Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Ich habe 9 € ausgegeben und es macht weder die Datei speichern noch Signatur hinzufügen”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2683647879

Proof data

Record hash (SHA-256)

0ae22a67da0dae44f7471d91783b14298ab253361383add9ab68021d0f6ba0b1

Signature (Ed25519, base64)

JIeYerrNfTy3+MqqVUi9VP5HtZnVcsPZSacF3pppS700wR8lBiUw7whjuY7mFcCWZMDdaVteR751A/NqgB9dCw==

Merkle root

2e3d871c1322192f29eecddde09b1d60f3198d79e780fa1195a664b4bd06a864

Merkle path

["0add8cc5d938d415ab714d342787542d57adaca11a9122beed5595fdf36b122f","361d8d5cb1b11ca4d4b9fa727ff36215d7aa20b7c1c386c2b2fe37834f0b7ae9","f25b700cdd58827db2fe4b4c794f0ffec21cba6dedc0c1cef9ef986048cd8027","c965af33a647b2bf70c1abed04e58997dbafe6add1b3276d71a4824cfda92d6d","6667434899ba8cc5672950c45cd93d62ddfc75976efaa025d905df63c367de2f","767ced93ddf6a957f0deac42ebce07ad4acc785db54fc7167bcde329dfe69724","4a55afb3696a6065d7928c82a53527b6d44cd45d2ecf7db20dfa4bd2ebb276aa","399984ce91bff843898d7f608b9a3519b771038764697bcf3978a7c2ae504f72","194ab3917adac3a4c5d8a48a737b023536082027abced95afdab9728bc68cbda","69809b58deb29acb3bfa81cbefe20114934a9eaab74bdbbb0c33a37543b819a7","8de13ce033734032633729738c3f45000a50d2fbb1cb6a3cf8b071323d95c8d0","0a3d33fc893d1918590ed750d53fc85f13e25e4f6ff7a207d21b4e073de50d53","2d5b9611d8c1e5387c2a259b0d33678f993a76db53de4243f9d133a0209868ec","628ede9e9b0730d1cc332c261be38ff7c8dd0481f36e9cb85c838852e27c80d4","8951511b8bccb72998a9f731e365024a5c886ecac866e59c397ec696591e8130"]

Anchored

2026-09-02

Public log entry

search.sigstore.dev, log index 2683647879 · entry 108e9186e8c5677a3d9c…

Expected log hash

9b4e6e5ed792dc8e5468e146cdb00002a33cda5d0fe16d325e3fdc5cc54bfd3d The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1788327458165","kind":"published-quote","locale":"de","page":"product:smallpdf/sign-pdf/de","quote":"Ich habe 9 € ausgegeben und es macht weder die Datei speichern noch Signatur hinzufügen","rating":1,"review_date":"2024-09-13","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.smallpdf.app.android","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (2e3d871c1322…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.