backup-manifest · shipping

Backup manifest

A backup manifest is a machine-readable inventory of expected backup contents and associated verification metadata.

PostgreSQL uses UTF-8 JSON, with file paths, sizes and optional checksum fields; recorded modification times are informational. The format also identifies required WAL ranges. Other backup formats need not use this schema.

Relations

related

backup-verification, incremental-backup, restore-test, immutability-storage

Advantages

• Provides explicit expected file contents for automated checks. [1, 2]

Limitations

• Optional per-file checksums must not be assumed present. [2]
• A hash match cannot authenticate a manifest that an attacker could also replace. [4]

Citations

1. PostgreSQL 18: Backup Manifest Format (accessed 2026-10-13)
2. PostgreSQL 18: Backup Manifest File Object (accessed 2026-10-13)
3. PostgreSQL 18: Backup Manifest WAL Range Object (accessed 2026-10-13)
4. PostgreSQL 18: pg_basebackup, manifest checksums and trust (accessed 2026-10-13)
5. Hesela: Backup verification is not a restore test (accessed 2026-10-13)

JSON: /data/terms/backup-manifest.json