4. Manifest-SIA-Pruefung

To avoid certain replay attacks, RPs MUST verify that the URI in the accessLocation of one id-ad-signedObject accessMethod instance in the manifest's SIA extension exactly matches the URI presented in the RRDP [RFC8182] "publish" element or the path presented by remote rsync servers. If this check fails, the fetch has failed, and the RP MUST proceed as specified in Section 6.6 of [RFC9286].