Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Finalised editing a whole pdf for then to ask for my email at the end”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2541942774

Proof data

Record hash (SHA-256)

044701f460ec6493ac89f3a3eb5cb19c6a0c6fd4bd661e08d29277d30c23294b

Signature (Ed25519, base64)

vbtaszc0JYBGngHw7/cp9bjSLJsRqBTVZaC7qjSBOBywqL1Y2neHZ1vIF+5ExYNU+vInrjCyEF3yRnTKe6jbAw==

Merkle root

0fdf8a945cf322eba60395065bdb38bb3eeb32c52e065b6c93c48bb56aa3bb91

Merkle path

["0448a2ba9a25b3246ab22f6da95d6ea5cef0cfe1fcb046c68d832542e822233a","17ccd0a53112a6958a63420f64ac30f5737212bd2969fcab84fc3d6d1cd3af1c","9167753da7d56ada4fbe4222286b6656eee0bc049bae8409c9965bf7fda46182","52ab30adba6d3fd78c7c18a802fe0fc0ea341eca514b96feef64e179f56c3259","2a719f5bb083405c41128c11e086148c0fdc12feb45b3c7d152a1e6e4c9b47a8","286af8fd2733374590ee3c820f605a645d49dbfc527c2e4172b5a2a90bf36c15","081197015441b90d705d6047f899becb0bccf9a87e06ac7c543f7a5fb7f53fce","6a766a682de2ce236ca987807f9e8483b410bcdbd331300258e54d17016619d5","3d32de0e254feb7e777b031ec896db2427d86f86405793914a8a9ac23e32b07b","3adc850ff89e866a6b7067fc567b774da865396369ab04be9a9130ce8d592b92","d14ec2c916170d43b8192259828c5ed27b4a658bdd363b23e1f7df0145410d23","6d29e33e5fefb46385c255036c778f7012c15e8953e15d2c708456fe3e94ce75","193dd7819b5cc0893cd3620ab02042348a20821938045af5a341e160ec2e8bda","d97c31a576cd351fb66ddffaddfc87228fbf93ecf06301d5b8aec9b37e0fda68","31e60baa9fb8f672f686fd126d7dc82498bbfeaa38bc676e67691bf1c2c7c210"]

Anchored

2026-08-21

Public log entry

search.sigstore.dev, log index 2541942774 · entry 108e9186e8c5677ae0bd…

Expected log hash

4825ba618d3c3368179be13912e101812df871de37f30b1ec256ca6d987713ec The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1787277864570","kind":"published-quote","locale":"de","page":"theme:smallpdf/ordering/de","quote":"Finalised editing a whole pdf for then to ask for my email at the end","rating":1,"review_date":"2025-10-18","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.smallpdf.app.android","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (0fdf8a945cf3…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.