{
  "scope": "demo",
  "purpose": "Public verification of synthetic Decision Receipts on meshqu.com. Production receipts are signed with a separate key set, served from https://api.meshqu.com/v1/.well-known/signing-keys.",
  "fingerprint_sha256_input": "decoded SPKI DER bytes",
  "keys": [
    {
      "kid": "msk_demo_v2",
      "algorithm": "ed25519",
      "format": "spki-der-base64",
      "public_key": "MCowBQYDK2VwAyEA82IH8awMdAnvBBXJFlGvlY5Ue/VMBkyB3XgUS6oKI9U=",
      "fingerprint_sha256": "2be54ebd3c6a0dded080683251b50d319f7b906da6746bc15a29427783ad7f1d",
      "status": "current",
      "note": "Signs the canonical v2 demo receipt."
    },
    {
      "kid": "msk_demo_v1",
      "algorithm": "ed25519",
      "format": "spki-der-base64",
      "public_key": "MCowBQYDK2VwAyEA5r4QAXupbQmGQDgkWVgpuNOC+S4DIYIjxoQFZyvMwPA=",
      "fingerprint_sha256": "bcbb471ce90d6a9140a399f4e3b38688b3323c90c2b50985648bcd468bf37307",
      "status": "retained",
      "note": "Superseded by msk_demo_v2 and retained indefinitely so the pre-existing v1 demo receipt keeps verifying. Never reissued."
    }
  ]
}