Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Es ist nicht möglich, alle Dateien auf einmal herunterzuladen.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
0782d57da28ea043670f77d9a11cd06e8d5e04a6150d512bd98a78f57fe48502
Signature (Ed25519, base64)
j7jUfvqwlNF4jta/HVaqfqpSJbpp6A6f4XDbtb6aNWX7DO/XNIlur8L3Ed1lJWoZqigoT8/qfRCkowv0qgkSBw==
Merkle root
fd1a602e44fa6ba18366d47a3f265e8867d3ace19a93c5a056eb72338ad99351
Merkle path
["078801ae29dc7f4cd6f1d8925ed21fc11c2dd58991cd564f86e115739905c3d1","051f1f48d1d0daaeee936c331b7843171e290e5111f4ab43f6b5efa08c984c91","e4c7c5cbec6bb813aa7dc22a4e597972ad54bce8f30e6efb25e97ec3ae892a73","7be27e8890e03e77558a8f1b8d814507e3f03a562e43daaa23b8a982e3a275bd","1597692f4d319298dd64e09b51038cf4777766fe2b61187442dcb5b0fec839a0","c1dc1f689dd08582a7f6b932098a28328fc6015f491604afc8f49aa2bcfc77c8","fc1949483e0351506a84515ccc2c7b19c65fc5ab345c7f516885b8e3ad6f12b3","eb00d094d67d6707c68753c2ffb8ac243d9c8036e40403b53147876ef0f7d807","a274f913b8c30de52eae19e655eb551fc46fc20de0023115d4d529339e5c087e","ba3a5b9e4d5cf0bb4aa7301df756e0629b5b0987c717d5f5888b01420db86106","685fcb5242493a244d2cd1e14ba7141c71db49dcddd25964a14c578531736e5e","d212de177180ccfdd437ab775ac34de19d5aaa50e4426cd098f232c06f5420ed","4b583a6ac00c2e99a7add01dfb6da23772643e2ed4f17a5481f85668381e4235","2378b1f4ffb68987809fa6edceaf7a29de059238214cacdb28aaf8d4fac29206","3892c8cf6eab6a42602f82120d415bfe3619d03fd8bb7ea92db6f133736d9c97"]
Anchored
2026-09-01
Public log entry
search.sigstore.dev, log index 2671573458 · entry 108e9186e8c5677a8dd1…
Expected log hash
5a4f32b3215d6831d3b044c579372ade08bb930ab401eeb59812a3fb27e3086c The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1788237136291","kind":"published-quote","locale":"de","page":"theme:infomaniak/ordering/de","quote":"Es ist nicht möglich, alle Dateien auf einmal herunterzuladen.","rating":1,"review_date":"2026-08-05","source":"Apple App Store","source_url":"https://apps.apple.com/us/app/id6737686335?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (fd1a602e44fa…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.