Each Digital Passport digest is locked to an authoritative time by an independent RFC 3161 Timestamp Authority (TSA) using its own private key — a moment the issuer itself cannot retroactively alter.
