Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“They advertise that you can use it with a monthly subscription.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
01591652710bea5549cac2a2f5b70ffbd2ba15c552c84e447b1fe1adbc5f5d3a
Signature (Ed25519, base64)
f3iZ8itvmhjusRAjaMT8ofugFSZwJEH/fqQ4TsgO5sKc9fwot+f5pgnHP0PQgph0GXSB79NiZXTN/tinoyR3Aw==
Merkle root
85ce153ffacf452dbbce3fe1023cf2b1831b0714a52ddd4756cd932ee6118eca
Merkle path
["015b5f0bbd9d9628be0951f0fbb776eb93d5179b12836e4338d56afe659c6fc0","e7da65d1808c902a01eec12d11ed0e209d05c997b467344725d4ea3674affbca","4d85c32d206bce1345c66b2b138f42d7b9badb13fe67619a829fffd43553b3e7","a6c0291ec45376cbeb252c80c4811a5e41029111f2d9dddc28d3eaefb2fef6d1","252de2535be85461f5cebfdf4833eff7b04456604dde1b68e5f44c1b28b0f485","a8f5a718f01f7be5680919b9196a6a5913c85bc54778ee08f69ecbe51784e4fb","b5dc6a14ac32ac95070583238eb46de08c68a41eed8115903acae928f713a95e","2423bcff849edd2fd528ec63a2c38d028a18148a8db5d082bbd7557474096b5b","074e2a3ad48f6f2a01443ffcbd2650dbf51b1e65acd87eefaac5e80f80a3d611","71d558ff6fe5082421ce32e9c6d04e500246d82f6253c55da5225c683ac39f8c","4aba4c8ff1de29ad0b7aadee5c2e476818f79748c266e2c70c52fb9d0ff85fe7","6c2e1c6197efd563c8b55fe8aee10bf08687b45dabbbd2a77d804d15e7fc26bf","18b18f071e9c71d8c36d555f1bf037316eae5e015564bc049869377ca5d7af3d","18e09dc9351f249cc916f25a12a638ff411aa18455e8056b5bab6122f75e7984"]
Anchored
2026-10-14
Public log entry
search.sigstore.dev, log index 3247778771 · entry 108e9186e8c5677a205f…
Expected log hash
d4527e154b8f284d35adc456cc8f260840ef237a57e84e3d79bf64cab7ccc901 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791943580112","kind":"published-quote","locale":"en","page":"brand:sevdesk","quote":"They advertise that you can use it with a monthly subscription.","rating":1,"review_date":"2026-08-07","source":"Apple App Store","source_url":"https://apps.apple.com/de/app/id731738076?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (85ce153ffacf…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.