Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“jedoch fehlen mir Sticker … leider hat man da nur eine sehr kleine Auswahl.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
03d5114d16410df383e10177817c78395b4e009c37d8a689e580d250daa5242a
Signature (Ed25519, base64)
E9En9r6Tu6LlybqTpDN8YWp78RZ6q7syYNGHnqFm4C1BJKz1DEEa7mOpnopdxZbiDUlCPtR7JyADdcI3MRl3AQ==
Merkle root
4900b1080bdcd3b4c9234f01647614e7004e0a1ae01ead44968e31abeab33265
Merkle path
["03de3f0e3ec6cd98d397e038285238362d1e5c6225662ce598fbb8da789c03bd","d59f33df5d70aab83e3c924f77d6501727fbaa5ceb232d5c2419d21e325c6dbf","60785d6ab8411e0e2cb2893e2798dfa9c6513819a1f75d3cce55c18cc4d00338","d2c4b7af93e110edbfde731df41e642e352f0db75023a048b675189144879485","b6287d09920839b6af5233f8178eab36b7ffa87d0be3a6d0b2118f4296600a44","00b9557b9cc59d7bae1455bfd8d3bd0b4f43c38df9fd2e756b8219374500bd2b","217edf82df30216ae4781f7519388ba0f1b02c91a42840d3c72b2a3e32ba9e9a","a2c0ea7313cfeb0473bfa3ea785e576a6a983b5a356b2d502e4b9285d53885e4","93f38bccfbc35903f8a5db822e7cceaf1c6d39e49c23a2a4efe22d25717b2854","1243a3e70d03030a37c17aad9a1eb5ca4bf79fe7970971d33460f567a94dbc5b","5eea0c065cc9023d7325f7537d5b56f514ab1dc88622b30c5c8dec5113ed99f8","4f4d0831440aadf9cdde8508ea8672cceb008a30da8e04261a55c46ea8a8ea6b","acc667d852c71a0e84a086ab20f7bbad3d8ae083a1e44cd20501ad641f662bdf","0a4842003c61f69c5923b6aafd56426e7fe934e483f7d15b620c07fa61f89152"]
Anchored
2026-10-13
Public log entry
search.sigstore.dev, log index 3241341297 · entry 108e9186e8c5677a0e53…
Expected log hash
39342fbb95f8cce5be4111719e5450984494edcdff99b8bd9a5c0d2303b67943 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791866192176","kind":"published-quote","locale":"de","page":"brand:cewe","quote":"jedoch fehlen mir Sticker … leider hat man da nur eine sehr kleine Auswahl.","rating":4,"review_date":"2026-02-26","source":"Apple App Store","source_url":"https://apps.apple.com/de/app/id583713833?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (4900b1080bdc…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.