:db:eb:d4:d1:92:43:a4:06:13:a1:b0:c6:
         51:3d:f3:79:f5:5b:4c:c5:1c:44:77:40:82:d9:73:05:b8:b1:
         ff:f9:6b:e6:5b:01:22:b8:a5:5e:12:1f:8f:7d:4e:c6:80:89:
         bf:8d:e2:7a:25:3e:c7:8a:95:d8:40:6f:bc:6d:08:cd:00:80:
         eb:22:95:23:7d:75:40:5a:d5:5f:b9:c7:d6:ae:79:9c:66:ee:
         78:6c:e9:4e:ef:46:fe:ad:e3:64:86:78:fe:de:24:ce:e0:89:
         23:88:22:92:4d:de:ae:80:b2:27:a1:f8:33:7f:ff:cd:69:04:
         e0:b8:90:77:7b:9c:44:fc:e2:1a:1b:49:e7:05:41:9a:b5:f7:
         d7:20:81:05:71:94:b3:7a:97:7f:ac:d3:13:9d:3a:dd:78:5f:
         83:dd:0f:f6:0d:53:c7:78:82:71:05:20:e6:76:1d:37:90:96:
         fd:d8:cc:aa
-----BEGIN CERTIFICATE-----
MIIERjCCAy6gAwIBAgICAPEwDQYJKoZIhvcNAQELBQAwFjEUMBIGA1UEAxMLcmlw
ZS1uY2MtdGEwHhcNMjExMjAxMTM1OTQ4WhcNMjIwMzAxMTM1OTQ4WjAzMTEwLwYD
VQQDEyg4Y2E3OTA5OGQyNzU4MmI1YjdhYjZlYzMyNmYyYzg3MGM5MDg3Y2EwMIIB
IjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsusPuAEd42v6960Ic14+aSyB
fxXZY/BzrOq2OmmrwjN04bbg+1xE0ZNqI8EFNdK4wbx/MQOhPK2kdXQ0/AwfgqWC
K2lQXxOuDQPK+T+Gv6UYBEgmAJP1IKyR9wm/6HV4NLeVOQuHK0K2x3sFnawOojGn
PmuevQdjvvQjyUxDu0oT2Wc0ZWQ/UODfGbNngpJ3s5xO7xJxQuOUwcUFj8uToC2K
FL0N3mAOZZWKiLgavdrxCrc8JhWbyJvhMy2IZR7e8kNwkUuOWYMJodZhGc/3MTQc
WrCsNDxXaOX9p7tZwEFjVVQDpUfA4n0AjQekUkqVj4031NyqNNd5vR3rzwbh/QID
AQABo4IBfzCCAXswHQYDVR0OBBYEFIynkJjSdYK1t6tuwybyyHDJCHygMB8GA1Ud
IwQYMBaAFOhVKx/W0aT35ATG2OVoDR68Fj/DMA4GA1UdDwEB/wQEAwIHgDBEBggr
BgEFBQcBAQQ4MDYwNAYIKwYBBQUHMAKGKHJzeW5jOi8vcnBraS5yaXBlLm5ldC90
YS9yaXBlLW5jYy10YS5jZXIwTAYIKwYBBQUHAQsEQDA+MDwGCCsGAQUFBzALhjBy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9yaXBlLW5jYy10YS5tZnQw
QQYDVR0fBDowODA2oDSgMoYwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvcmlwZS1uY2MtdGEuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQG
MASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBjgTFdmx/AK/DWXv4xVJkNX9D3CdmC
BbBGiefZqyVbM8pq7nVO8ghGQSveU+1lgubMMXQmfBbsr6wF7M5mK7oFKhoUmvDe
JuWpUbFqo2bb69TRkkOkBhOhsMZRPfN59VtMxRxEd0CC2XMFuLH/+WvmWwEiuKVe
Eh+PfU7GgIm/jeJ6JT7HipXYQG+8bQjNAIDrIpUjfXVAWtVfucfWrnmcZu54bOlO
70b+reNkhnj+3iTO4IkjiCKSTd6ugLInofgzf//NaQTguJB3e5xE/OIaG0nnBUGa
tffXIIEFcZSzepd/rNMTnTrdeF+D3Q/2DVPHeIJxBSDmdh03kJb92Myq
-----END CERTIFICATE-----

Generated at Wed Dec 1 15:37:29 2021 by LibreSSL & rpki-client.