Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Ich habe das erste mal die App für ein Fotobuch benutzt.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 3667254458

Proof data

Record hash (SHA-256)

00cd3fe8539d82dc1fd9fefaa3bf7a576382dbc28bf209d107cf215318e992a6

Signature (Ed25519, base64)

QCe1u8Lyua8hc/H7BBfScTaLTvQp1hvGvJIRiyzVru1UF4/xQFqvRArzaRKji/vho8Qhe1FgfPbfu3+tha+lCA==

Merkle root

6198693610fc101ebb82aa1f9c089f7146b31caebf70bcf1f70b87596a2871e0

Merkle path

["00c0c34455fa07bdd894801e56a2537efa1bffa0d2f226e32e21be4664f10881","b2ec9db6fefc7dc3e8e13fd19bb3ac0983e687366404f100a3e202639f0d22b4","a7224476e8912a30f526a09e8ab0c4663f120745ad39404ebf4435a8ab7d327b","8017d8fa4586ed105b5f4bfcfa08589037caae14e9bac216049592391676fd81","8928dfc7cfb210edb7edb878edbc60443234ae0f3f94fbe9b2200f06ad290c98","d877efedd98e476c8ff0112a689210a2f4a6e077984f553a921e91f3261891ae","c17735baa8eea3f4737aff26ff3c7229152b124d1cb1d87e3687c278870a63c4","e3ea5fc1405bb8b54135dc80bd15dd66ddcd4d9d34aa122bbd9bb23375501d4c","95bae7ae7505b33363b9ff0149bbfcc98c430149b7434130c0631c7889e0bb89","c03fcb76c2748b2224e05118f6b2eed89891021e96a35bb03d4dd3689831f839","341b3ea0d9b38d68ec772df9165156f87b1983bbc2fdf599e22662c790ce3047","0d9e6ee6936356ae6c967b3ce2cb0e42d3ff0d06b736c006024c56f32867114c","3eec96d57c7ea7d1841605fe068da41ba3bbf63a30709a21a9f81605afbbb44c"]

Anchored

2026-11-03

Public log entry

search.sigstore.dev, log index 3667254458 · entry 108e9186e8c5677a5e6e…

Expected log hash

d86cb752bbe06d2c6cffdf81a425ce2e1f7c967ab490cd5b4543bc4a2cbcf526 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1793702805047","kind":"published-quote","locale":"de","page":"brand:pixum","quote":"Ich habe das erste mal die App für ein Fotobuch benutzt.","rating":5,"review_date":"2026-08-15","source":"Trusted Shops","source_url":"https://www.trustedshops.de/bewertung/info_XFAB7C17C298F48909E8C9F2BFAA5794B.html","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (6198693610fc…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.