RFC 3161 TRUSTED TIMESTAMP ========================== file sealed : MANIFEST.sha256 TSA : http://freetsa.org/tsr serial : 0x099ADCCC timestamp : Oct 31 16:32:51 2026 GMT local verify : OK Verify it yourself (no trust in the archivist required): openssl ts -verify -in "MANIFEST.tsr" -queryfile "MANIFEST.tsq" -CAfile "tsa_cacert.pem" -untrusted "tsa_cert.pem" Expected output ends with: Verification: OK What this proves: the file MANIFEST.sha256 already existed, with exactly this SHA-256, at the timestamp above. The signature belongs to the TSA, not to whoever produced the archive. What it does NOT prove: that the archive's content ever appeared on X. ---- full token ---- Status info: Status: Granted. Status description: unspecified Failure info: unspecified TST info: Version: 1 Policy OID: tsa_policy1 Hash Algorithm: sha256 Message data: 0000 - 82 0b 46 bc 94 2c 84 da-54 7e 9f b4 5e 94 6e 00 ..F..,..T~..^.n. 0010 - 88 24 73 9a ce e9 e2 7e-d4 f4 de 90 c5 28 83 9a .$s....~.....(.. Serial number: 0x099ADCCC Time stamp: Oct 31 16:32:51 2026 GMT Accuracy: unspecified Ordering: yes Nonce: unspecified TSA: DirName:/O=Free TSA/OU=TSA/description=This certificate digitally signs documents and time stamp requests made using the freetsa.org online services/CN=www.freetsa.org/emailAddress=busilezas@mailbox.org/L=Wuerzburg/C=DE/ST=Bayern Extensions: