Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“gibt dir keinen Weg, das Abonnement zu stornieren”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
08fc48b797434f441abec89ddfcac8646138798bb75b1f6170adbdbca4b9af72
Signature (Ed25519, base64)
8NuJCNg493tXeDAD7ompqHeAOUN05PouFOf4KZ2IzTww/Y2yCC4Ruex1Ufrp3JtWuZjs659OeHmT2zhy6sqRAQ==
Merkle root
7c31845ea005068c52611e47ff2778bff3790bf9c71538767447b45fe79322da
Merkle path
["0900c55b02bce118e66b75bb0fe2446637deebd7f66bb94916f35f8390623b13","0691ae7dccf96a51d7a3a0288b5762ac13b22ca967fb8bea9d6c8203af139196","7e3f09d4cedd6f87b21877627c4294bb05d921f0ab00bb5dc0d8d34c38f2215c","fd34bb854a1266a1fbc7660dab4c52bd43d0e2c877fea9caf00768a8bf7a3fd0","54185de126c8272f8fd56eb265eaf8dc061212df747ac3304e784cfe78195562","42a24123907afd152b8789bb7d5a8e39d0a8c5d39a0bea11e121929e9e041135","dbe8f25ec6dc89a9fc5d2fd1bd612281028060331967960694572dd80dc4a6d6","ade034932e873c7028f5f45f0eb4b980163e9275e7fe8d46dfdc59977d489610","4be92aa2412dea7b04e3d2f43664273027a86a4d69dcc48046a9c988763c0db3","112798e60cbe649360bf0e691d77f14be3e25c5d9e456f9b064d266ef78976e9","d725721ef4e46a74ffa33a5b3eaf5461c6d90eaf7c1f1f95e9c66dcb49eb98e3","6ceae28d9d9991c7f0978d9583675f513d5a8b980f19419645347989922bda23","de406c010b9d09d7f74176c9d423f8d72b745ac400e2c0cfcdb434d0af8fcade","e49018058753e3439518d8ba4c827c0b343729e39fb424281e6808f61fcc629a","4f862010adf0fcb97b6b2b8112f782a485805bae9f9783a7b39739616b9b62e0"]
Anchored
2026-08-31
Public log entry
search.sigstore.dev, log index 2657817117 · entry 108e9186e8c5677ad3ca…
Expected log hash
0666b5f97f085fdfc4cedfba58ac7e76857cdc9faa5a1032ef597cdb93024c5a The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1788148095319","kind":"published-quote","locale":"de","page":"product:smallpdf/smallpdf-mobile-app/de","quote":"gibt dir keinen Weg, das Abonnement zu stornieren","rating":1,"review_date":"2025-11-07","source":"Apple App Store","source_url":"https://apps.apple.com/it/app/id1485259500?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (7c31845ea005…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.