Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Die Schachtel sollte auch das Puzzlebild enthalten.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2656977863

Proof data

Record hash (SHA-256)

0b6794a6df5f1e6c7dbdf8f73b3e5977e9fb0572870a253bc02514582165d07a

Signature (Ed25519, base64)

3BHEe698F1cavS2PMC8w70aGh4v0yNFjCu2Z+3Rq6+b9R4p2a6KWO+d7ySjlXVbSHNzHphb4vDEIypOvhrSZDw==

Merkle root

0cb6814e51c7eb056a01f84349e58060bb6087dd0cf96aef0f27729d4d4fb276

Merkle path

["0b67ad1ff9436ea7060eaa1cc04b0e0e15c3be298b5d1a820094a6860b737a31","29b01662eb9c5cfa0385ae9dc217c00b205d50dba3da1c436010e5777ded08e5","243fe553211b93c905566119f70c3971ef11151c9cb714d687d062865f983d4d","c45d1ed3240271d69f14895e4ff931109ec8a14881282b966d9f99dd76e01e28","2263447ac11a073485983fdd9d16e9b2d35e4eb93cecc8cb0ff6cc39f8f0975b","92c0c799ffde78c5791eb4d6eac575a35a85faeae22ff175dc09fbc29fd76204","2f2fc6f937a624708a507e5df6156595694bde2d8c95e134fc8328ed322ea1d7","947107138a5bb2c2cfc7bb8826c6e69daecb2ccdeba825e64cfa0ff9a46745dd","bfb85983633aaa99c6c9f7a8843b3f51e07943078355de90ecf2033dd9780d1c","0b47eb4e47e3c159b9612bbda3750bc806f9e831988fe3d33146386df66a3918","26d22d41c53f71f135913884383349ce9225cab8d1964ad69ceb8f6a7f41975e","0e7b34ee57018ab949f6230ec302cfa9f723792d5fdbb493da70978b6389c9e3","be1dd0e45f7494393f0e1b32c70d3c985a66f040e38a68aca73948a6803cfeda","2518affc97ecf822332e259f6b71ff1d6b20920b0b5c6f8e1080f3c11eb6b936","af2962fc61736883c7077a83c82f90f0eaef6320643194fac99217c4f69a9d04"]

Anchored

2026-08-31

Public log entry

search.sigstore.dev, log index 2656977863 · entry 108e9186e8c5677ad8e2…

Expected log hash

50611b695debae6fb0a9929f4c3d2c8dd8c51d8e8342a15fa077624a80d81709 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1788142253421","kind":"published-quote","locale":"de","page":"theme:ifolor/packaging/de","quote":"Die Schachtel sollte auch das Puzzlebild enthalten.","rating":4,"review_date":"2026-05-20","source":"Trusted Shops","source_url":"https://www.trustedshops.ch/bewertung/info_X309A43086E7145E358EE1687E9DF7162.html","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (0cb6814e51c7…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.