Fix bug in manifest thisUpdate/nextUpdate calculation

RIPE-NCC · Dec 14, 2023 · 0c52a2b · 0c52a2b
1 parent fa7af2f
commit 0c52a2b
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 2 deletions.
diff --git a/README.md b/README.md
@@ -16,6 +16,7 @@ Changelog
 ---------
 
 ### main:
+  * **hotfix** fix bug in manifest this/nextUpdate calculation
   * Use the same timestamp for signing all the objects (TA certificate, MFT, CRL)
   * Publish docker image to GHCR insetead of dockerhub
   * Updated github actions

diff --git a/src/main/java/net/ripe/rpki/ta/TA.java b/src/main/java/net/ripe/rpki/ta/TA.java
@@ -548,8 +548,8 @@ private ManifestCmsBuilder createBasicManifestBuilder(X509ResourceCertificate ee
         ValidityPeriod validityPeriod = validityPeriods.manifest();
         return new ManifestCmsBuilder().
                 withCertificate(eeCertificate)
-                .withNextUpdateTime(validityPeriod.getNotValidBefore())
-                .withThisUpdateTime(validityPeriod.getNotValidAfter())
+                .withThisUpdateTime(validityPeriod.getNotValidBefore())
+                .withNextUpdateTime(validityPeriod.getNotValidAfter())
                 .withManifestNumber(nextManifestNumber(signCtx.taState))
                 .withSignatureProvider(getSignatureProvider());
     }