Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“In itself a good app with simple operation.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
0ba7d6f67b0e15e4a2a5eb21fc4df69171d1f6b4248c51d65054f06092565bba
Signature (Ed25519, base64)
CUBRctoaFrRUHHWs41LKn6jXyE6Jarx48dvbZ8lpP7OkEzTUmDVl9Ri/5fGnnRwzjEExtnEVsWgHGQNCPuU7Dw==
Merkle root
6189a42bfe294c4034f316d047a716a5efecb511b8dbe64c4f7f543872c9bcee
Merkle path
["0bad0007183b6fc12736a0524410ee5edc515f1144efcd42dbcd1a1f8dab1088","29750e72b5a8c7ae6c72cfda462a331d2815ebd5f6432a4626230b1d0c896be1","f7630339eb7c1bc6a4be522c819610ab9bf6a7ad81a950e02d16198b8bb8a484","e44e1940c317aa0ae50ade40dc00dbdc0968250116b16d9cac86839bf803213d","50b3c0a38399354e58df0e76fd3b627313c61b6438baeb649a54021167e19b0c","fda37ae31c50a73f3d083b8d7ec4be2ea6ccace4b91efa6a281e5c747c56459d","ea6349ce304b9539d774d94a53d53a3948b888db799996714ed27b3ee65c2c34","301ccf5af8a733d39955c4a65ef0e56db4b272bcadf7d03f4f19824deaff81c2","c07816166f3df6bc6980899a913dfb0114e8e7f0057c79d93c0b6620cb433d5b","767eec97e4bb91dea380bb954db02b0af00e8ae98d2eeb1578cd4973acc3ca6c","5b8d56b067ad922ecff2f16d30031da957f09e0b0964e83af0d1f747af2493d5","228781b612a0c77f141df0e4e12827753e4b858f9d480116c6ae58d010c6d043","b958a384cf7d9aa03e4b31b4f9bf91c7373d0ec1d74c1ada80be4b2b501d99f5","f786ac0debae9f349ddff34e280cc8a64ab579a73e0a3d3745d84df0612234b6","e36acd56aebd26af88e4e41e8d5bc2a1389f049dd914bc2c3da8d68ac2fede4b"]
Anchored
2026-08-19
Public log entry
search.sigstore.dev, log index 2514188040 · entry 108e9186e8c5677ac9bd…
Expected log hash
b0fc1d11450dfeabf778635bd8a8264987fbb7e682331541ce1f5d7507d4e862 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787125125654","kind":"published-quote","locale":"en","page":"product:sevdesk/buchhaltungssoftware/en","quote":"In itself a good app with simple operation.","rating":2,"review_date":"2025-10-09","source":"Apple App Store","source_url":"https://apps.apple.com/de/app/id731738076?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (6189a42bfe29…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.