3. Noms de fichier de manifeste

3. Noms de fichier de manifeste

A CA specifies its manifest URI using a Subject Information Access (SIA) entry with accessMethod id-ad-rpkiManifest. For this document, the manifest filename is the final path segment of the accessLocation URI from that SIA entry.

If a CA certificate contains multiple id-ad-rpkiManifest SIA entries, an RP may compare against the filename from any one of the entries in the previously validated CA certificate. If that filename does not appear in any id-ad-rpkiManifest SIA entry in the CA certificate being validated, the manifest filename has changed.

A CA that wants to rely on this update and that uses multiple id-ad-rpkiManifest SIA entries MUST ensure that none of the previous manifest filenames appear in the newly issued CA certificate.