---
title: "A run's signed manifest"
method: GET
path: "/v1/runs/{run_id}/manifest"
tags: ["Evidence"]
---

# A run's signed manifest

`GET /v1/runs/{run_id}/manifest`

## Request

- Base URL: `https://sourcefinch.com`
- URL: `https://sourcefinch.com/v1/runs/{run_id}/manifest`
- Auth: HTTP bearer

The run's receipt: every capture hash, claim value and locator, validation and compliance state, signed with SourceFinch's evidence key and anchored with an RFC 3161 timestamp. Verify offline with the evidence bundle verifier.

## Path parameters

- `run_id` string, uuid, required

## Headers

- `X-Request-Id` string
- `SourceFinch-Project` string, uuid

## Response `200`

Manifest, signature and anchor

- RunManifest: Signed, timestamp-anchored manifest of a finished run (Evidence v2)
  - `manifest` object, required: The sourcefinch/manifest@1 document
  - `manifest_sha256` string, required: SHA-256 of the RFC 8785 canonical manifest: the run's receipt
  - `signature` string, nullable, required: Base64 Ed25519 signature over the canonical manifest bytes
  - `key_id` string, nullable, required: RFC 7638 thumbprint of the key at /.well-known/sourcefinch-evidence-keys.json
  - `created_at` string, required: ISO-8601 timestamp (UTC)
  - `anchor` object, nullable, required: Null until the next anchoring batch (about a minute)
    - `merkle_root` string, required
    - `proof` string[], required
    - `tsa_url` string, required
    - `tsa_token` string, required: Base64 DER RFC 3161 TimeStampResp over merkle_root
    - `anchored_at` string, required: ISO-8601 timestamp (UTC)

## Other responses

- `401`: Problem details; `code` is `unauthenticated`
- `403`: Problem details; `code` is `forbidden`
- `404`: Problem details; `code` is `not_found`
- `429`: Problem details; `code` is `rate_limited`
- `500`: Problem details; `code` is `internal`

---

[API](https://skmtc.dev/sourcefinch/apis/sourcefinch-api.md) · [All operations](https://skmtc.dev/sourcefinch/apis/sourcefinch-api/llms.txt) · [OpenAPI document](https://skmtc.dev/sourcefinch/apis/sourcefinch-api/revisions/190cbe57a5e8?raw)
