Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“I have been working with CEWE for a long time now.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
0ae43399a981373121877c7a64828398aa78dcff0df2f4b9b411ae4a2731222f
Signature (Ed25519, base64)
Gtl+sezdZ6VHUN74caPiZGZ/61lgLExNm3wuiiC5Sjz8lFJgNzSMHlrT1k9sagKnrYGQyvKMx0jmvSrziKNLCw==
Merkle root
96fbff9333062c6f240ebc674c358d11c91e32417964c7b74e7a085ad09b3148
Merkle path
["0ae4c378a925fddd780606eee8ee3055ebff997a11565f763f8cb9dccbd5742c","ce5492d7463a7e4276d0f65864998e8211d058e881f35cfc8c156ad3f6a387ee","cf5808ac0fcfede4eb28c0e940f6291bd9d1a2df91a391edbdcb2f9164e16855","1883073046403b25cc2b1c756893a018910f17f894e5cfa7a7a66831304b741d","1bcbad276b6b28dbe53536e3fce26e75ba70107ca3535e521b8a3083c7745b65","378d77eeda3b2bb6ecbcd2f53150bd72955395c611e307d73a227f8506ee5929","e2bfadc686298d95dd6f5091cbdf13c1dcf98d0da757476c86e385bae596f397","2a566dff540757671adcc776c3a22fa09ba156c525a4d970eb0e31cda9ad8394","ecb85b6cc4a817ed52e0b7eaedb84db68ff377fcc3f61dd6e2671c2e472fd9bc","ebae1d59b203c7e7be7108a103e45c0dca654653d61aa95015f17e44271ebbf3","cbabb4f88d5d161601f36440a16813353b1cfbd132287ce15dacfb167930dd08","94f788ee88a3a5d0527e939fc2fb4326b3a860536a5801cfffd8d3c9817768c3","79a4550b200fde9b3a943415990b5226f73c8c365540528c8ac5ff0f8d838204","392c4ff19a61c37ccb09c095c4cdb0c4164ec867c437a8e3033cfe3fe2edd46f","60ceee9d6856471604c29353be774f78386c382c47f03b784bbb0ee7fd843f1c"]
Anchored
2026-09-02
Public log entry
search.sigstore.dev, log index 2685152720 · entry 108e9186e8c5677adce2…
Expected log hash
b48044e152c7f9f6bdada08baa42518b66cab68608ac945b90bbbe4a8f1ed0a5 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1788347082424","kind":"published-quote","locale":"en","page":"product:cewe/wandbilder/en","quote":"I have been working with CEWE for a long time now.","rating":5,"review_date":"2026-07-12","source":"Trusted Shops","source_url":"https://www.trustedshops.de/bewertung/info_XE3D21EA81A56276ACEED1C9AFB85F941.html","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (96fbff933306…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.