{
  "schema": 1,
  "generated_at": "2026-11-05T20:27:37Z",
  "source_commit": "67a22e1415e1ae7799de0f25ea8a0de243f39626",
  "ledgers": [
    {
      "name": "KRUMKACH-SSH",
      "type": "ssh-ca",
      "path": "ledgers/KRUMKACH-SSH/",
      "trusted_ca": "ssh/KRUMKACH-SSH/trusted-user-ca-keys.pub",
      "krl": "ssh/KRUMKACH-SSH/revoked.krl",
      "entries": [
        {
          "id": "ca",
          "kind": "ssh-ca",
          "level": 0,
          "parent": null,
          "status": "signed",
          "subject": null,
          "purpose": null,
          "fingerprint": "SHA256:GYN2Q4QEIQ82KpL6JuPe4+ppZha8BAkZEjAiP4AQowE",
          "serial": null,
          "not_before": null,
          "not_after": null,
          "files": {
            "cert_pem": null,
            "cert_der": null,
            "public_key": "ledgers/KRUMKACH-SSH/ca/public.pub",
            "ssh_cert": null,
            "metadata": null,
            "metadata_sig": null
          }
        },
        {
          "id": "rferee",
          "kind": "ssh-cert",
          "level": null,
          "parent": "ca",
          "status": "signed",
          "subject": "rferee",
          "purpose": null,
          "fingerprint": "SHA256:jzL5q0jgb45PKy20JZdMxERtiuehEdLIsEQvQYezg7U",
          "serial": "1",
          "not_before": "2026-11-05T19:00:01Z",
          "not_after": "2027-11-05T19:05:01Z",
          "files": {
            "cert_pem": null,
            "cert_der": null,
            "public_key": "ledgers/KRUMKACH-SSH/rferee/public.pub",
            "ssh_cert": "ledgers/KRUMKACH-SSH/rferee/cert-1.pub",
            "metadata": "ledgers/KRUMKACH-SSH/rferee/metadata.json",
            "metadata_sig": "ledgers/KRUMKACH-SSH/rferee/metadata.json.sig"
          }
        },
        {
          "id": "rferee-2",
          "kind": "ssh-cert",
          "level": null,
          "parent": "ca",
          "status": "revoked",
          "subject": "rferee",
          "purpose": null,
          "fingerprint": "SHA256:9SuZ742NI/GiPhaYhMHWrcBSZWotsCF0l5bpqA3ZBcQ",
          "serial": "2",
          "not_before": "2026-11-05T19:27:15Z",
          "not_after": "2026-11-06T19:32:15Z",
          "files": {
            "cert_pem": null,
            "cert_der": null,
            "public_key": "ledgers/KRUMKACH-SSH/rferee-2/public.pub",
            "ssh_cert": "ledgers/KRUMKACH-SSH/rferee-2/cert-2.pub",
            "metadata": "ledgers/KRUMKACH-SSH/rferee-2/metadata.json",
            "metadata_sig": "ledgers/KRUMKACH-SSH/rferee-2/metadata.json.sig"
          }
        },
        {
          "id": "vapronva",
          "kind": "ssh-cert",
          "level": null,
          "parent": "ca",
          "status": "revoked",
          "subject": "vapronva",
          "purpose": null,
          "fingerprint": "SHA256:pss+BZ+W40Rp3aVuHDv65LGb3w76m26Zo76r2xvXqJw",
          "serial": "3",
          "not_before": "2026-11-05T19:53:50Z",
          "not_after": "2026-11-06T19:58:50Z",
          "files": {
            "cert_pem": null,
            "cert_der": null,
            "public_key": "ledgers/KRUMKACH-SSH/vapronva/public.pub",
            "ssh_cert": "ledgers/KRUMKACH-SSH/vapronva/cert-3.pub",
            "metadata": "ledgers/KRUMKACH-SSH/vapronva/metadata.json",
            "metadata_sig": "ledgers/KRUMKACH-SSH/vapronva/metadata.json.sig"
          }
        }
      ]
    },
    {
      "name": "KRUMKACH-X509",
      "type": "x509",
      "path": "ledgers/KRUMKACH-X509/",
      "trusted_ca": null,
      "krl": null,
      "entries": [
        {
          "id": "root",
          "kind": "root",
          "level": 0,
          "parent": null,
          "status": "signed",
          "subject": "/O=RFD Internal Services/CN=RFD Krumkach Certificate Authority (Root)",
          "purpose": null,
          "fingerprint": "sha256:523f9f5f14ca74263b31b2cb374580c8b951438ea49a724ac7ba724723380732",
          "serial": "6ab3040ddfdfd1632de1b52809d1b934ebebbff9",
          "not_before": "2026-11-05T18:18:48Z",
          "not_after": "2046-10-31T18:18:48Z",
          "files": {
            "cert_pem": "ca/KRUMKACH-X509/root.pem",
            "cert_der": "ca/KRUMKACH-X509/root.crt",
            "public_key": "ledgers/KRUMKACH-X509/root/public.pem",
            "ssh_cert": null,
            "metadata": null,
            "metadata_sig": null
          }
        },
        {
          "id": "rfd-krumkach-certificate-authority-intermediate",
          "kind": "intermediate",
          "level": 1,
          "parent": "root",
          "status": "signed",
          "subject": "/O=RFD Internal Services/CN=RFD Krumkach Certificate Authority (Intermediate-1)",
          "purpose": null,
          "fingerprint": "sha256:7ec0823ba0f5590c55524447da2733ee3063df9974a6bdac9ddd9a0c102d2bb1",
          "serial": "4c0989a4f688c7ee756df08bace6e0d6ae7b03f1",
          "not_before": "2026-11-05T18:29:17Z",
          "not_after": "2036-11-02T18:29:17Z",
          "files": {
            "cert_pem": "ledgers/KRUMKACH-X509/rfd-krumkach-certificate-authority-intermediate/cert.pem",
            "cert_der": null,
            "public_key": "ledgers/KRUMKACH-X509/rfd-krumkach-certificate-authority-intermediate/public.pem",
            "ssh_cert": null,
            "metadata": "ledgers/KRUMKACH-X509/rfd-krumkach-certificate-authority-intermediate/metadata.json",
            "metadata_sig": "ledgers/KRUMKACH-X509/rfd-krumkach-certificate-authority-intermediate/metadata.json.sig"
          }
        },
        {
          "id": "rfd-krumkach-signing-certificate-rferee",
          "kind": "intermediate",
          "level": 2,
          "parent": "rfd-krumkach-certificate-authority-intermediate",
          "status": "signed",
          "subject": "/O=RFD Internal Services/CN=RFD Krumkach Signing Certificate (@rferee)",
          "purpose": null,
          "fingerprint": "sha256:0305051f2a479ccc61e65eca69a74e0c45b9b8ea22c879611478d30789182c25",
          "serial": "66791ad91d37df5e6c12d0528f8644a1a0d2aba6",
          "not_before": "2026-11-05T18:44:40Z",
          "not_after": "2031-11-04T18:44:40Z",
          "files": {
            "cert_pem": "ledgers/KRUMKACH-X509/rfd-krumkach-signing-certificate-rferee/cert.pem",
            "cert_der": null,
            "public_key": "ledgers/KRUMKACH-X509/rfd-krumkach-signing-certificate-rferee/public.pem",
            "ssh_cert": null,
            "metadata": "ledgers/KRUMKACH-X509/rfd-krumkach-signing-certificate-rferee/metadata.json",
            "metadata_sig": "ledgers/KRUMKACH-X509/rfd-krumkach-signing-certificate-rferee/metadata.json.sig"
          }
        }
      ]
    }
  ],
  "keys": [
    {
      "name": "RFD-KRUMKACH-ROOT-1-SSH",
      "fingerprint": "SHA256:+8obl2QTfeEPAGay9+bTd+o8E3WfIC7nkOgAb4YD7i0",
      "public_key": "keys/RFD-KRUMKACH-ROOT-1-SSH.pub",
      "status": "signed"
    },
    {
      "name": "RFD-KRUMKACH-ROOT-2-SSH",
      "fingerprint": "SHA256:rOlyGYNiTZ7O4uZdNiPyNWiRxx42+X5f3d4OLcVESW4",
      "public_key": "keys/RFD-KRUMKACH-ROOT-2-SSH.pub",
      "status": "signed"
    }
  ],
  "downloads": [
    {
      "label": "KRUMKACH-X509 root certificate (PEM)",
      "path": "ca/KRUMKACH-X509/root.pem",
      "kind": "x509-root",
      "ledger": "KRUMKACH-X509",
      "sha256": "b808953560c8683600354a73c3067f3f1ad00f8a6673e3a2325549f000999a2e"
    },
    {
      "label": "KRUMKACH-X509 root certificate (DER, for browsers)",
      "path": "ca/KRUMKACH-X509/root.crt",
      "kind": "x509-root",
      "ledger": "KRUMKACH-X509",
      "sha256": "5e5922b7e0804cc269924f9000f1d8f3f317ea1c82347a81af33164d34dcff00"
    },
    {
      "label": "KRUMKACH-X509 chain of rfd-krumkach-certificate-authority-intermediate",
      "path": "ca/KRUMKACH-X509/chain/rfd-krumkach-certificate-authority-intermediate.pem",
      "kind": "chain",
      "ledger": "KRUMKACH-X509",
      "sha256": "12abd22de417794b1877f5bd64d8cffe25a67bb179c7fbbff20749b2f122bb3e"
    },
    {
      "label": "KRUMKACH-X509 chain of rfd-krumkach-signing-certificate-rferee",
      "path": "ca/KRUMKACH-X509/chain/rfd-krumkach-signing-certificate-rferee.pem",
      "kind": "chain",
      "ledger": "KRUMKACH-X509",
      "sha256": "b181aa0090fbe00e3c9843ce65beb5db5ecb6dc7d29b48fcde8782f27f378005"
    },
    {
      "label": "KRUMKACH-SSH trusted user CA keys",
      "path": "ssh/KRUMKACH-SSH/trusted-user-ca-keys.pub",
      "kind": "ssh-trusted-ca",
      "ledger": "KRUMKACH-SSH",
      "sha256": "48fa1bb26cfe3d55f1468e043e374bdbf432cf923807ca56ec24c78588c3cf95"
    },
    {
      "label": "KRUMKACH-SSH revocation list (KRL)",
      "path": "ssh/KRUMKACH-SSH/revoked.krl",
      "kind": "ssh-krl",
      "ledger": "KRUMKACH-SSH",
      "sha256": "95d86ce3924b70017d6d8920a70420d3d8cb2235489578d7e206006d4bee3427"
    },
    {
      "label": "RFD-KRUMKACH-ROOT-1-SSH SSH public key",
      "path": "keys/RFD-KRUMKACH-ROOT-1-SSH.pub",
      "kind": "ssh-key",
      "ledger": null,
      "sha256": "24977614b0a787120458013b05ef301a2f2893ba7506d3953514c384427cb9bd"
    },
    {
      "label": "RFD-KRUMKACH-ROOT-2-SSH SSH public key",
      "path": "keys/RFD-KRUMKACH-ROOT-2-SSH.pub",
      "kind": "ssh-key",
      "ledger": null,
      "sha256": "e64465538fa976e5f76e4762f4c8d7010a65281b6f8cc23dd7ac2101f3c9776d"
    },
    {
      "label": "SHA-256 checksums",
      "path": "sha256sums.txt",
      "kind": "checksums",
      "ledger": null,
      "sha256": "0bf054f0e41c73d606e09c5ba410cd32f0597ea7845ecb46c830a10f07ce09b9"
    }
  ]
}