I'm familiar with the concept. A digital signature signs a message. What message are you signing?

If I were creating a verification system, I'd include a Timestamp, camera used, and UUID. If I were selling products to news teams, I'd likely include fields that the firm wanted included like name of company, and if applicable, gps location.