{"index":{"platforms":[{"arch":"amd64","binary":"rabbiit-node-linux-amd64","label":"Linux (64-bit Intel/AMD)","os":"linux"},{"arch":"arm64","binary":"rabbiit-node-linux-arm64","label":"Linux (ARM64)","os":"linux"},{"arch":"arm","binary":"rabbiit-node-linux-arm","label":"Linux (32-bit ARM, Pi/armv6-7)","os":"linux"},{"arch":"arm64","binary":"rabbiit-node-darwin-arm64","label":"macOS (Apple Silicon)","os":"darwin"},{"arch":"amd64","binary":"rabbiit-node-darwin-amd64","label":"macOS (Intel)","os":"darwin"},{"arch":"amd64","binary":"rabbiit-node-windows-amd64.exe","label":"Windows (64-bit)","os":"windows"},{"arch":"arm64","binary":"rabbiit-node-windows-arm64.exe","label":"Windows (ARM64)","os":"windows"}],"serial":0},"note":"sha256 is of the BINARY, which is identical for everyone on a platform. The download is a per-person archive and its hash is deliberately not published, because a hash nobody else can reproduce cannot be checked.","signature":{"hash":"e854bf50da1e277a1643afe96164b6e9105e3a1b979a8bccee9562a63f8d9242","signature":"niXhKeQSms9C1DLvONLCgmamB6rV8BMjKpDsNAnMz+JaNHjjE7D7tv+YJ4xBvKR+D4HXvqOdu6rJ8heT8kejCw==","version":0},"verify":"signature covers json.dumps(index, sort_keys=True, separators=(',',':')) \u2014 check it against ORIGIN_PUBLIC_KEY from /.well-known/rabbiit/origin-key.json, and refuse any index whose serial is below the highest you have seen."}