20261015_4 修复Manifest编号与改名抗重放校验

tests/support/generate_repository.py

@@ -191,8 +191,10 @@ def sign_cert(
     as_ext: bytes | None = None,
     ca_repository: str | None = None,
     manifest_uri: str | None = None,
+    manifest_uris: list[str] | None = None,
     notify_uri: str | None = None,
     signed_object_uri: str | None = None,
+    signed_object_uris: list[str] | None = None,
     crl_uri: str | None = None,
     ca_issuer_uri: str | None = None,
     not_before: datetime = VALID_FROM,
@@ -240,10 +242,14 @@ def sign_cert(
         sia_entries.append((SIA_CA_REPOSITORY, ca_repository))
     if manifest_uri is not None:
         sia_entries.append((SIA_RPKI_MANIFEST, manifest_uri))
+    for uri in manifest_uris or []:
+        sia_entries.append((SIA_RPKI_MANIFEST, uri))
     if notify_uri is not None:
         sia_entries.append((SIA_RPKI_NOTIFY, notify_uri))
     if signed_object_uri is not None:
         sia_entries.append((SIA_SIGNED_OBJECT, signed_object_uri))
+    for uri in signed_object_uris or []:
+        sia_entries.append((SIA_SIGNED_OBJECT, uri))
     if sia_entries:
         builder = builder.add_extension(x509.UnrecognizedExtension(OID_SIA, sia(sia_entries)), critical=False)
     if ip_ext is not None: