Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Versprochener Gutschein nach 1 Std weg!”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
05d661f844767c208c764f72460e0a69927ee5cdc43f54aa0360feb63ada6207
Signature (Ed25519, base64)
U/DHCuclFRv+CyiG/+KJA2dalH3lDiAnnd9tCpwuxBI+sB+eLcxYwpVygQNc9ebjDKaLcDAFiryVSnR616bXDA==
Merkle root
80de158564b7616572ca0c0059561f6ec90cd5bce49a388e61df989f3f6f2a86
Merkle path
["05d7c80e364c03970e1b9c0871a932742d68616201d8aa3e075adbdf6b5e15e1","b5ec2c4fb9ca3780a96641c40e92e1471be874d1e2944a6094463ebe30049c94","c75ae918b279b6575e6c9358266c87074b2fcd4e7bf415af74fca5c49ac3c5e6","96dca72d9affe65779c890b24bd8d43c5793110584c8d524a09c55aa3f5f986e","4da0972a5ff43b44b609dd16de109f221f0e53216089d61347bf120bd25b9a26","801abfabd22dc00b51cee713b0701e6c7c4b42cd8fa465512df21d326ea67df4","5461682ddcc0aee7c479c50ecd11d0fd15f80e9a1fd1969401a5bcea50af5e57","d3a3bba575509d55aa84f31a80c194f0894d60048acccf955fb8474528db7ea8","26459ec5fd3eafdc24f357313da83a10813a04ed7b116e60f307c2f4127816b6","b24caf674c3c0ccf941c1d002029d005890f09cfd1f6052938a92afef70ba905","8d5894daffd6dff13a35e221a89bebd1cfddd8e7a509dfebfa987d62e5e6170d","a555f13c6c97c193df7dcf9c4acd43c29481486a25c64863a705825840cdab19","c0d3c29d57b890f7faa23830cb86c1df3b164402674908e09950b515624cad23","f23007ee336c6a9903bdec729de4dd7e96694a7e2f1071f195563e9aff8dd97f","68889fd35b89925b8d265e65260618471cd9c2f5458718fde3d6cb3829d8f00f"]
Anchored
2026-08-19
Public log entry
search.sigstore.dev, log index 2513802575 · entry 108e9186e8c5677a9216…
Expected log hash
5899b5d0ea18fa3c879147333708054c2e3cd77662f2b6f633aa3b5d5512bbe5 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787121142818","kind":"published-quote","locale":"de","page":"brand:pixum","quote":"Versprochener Gutschein nach 1 Std weg!","rating":3,"review_date":"2025-09-22","source":"Apple App Store","source_url":"https://apps.apple.com/de/app/id1319898516?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (80de158564b7…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.