Introduction

The base format is an array of JavaScript Object Notation (JSON) objects. Each object represents a single secure element and is signed to allow cryptographic verification of its origins. The format is intentionally "flattened" with common information repeated for each secure element. This is to facilitate parallel processing of manifests and to allow splitting of entries into smaller manifests, where appropriate.

This format makes use of the JavaScript Object Signing and Encryption (JOSE) set of standards to represent keys (JSON Web Key – JWK), certificates (x5c member in a JWK) and provide signing (JSON Web Signature – JWS).

In the object definitions, member values may be the name of another JSON object or just an example value.