GITFORMAT-SIGNATURE(5)            Git Manual            GITFORMAT-SIGNATURE(5)

<?><?><?> (NAME)
       gitformat-signature - <?><?><?><?><?><?><?><?> <?><?><?><?><?>
       <?><?><?><?><?><?><?><?><?><?><?><?> <?><?> <?><?><?>

<?><?><?><?><?> <?><?><?><?><?> (SYNOPSIS)
       <[tag|commit] object header(s)>
       <over-the-wire protocol>


<?><?><?><?><?><?><?> (DESCRIPTION)
       <?><?><?> <?><?> <?><?><?><?><?><?><?>
       <?><?><?><?><?><?><?><?><?><?><?><?> <?><?> <?><?><?><?><?><?><?>
       <?><?><?><?><?><?><?><?> <?><?><?><?><?><?><?> <?><?><?><?><?><?><?>
       <?><?> <?><?><?> <?><?><?><?> <?><?><?> <?><?><?><?>
       (<?><?><?><?><?><?><?><?><?> <?><?><?><?><?><?><?><?><?>
       <?><?><?><?><?><?><?><?><?> <?><?><?><?><?>) <?>
       <?><?><?><?><?><?><?><?><?> (push<?><?>). <?><?> <?><?> <?><?><?><?><?>
       <?><?><?><?><?><?> <?><?> <?><?><?> <?><?><?><?><?> <?><?><?> <?><?>
       <?><?><?><?><?><?> <?><?> <?><?><?><?><?> <?><?> <?><?><?><?>
       <?><?><?><?> (payload) <?><?> <?><?> <?><?><?><?><?> <?><?><?><?><?>
       <?><?><?><?><?><?><?><?><?> <?><?><?><?><?> <?><?> <?><?><?><?>
       <?><?><?><?><?><?> <?><?><?><?><?> <?><?><?><?> (detached signature)
       <?><?><?><?> <?><?> <?><?><?> <?><?><?><?>
       <?><?><?><?><?><?><?><?><?><?><?> (<?><?> <?><?><?><?>
       <?><?><?><?><?><?><?> PGP <?><?><?><?><?> gpg -bsa)<?> <?> <?><?><?><?>
       <?><?> <?><?><?><?> <?><?><?> <?><?> <?><?><?><?><?><?>
       <?><?><?><?><?><?> <?><?><?><?><?><?>.

       <?><?><?><?><?><?> <?><?> <?><?> <?><?> <?><?><?> "ASCII Armor"
       <?><?><?><?> <?><?><?><?><?><?><?> <?> <?><?> <?><?> <?><?>
       <?><?><?><?><?><?> <?><?> <?><?><?><?><?> <?><?><?><?><?><?><?><?>
       <?><?> <?><?><?><?> <?><?> <?><?><?> <?><?><?><?> (<?><?> <?><?><?><?>
       <?><?><?><?><?> <?><?><?><?><?><?><?><?><?><?> <?><?><?><?>
       gpg.format<?> <?><?><?><?> <?><?><?><?> <?><?> git-config(1))
       <?><?><?><?><?> <?><?><?><?><?>. <?><?><?> <?><?><?><?><?> <?><?><?><?>
       <?><?><?><?><?><?> gpg.format <?><?> <?><?><?> <?><?><?> <?><?><?>:

       gpg (PGP)
           -----BEGIN PGP SIGNATURE----- <?> -----END PGP SIGNATURE-----.
           <?><?> <?><?><?> <?><?> gpg <?><?><?><?><?> <?><?><?><?> <?><?><?>
           <?><?><?><?><?><?><?> RFC1991 <?><?><?><?><?> <?><?><?><?>
           -----BEGIN PGP MESSAGE----- <?> -----END PGP MESSAGE-----

       ssh (SSH)
           -----BEGIN SSH SIGNATURE----- <?> -----END SSH SIGNATURE-----

       x509 (X.509)
           -----BEGIN SIGNED MESSAGE----- <?> -----END SIGNED MESSAGE-----

       <?><?><?><?><?><?> <?><?><?><?> <?><?> <?><?><?><?><?> <?><?><?><?>
       <?><?> <?><?><?> <?><?><?><?> <?><?><?><?> <?><?><?><?>
       <?><?><?><?><?><?><?> (<?><?><?><?> <?><?><?><?><?> <?><?>
       <?><?><?><?><?> <?><?><?><?><?><?><?> <?><?><?><?> <?><?><?><?> <?><?>
       <?><?> <?><?> <?><?><?> <?><?><?><?><?><?><?> <?><?> <?><?><?><?>
       <?><?> <?><?> <?><?><?><?><?> <?><?><?><?><?><?> <?><?><?><?><?>
       <?><?><?><?>)<?> <?> <?><?><?><?> <?><?> <?><?><?><?><?> <?><?>
       <?><?><?> <?><?><?> <?><?><?><?> <?><?><?><?><?><?><?> (<?><?>
       <?><?><?><?><?> <?><?><?><?> <?><?> <?><?><?><?><?> <?><?><?><?><?>
       <?><?> <?><?> <?><?><?><?><?> <?><?><?><?><?><?><?> <?><?>
       <?><?><?><?><?> <?><?><?><?> <?><?><?><?> <?><?><?><?>
       <?><?><?><?><?><?> <?><?><?><?><?> <?><?> <?><?><?> <?><?><?>
       "mergetag" <?><?><?> <?><?><?><?><?> <?><?><?><?>). <?><?> <?><?><?><?>
       <?><?><?><?> <?><?><?><?><?> <?><?><?><?><?>
       <?><?><?><?><?><?><?><?><?> <?><?><?><?><?><?> <?><?><?><?> <?><?><?>
       <?><?><?><?> <?><?><?><?><?> <?><?><?><?><?><?><?> <?><?><?><?>
       <?><?><?> <?><?><?> <?> <?><?><?><?><?><?> <?><?> <?><?> <?><?> <?><?>
       <?><?> <?><?><?><?><?> <?><?><?><?> (SP) <?><?><?><?>
       <?><?><?><?><?><?><?> <?><?> <?><?><?><?> <?><?><?><?> <?><?> <?><?><?>
       <?><?><?><?><?><?><?><?><?><?><?> <?><?><?> <?><?><?><?> <?><?><?>.

       <?><?><?> <?><?><?><?><?> <?><?><?> <?><?><?><?> <?><?><?><?><?><?><?>
       <?><?> <?><?> <?><?><?> <?><?><?><?> <?><?><?><?><?><?><?><?> <?><?><?>
       <?><?><?> <?><?><?><?><?><?>. <?><?> <?><?><?><?><?><?><?><?>
       <?><?><?><?> <?><?><?><?><?><?> <?><?><?><?> <?><?> <?><?>
       <?><?><?><?><?> <?><?><?><?><?> <?><?> <?><?><?><?><?>
       <?><?><?><?><?><?> <?><?> <?><?><?><?><?> $ <?><?><?><?> <?><?><?><?>
       <?><?><?> <?><?><?><?> <?><?><?> <?><?><?> <?><?><?><?><?> <?><?><?>
       <?><?><?><?><?><?><?> <?><?> <?><?> <?><?><?><?> <?><?><?><?>
       <?><?><?><?><?><?><?> <?><?><?><?><?> <?><?><?><?><?> <?><?> <?><?><?>
       <?> <?><?><?><?> <?><?><?><?><?>--<?><?><?><?><?> <?><?><?><?><?><?>
       <?><?><?><?> <?><?><?><?> <?><?><?><?> <?><?><?><?><?><?><?><?><?>
       <?><?><?><?> <?><?><?><?><?> <?><?> <?><?><?><?><?><?> <?><?><?><?>
       <?><?><?><?><?> <?><?> <?><?><?><?> <?><?><?><?> <?><?><?><?>
       <?><?><?><?><?><?><?>.

       <?><?><?> <?><?><?><?> <?><?><?><?><?><?><?> <?> <?><?><?><?>
       <?><?><?><?><?><?> <?><?><?><?> <?><?> <?><?><?> <?><?><?> <?><?>
       <?><?><?><?><?><?> <?><?><?><?><?> <?><?><?><?>.

<?><?><?><?><?><?><?> <?><?><?><?><?> (TAG SIGNATURES)
       o   <?><?><?><?><?><?><?><?> <?><?><?><?>: git tag -s

       o   <?><?><?><?> <?><?><?><?> (payload): <?><?><?> <?><?><?><?><?>
           <?><?><?><?><?><?><?><?><?><?><?><?><?><?><?> (annotated tag
           object)

       o   <?><?><?><?><?><?>: <?><?><?><?><?> <?><?><?><?> <?><?><?><?>
           <?><?> <?><?><?> <?><?><?><?><?> <?><?><?><?> <?><?><?><?>

       o   <?><?><?><?>: <?><?><?><?><?> signedtag <?><?> <?><?><?><?><?>
           signed tag

           object 04b871796dc0420f8e7561a895b52484b701d51a
           type commit
           tag signedtag
           tagger C O Mitter <committer@example.com> 1465981006 +0000

           signed tag

           signed tag message body
           -----BEGIN PGP SIGNATURE-----
           Version: GnuPG v1

           iQEcBAABAgAGBQJXYRhOAAoJEGEJLoW3InGJklkIAIcnhL7RwEb/+QeX9enkXhxn
           rxfdqrvWd1K80sl2TOt8Bg/NYwrUBw/RWJ+sg/hhHp4WtvE1HDGHlkEz3y11Lkuh
           8tSxS3qKTxXUGozyPGuE90sJfExhZlW4knIQ1wt/yWqM+33E9pN4hzPqLwyrdods
           q8FWEqPPUbSJXoMbRPw04S5jrLtZSsUWbRYjmJCHzlhSfFWW4eFd37uquIaLUBS0
           rkC3Jrx7420jkIpgFcTI2s60uhSQLzgcCwdA2ukSYIRnjg/zDkj8+3h/GaROJ72x
           lZyI6HWixKJkWw8lE9aAOD9TmTW9sFJwcVAzmAuFX2kUreDUKMZduGcoRYGpD7E=
           =jpXa
           -----END PGP SIGNATURE-----



       o   <?><?><?><?><?><?><?><?><?><?> <?><?>: git verify-tag [-v] <?><?>
           git tag -v

           gpg: Signature made Wed Jun 15 10:56:46 2016 CEST using RSA key ID B7227189
           gpg: Good signature from "Eris Discordia <discord@example.net>"
           gpg: WARNING: This key is not certified with a trusted signature!
           gpg:          There is no indication that the signature belongs to the owner.
           Primary key fingerprint: D4BE 2231 1AD3 131E 5EDA  29A4 6109 2E85 B722 7189
           object 04b871796dc0420f8e7561a895b52484b701d51a
           type commit
           tag signedtag
           tagger C O Mitter <committer@example.com> 1465981006 +0000

           signed tag

           signed tag message body


<?><?><?><?><?><?><?> <?><?><?><?><?> (COMMIT SIGNATURES)
       o   <?><?><?><?><?><?><?><?> <?><?><?><?>: git commit -S

       o   <?><?><?><?> <?><?><?><?> (payload): <?><?><?> <?><?><?><?><?>

       o   <?><?><?><?><?><?>: <?><?><?><?> <?><?><?> gpgsig (<?><?><?><?><?>
           <?><?> <?><?> <?><?><?><?><?> <?><?><?><?> <?><?><?><?><?><?>)

       o   <?><?><?><?>: <?><?><?><?><?> <?><?> <?><?><?><?><?> signed commit

           tree eebfed94e75e7760540d1485c740902590a00332
           parent 04b871796dc0420f8e7561a895b52484b701d51a
           author A U Thor <author@example.com> 1465981137 +0000
           committer C O Mitter <committer@example.com> 1465981137 +0000
           gpgsig -----BEGIN PGP SIGNATURE-----
            Version: GnuPG v1
            $
            iQEcBAABAgAGBQJXYRjRAAoJEGEJLoW3InGJ3IwIAIY4SA6GxY3BjL60YyvsJPh/
            HRCJwH+w7wt3Yc/9/bW2F+gF72kdHOOs2jfv+OZhq0q4OAN6fvVSczISY/82LpS7
            DVdMQj2/YcHDT4xrDNBnXnviDO9G7am/9OE77kEbXrp7QPxvhjkicHNwy2rEflAA
            zn075rtEERDHr8nRYiDh8eVrefSO7D+bdQ7gv+7GsYMsd2auJWi1dHOSfTr9HIF4
            HJhWXT9d2f8W+diRYXGh4X0wYiGg6na/soXc+vdtDYBzIxanRqjg8jCAeo1eOTk1
            EdTwhcTZlI0x5pvJ3H0+4hA2jtldVtmPM4OTB0cTrEWBad7XV6YgiyuII73Ve3I=
            =jKHM
            -----END PGP SIGNATURE-----

           signed commit

           signed commit message body



       o   <?><?><?><?><?><?><?><?><?><?> <?><?>: git verify-commit [-v]
           (<?><?> git show --show-signature)

           gpg: Signature made Wed Jun 15 10:58:57 2016 CEST using RSA key ID B7227189
           gpg: Good signature from "Eris Discordia <discord@example.net>"
           gpg: WARNING: This key is not certified with a trusted signature!
           gpg:          There is no indication that the signature belongs to the owner.
           Primary key fingerprint: D4BE 2231 1AD3 131E 5EDA  29A4 6109 2E85 B722 7189
           tree eebfed94e75e7760540d1485c740902590a00332
           parent 04b871796dc0420f8e7561a895b52484b701d51a
           author A U Thor <author@example.com> 1465981137 +0000
           committer C O Mitter <committer@example.com> 1465981137 +0000

           signed commit

           signed commit message body


<?><?><?><?><?><?><?> <?><?><?><?><?> <?><?><?><?><?> (MERGETAG SIGNATURES)
       o   <?><?><?><?><?><?><?><?> <?><?><?><?>: git merge <?><?><?>
           <?><?><?><?><?> <?><?><?><?><?><?><?>

       o   <?><?><?> <?><?><?><?>/<?><?><?><?><?><?>: <?><?> <?><?><?>
           <?><?><?><?><?> <?><?><?><?><?><?><?> <?><?><?><?> <?><?><?>
           <?><?><?><?><?> (<?><?><?><?><?>) <?><?> <?><?><?><?><?>
           <?><?><?><?> <?><?><?> mergetag <?><?><?><?><?><?>
           <?><?><?><?><?><?>

       o   <?><?><?><?>: <?><?><?><?><?> <?><?><?><?><?> <?><?><?><?><?><?><?>
           signedtag <?><?><?><?><?><?> <?><?><?><?>

           tree c7b1cff039a93f3600a1d18b82d26688668c7dea
           parent c33429be94b5f2d3ee9b0adad223f877f174b05d
           parent 04b871796dc0420f8e7561a895b52484b701d51a
           author A U Thor <author@example.com> 1465982009 +0000
           committer C O Mitter <committer@example.com> 1465982009 +0000
           mergetag object 04b871796dc0420f8e7561a895b52484b701d51a
            type commit
            tag signedtag
            tagger C O Mitter <committer@example.com> 1465981006 +0000
            $
            signed tag
            $
            signed tag message body
            -----BEGIN PGP SIGNATURE-----
            Version: GnuPG v1
            $
            iQEcBAABAgAGBQJXYRhOAAoJEGEJLoW3InGJklkIAIcnhL7RwEb/+QeX9enkXhxn
            rxfdqrvWd1K80sl2TOt8Bg/NYwrUBw/RWJ+sg/hhHp4WtvE1HDGHlkEz3y11Lkuh
            8tSxS3qKTxXUGozyPGuE90sJfExhZlW4knIQ1wt/yWqM+33E9pN4hzPqLwyrdods
            q8FWEqPPUbSJXoMbRPw04S5jrLtZSsUWbRYjmJCHzlhSfFWW4eFd37uquIaLUBS0
            rkC3Jrx7420jkIpgFcTI2s60uhSQLzgcCwdA2ukSYIRnjg/zDkj8+3h/GaROJ72x
            lZyI6HWixKJkWw8lE9aAOD9TmTW9sFJwcVAzmAuFX2kUreDUKMZduGcoRYGpD7E=
            =jpXa
            -----END PGP SIGNATURE-----

           Merge tag 'signedtag' into downstream

           signed tag

           signed tag message body

           # gpg: Signature made Wed Jun 15 08:56:46 2016 UTC using RSA key ID B7227189
           # gpg: Good signature from "Eris Discordia <discord@example.net>"
           # gpg: WARNING: This key is not certified with a trusted signature!
           # gpg:          There is no indication that the signature belongs to the owner.
           # Primary key fingerprint: D4BE 2231 1AD3 131E 5EDA  29A4 6109 2E85 B722 7189



       o   <?><?><?><?><?><?><?><?><?><?> <?><?>:
           <?><?><?><?><?><?><?><?><?><?> <?><?> <?><?><?>
           <?><?><?><?><?><?><?> <?><?><?><?> <?><?><?><?> <?><?><?><?><?>
           <?><?><?><?><?> <?><?><?><?><?><?> <?><?><?><?><?><?><?> <?><?>
           <?><?> <?><?><?><?><?> <?><?><?> <?><?><?><?><?><?><?> <?><?> git
           show --show-signature:

           commit 9863f0c76ff78712b6800e199a46aa56afbcbd49
           merged tag 'signedtag'
           gpg: Signature made Wed Jun 15 10:56:46 2016 CEST using RSA key ID B7227189
           gpg: Good signature from "Eris Discordia <discord@example.net>"
           gpg: WARNING: This key is not certified with a trusted signature!
           gpg:          There is no indication that the signature belongs to the owner.
           Primary key fingerprint: D4BE 2231 1AD3 131E 5EDA  29A4 6109 2E85 B722 7189
           Merge: c33429b 04b8717
           Author: A U Thor <author@example.com>
           Date:   Wed Jun 15 09:13:29 2016 +0000

               Merge tag 'signedtag' into downstream

               signed tag

               signed tag message body

               # gpg: Signature made Wed Jun 15 08:56:46 2016 UTC using RSA key ID B7227189
               # gpg: Good signature from "Eris Discordia <discord@example.net>"
               # gpg: WARNING: This key is not certified with a trusted signature!
               # gpg:          There is no indication that the signature belongs to the owner.
               # Primary key fingerprint: D4BE 2231 1AD3 131E 5EDA  29A4 6109 2E85 B722 7189


<?><?><?> (GIT)
       <?><?><?><?> <?><?> <?><?><?><?><?><?> git(1)

Git 2.55.0                        2026-06-29            GITFORMAT-SIGNATURE(5)