Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“In my opinion, the packaging offers too little protection for the posters.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
0b4cdc5a9cd3612165cab7e3303d1cacc24a070412c02adcf88a6c81172022ef
Signature (Ed25519, base64)
gjpfDPZWMSUMjat/YU9c+BvTiAQNMWwPgxAeVSyOBACXWRzKvFEs8eX++2vJt+syJQeQ3Idddn1gOAluHAmPDA==
Merkle root
5f465603cfecff8c631b83258a9f794433a9fe1f55c92c7f2359c24d5239d7f1
Merkle path
["0b486427d7f05bc4df1b540d850ad2618894f7a49fcd25a4b4da737218766a60","89815ef8cb18ae8a0214c147053dcabf5cb7b1d7de796a71738184fbd1a4a59f","7a0c7203b35fd1d9b3c90d6b92a275c181f7aa9043a021a15b709b018dda39cd","215858c91ce949c5a2013780900bd449a729993f91f01f3fe561f4e6db732edf","985cd580ad0e5ec7750ad442e5f8b86db6563be55c5360aea9df033a3b5db36d","8fc913c33c9f6eebbc27169059860f74b98285e58abf05545baa86d0ec90c9ce","ee8e3f6af8e53fefa7ec0b24b64b5f4792a4f82bf6e36876b72d131ffe64d2b7","50846276b18eeb26543de138a002f7a5eff819df254ff81a160493c8f9858eee","cc2a7541d7bae532826d994ef81ff2820e3a55bbbf7679e8b1cd42cd7db2f53f","928eeb4788392c689f5464ef96702fe10fea715539dc35b32d3da60ef71a5f9f","8e90d65bc561275b545eaf68944bf927d1435655a5023f6edb84cdcd36a78d8a","2caded3e2f34e05ae3efb016490f55ee18bce7903453e7336b0bc133b0f71bca","f263180059cdec95b93f28a9a635234e8f009df51d66181b902844414d966b85","3fb39940a6132e03e4fff826dda6ca0582558fc639bb5eb857201917cfd7b8b5","fc87a80257c5f9d9cefd8e12d2bc08e25e0ff70c414cc5debe7f697d0b1cfbe6"]
Anchored
2026-08-17
Public log entry
search.sigstore.dev, log index 2495157846 · entry 108e9186e8c5677a0eb1…
Expected log hash
3272f4e3e87c1e1bf0369f64c72e7fc63fcfccb2635eca462b023cee408b7ecd The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1786935515462","kind":"published-quote","locale":"en","page":"subtheme:cewe/packaging/packaging-protection/en","quote":"In my opinion, the packaging offers too little protection for the posters.","rating":4,"review_date":"2025-11-14","source":"Trusted Shops","source_url":"https://www.trustedshops.ch/bewertung/info_XA246759776EDBBCADB88DEA63E6E9032.html","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (5f465603cfec…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.