Struct TrustAnchorBundle 

pub struct TrustAnchorBundle {
    pub bundle_version: String,
    pub valid_from: DateTime<Utc>,
    pub valid_until: DateTime<Utc>,
    pub roots: Vec<AnchorRoot>,
    pub transparency_logs: Vec<AnchorLog>,
    pub update_log: Option<LogRef>,
    pub bundle_signature: Vec<u8>,
}

A versioned, signed set of trust anchors.

Fields

bundle_version: String

Version identifier (e.g. “2026.08”).

valid_from: DateTime<Utc>

Bundle validity start.

valid_until: DateTime<Utc>

Bundle validity end.

roots: Vec<AnchorRoot>

Root trust authorities.

transparency_logs: Vec<AnchorLog>

Recognized transparency logs and mirrors.

update_log: Option<LogRef>

The transparency-log reference recording this bundle update (§7: bundle updates shall be recorded in a transparency log). Signed as part of the bundle body.

bundle_signature: Vec<u8>

Threshold signature of the issuing root over the canonical bundle body (all fields except this signature).

Implementations

impl TrustAnchorBundle

pub fn signing_bytes(&self) -> SignatifResult<Vec<u8>>

The canonical bytes covered by the bundle signature: JCS of the bundle with bundle_signature cleared.

Errors

Propagates canonicalization errors.

pub fn verify( &self, now: DateTime<Utc>, verifier: &dyn SignatureVerifier, ) -> SignatifResult<()>

Verify the bundle signature against the root whose key it was produced with, and the validity period at now.

Errors

SignatifError::BadSignature when no root key verifies the signature; SignatifError::BundleValidity outside the validity window.

pub fn matches_root(&self, root_key: &[u8]) -> bool

Whether root_key belongs to one of the bundle’s roots — used by path-finding to decide path termination.

pub fn root_by_key(&self, root_key: &[u8]) -> Option<&AnchorRoot>

The root whose aggregate key equals root_key, if any.

pub fn distribution_bytes(&self) -> SignatifResult<Vec<u8>>

Deterministic distribution bytes (JCS of the full bundle).

Errors

Propagates canonicalization errors.

Trait Implementations

impl Clone for TrustAnchorBundle

fn clone(&self) -> TrustAnchorBundle

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for TrustAnchorBundle

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for TrustAnchorBundle

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for TrustAnchorBundle

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.