Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Findependant deine ersten 1000 CHF kostenlos verwaltet”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
0a95bf98618b6ed823b6bf5bbebddefe50166da65308f4acab0786dc172cbef6
Signature (Ed25519, base64)
nRuI/FHlgvRQOsivl1taABhIaJg014jZLCI+jp7A6g5f042IPRXFjKYiQ/XivFgNyGtLgHE9t2uh2k1CftVTBA==
Merkle root
61203b6d05350adaaef087cbce75d25fa5ac2036c1a66344255fc73a224d39c3
Merkle path
["0a94d8548f3336d1e45349ea975e2fb2cb1d51828f483df32001cefdf1c03d63","8d2cc3c9e576067a2a8f510f242f04f021ea591b63d6f3f2430c72bda1b9aaf0","62db689cb28dcba503faed6d27bf45c2ffa491f50fa71fe0b860ef5606ca28c1","701d696007390f3dbdc34fca24d9c54f381a154eb26bb6fdb8bbb4980a3b6d93","4a632cb6d82adaeb6c05ac030d34c57b81b69403aa3192949bf73fe0f2ede267","e91dac15933d2a38e6e7d4bbd5cef746938adbec7f4a994a24075237c53b316e","69f3fc3d2aba7d26f63795673cb8ae2fe3a79db003e05c655fc0d61f914b62ec","a7c3c643203fb57bb7fe2fd0381ba8009c7625bb75fbac2e5dc129e506308a16","b75470af107662e95fa8b83c6a7b02ee65063b4667b3f959f804da88fd3fd75b","8c565578184c1316e1a9d0df8f6658af2d28b3d26315a909439460464c9691f8","62486c8825ff0949ac6746b589be7262df462874dae1682cd3436d938e9ba659","8afdff2ca8b2758b5b0a7067dc9e41d4ed7f1768d5d4f86e9cdf0bf1a1a83f9d","6ecb3415ebcce01953d2d375e9a79672b399b8e76883ef30376a8fec1196fbc5","ec52c14d031b4094aad3b2c7f7a2d0de70de35e711cf6959d5681568f51f3cd7","d35a1781f2fb2fc9cd66aa22e2ed6cd805ebe75af0ac2c167c3e4444a0a6f362"]
Anchored
2026-10-06
Public log entry
search.sigstore.dev, log index 3100032352 · entry 108e9186e8c5677abe62…
Expected log hash
0a0ca7b748f6c99c5a75a761289092bb11c807eeee08be8ec366fad5b0bfd2d5 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791253605372","kind":"published-quote","locale":"de","page":"brand:findependent","quote":"Findependant deine ersten 1000 CHF kostenlos verwaltet","rating":5,"review_date":"2026-05-18","source":"Apple App Store","source_url":"https://apps.apple.com/ch/app/id1510962836?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (61203b6d0535…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.