Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Haben Sie vergessen, Ihren Freiwilligen-Test abzubrechen? $108 wurden auf Ihrer Karte abgebucht?”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 3665494160

Proof data

Record hash (SHA-256)

0449d3d271643699954969bfb2e4a538c235f9d0373635343db93c8bc776f79d

Signature (Ed25519, base64)

Ess/TqaatbGZTWMm7x+1954IjQlxFQes4uPJakugFUzfbOZnUMyk1I+jbZa5ulNa1+CrCHVVEs+t9V0F4c6bCA==

Merkle root

8087c7bed9871b345d05d836c29af23fc0d9671c928a1e9363522a16fdd7cf0e

Merkle path

["043f57467cf82ef2f51b879de30fe17f072e18a5b0f8d5a8a7687a48af2bd97d","4b090e634e345976f54ef6f4c993ca72c2d1bbc789fa0799fca1dbdd042f2cca","dac7155dc2d131e9fc10efe65ca995d2a5b4f55aa50371a7388bb39e1fcf90f1","dc66a0abb17d1786c00d6f3d5edf30521ede3c3508f45fcd8817b08b244efbe2","53329dc341204517819a87aaa4f99557028211a265311c112f8e7436506d600d","6c3f332a35a1a41d6796ecce2ebd279f40a83c9ea09e2e17355cccf07e1a3d11","1fc02319a87be58a791b9e99679bff52491a904ad7e5a58552bb2d59cd166516","445de1d7ed5791b48f90d649177c1e84edacd4753ac12c5423fea801aab0b18a","3a236cbb3190b8444c7569b5f6624fd360f84a24b55021429c70507914cc7237","0838a9a6fddcab03834a8048f70f2f7789f143d2dcc544e39ba9da3284b781eb","6e2640ce84e3b713f04bcf34496a1552476b46f4e238c52c22443df0814749b1","dd1e9344580a7e5c84f178c6d6df7060143e5ad383d351d54b23ad5d2006a175","ff3de92826a51b26559d771769aacc55c0c29674c4624825ee4c83324e354262"]

Anchored

2026-11-03

Public log entry

search.sigstore.dev, log index 3665494160 · entry 108e9186e8c5677afd35…

Expected log hash

acb694f91c9f21a2aa3937fe2dde51ea325ba950847651b126189aaae43ab56d The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1793698916160","kind":"published-quote","locale":"de","page":"brand:smallpdf","quote":"Haben Sie vergessen, Ihren Freiwilligen-Test abzubrechen? $108 wurden auf Ihrer Karte abgebucht?","rating":1,"review_date":"2025-08-27","source":"Apple App Store","source_url":"https://apps.apple.com/us/app/id1485259500?see-all=reviews","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (8087c7bed987…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.