/**
 * Verify an MDS3 blob and return the parsed payload plus a chain
 * of X509Certificates. Throws on any failure.
 *
 * @param {string} jwsCompact
 * @param {object} options
 * @param {Array<import('node:crypto').X509Certificate | Uint8Array | string>} options.rootAnchors
 * @param {number} [options.now]  epoch ms; defaults to Date.now()
 * @returns {{
 *   header: Record<string, unknown>,
 *   payload: {
 *     legalHeader?: string,
 *     no: number,
 *     nextUpdate: string,
 *     entries: Array<Record<string, unknown>>,
 *   },
 *   certChain: import('node:crypto').X509Certificate[],
 * }}
 */
declare function verifyMdsBlob(jwsCompact: string, options: {
    rootAnchors: Array<any | Uint8Array | string>;
    now?: number | undefined;
}): {
    header: Record<string, unknown>;
    payload: {
        legalHeader?: string;
        no: number;
        nextUpdate: string;
        entries: Array<Record<string, unknown>>;
    };
    certChain: any[];
};
/**
 * Build a `{ aaguid: entry }` index from an MDS3 payload.
 *
 * @param {{ entries: Array<Record<string, unknown>> }} mdsPayload
 * @returns {Record<string, { name: string, statement: object }>}
 */
declare function buildAaguidIndex(mdsPayload: {
    entries: Array<Record<string, unknown>>;
}): Record<string, {
    name: string;
    statement: object;
}>;

export { buildAaguidIndex, verifyMdsBlob };