C.E.R.T.O. — BagIt 1.0 forensic bundle
Acquisition type: web
UUID: 2e089745-bd9e-4561-9e3d-1696768504d0

Structure: data/ (payload + manifest.json signed with Ed25519 + tsa.tsr internal anchor),
metadata/evidence.case.jsonld (CASE/UCO), manifest-sha256.txt (payload fixity),
tagmanifest-sha256.txt(+.tsr) (tag fixity + external RFC 3161 seal), tsa-ca.pem.

Verification: run verify.sh (macOS/Linux) or verify.bat (Windows) from the bag root.

Windows: the two RFC 3161 time-stamps require openssl, which Windows does not ship. Without it verify.bat reports SKIP and the seals stay unchecked. To check them, copy openssl.exe with its DLLs into a 'tools' folder next to this file, or use verify.sh, or the C.E.R.T.O. validator.

Windows: extract with 7-Zip. The built-in extractor fails on long paths, and this bundle has deep ones. Extracting to a short folder such as C:\Evidence\ also helps.
