A class representing the signature in the secure manifest.
the header for the payload
used to validate the payload is trustworthy