Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Unfortunately, the quality of the small prints is not what I expected.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
00bf78bc481a5023e1fc4843522a8d5f256b3f115d4b25da4195bcd16f2a7057
Signature (Ed25519, base64)
eCJXA6+hXDWEStaSoVrNmGNiVaa+BZBG7rRUZ505/q04aKpy2/hzeOcS4b3qPgkKs+8sH1jr8Dium9EOodbBDg==
Merkle root
7533cb8d8c04dee23596d4ccf0908b735d91b81fe92e605e13c527ecb5deb2d2
Merkle path
["00c415b925525f59504b741421c856996c99d53fb78a901f3fb0a44219bf22fd","96a41db89361c376b84a29f7a0525cb8ddca19720b268467cf7cc61f2ffd298e","1628fffcc1d68a23ce2600698b4a0bb4756135f80eb2e9c45a0ae6012741c665","1a19680c3062e690467a69207a5a8e0a545d6ac45caaf277ba730ea828209837","d67a3c5095d47f02dc6325f7c115b817e35c4be618d748bf8ac6e300cce09bad","d089277a04239adbc2edeb8dd67d9bef7c62a906e14f7ac1a0e1bde479e892a8","3801876260ee4f4e23a9f294f0fb81b24dba30245b179cc7d682fb72e5ebc941","7eb10e746bd4fbc31ace1084e9b9458ba8b7ecd0603ad5b8adb7de64ea97a74b","9ee977bb8e258e0d27ee0b3d5ddc7e83709723b1110cee009d68b13ba9eac3e6","25ae60a8f8fb330d6cd23a55bc8cefdc4a8315b384c8339f064084f66e46e400","689b1a284b8a44a437da2dd8aa35cd28112ca06294eb8fb9f0e9f43b406135c2","959618116f7bff6ed2072830f64b1ea0f4df8a2685ac6da49d6c45ba87916262","93bc8fd7f71ba29ff353e3337a18e3fae8da5d9c75f2209b2b67e1af3660ae8e"]
Anchored
2026-11-02
Public log entry
search.sigstore.dev, log index 3637411721 · entry 108e9186e8c5677a3165…
Expected log hash
5dfee0cb2ef036a9452adde296e783557348142e751437e8895b161fe04023f3 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1793587829781","kind":"published-quote","locale":"en","page":"brand:cewe","quote":"Unfortunately, the quality of the small prints is not what I expected.","rating":3,"review_date":"2026-08-01","source":"Trusted Shops","source_url":"https://www.trustedshops.de/bewertung/info_XE3D21EA81A56276ACEED1C9AFB85F941.html","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (7533cb8d8c04…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.