Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Die App dient zur Bestätigung von Anmeldeanfragen.”
Google Play · 5/5 · 2026-04-17

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2882354328

Proof data

Record hash (SHA-256): 0c4656fad0af2490423908441461a8d594635f8d0e6a090c29d9895cd58802ec
Signature (Ed25519, base64): OJpHMEaRB4GozANbm5x1SGKp+tQTtbAh86U8n7/UuB/OHzO/mxRMTax0EYRlSoNVnPSbzOpspctknPX0WzOlCw==
Merkle root: a893faa173c6b378c8d050262e841ab57fdd89b71985eabc0906c40abd5b6a6c
Merkle path: ["0c4e5398cca407dfcc75f00a8c2561ae45b0bd3eea9d640db1a6b91c16fe9136","a6c4e333a0c2bd4beef2b9caf9cc1c6546f65a891735be352bd488bddfcedcba","2f1dbf94edd7ffa13840d32fce23525db27477dc76375f7d1f0cba9d1657f9ef","a5c65b3f6ef24abc983719dce37f5633b9702b66f00cafbe00e233723d55e39b","8cd869a8d30242fd948f34087d0cd63bd9e5ec2eb2e8f799f78d125740fd79c8","060bf1c694fd7d1d22a4cc239da4a1cabb1a1494b1d153c92b13046ad7155739","4efff86ab5a3798de5329df1c46316a00ea640a5670fe7dcb734f8a0859c0109","57f8c87987751f6e5f9baaef8c6842f9f0d6e5370ccecf10aba2fd9d7897b2da","c50c514e0a2bb12bf8ebc3f0588bba317d8c10c3848fd95ee38f40264f71952d","2fba17a632bd0e32d3df70948fa512af1d6fcce283912fd751a0821642b9253e","d7989a88ac1bbc0beb5f49533be1133e2436d83724dd146628bfc14c39460756","eeb0191e819461d67046e8c9e0ea5e35d219e9b877b9e670c3710c5d41b21c5a","ac84b40c079795f897b874e92b06e183fd354538d22a2dfa07d743913040a0df","71601cbc06cc18d15a7af93021ee7957212de37616a4dedb4252c015daf6350d","5153df72155ae00831ba1e4416296382c39280ea82c989972042c066f445006a"]
Anchored: 2026-09-18
Public log entry: search.sigstore.dev, log index 2882354328 · entry 108e9186e8c5677a08a7…
Expected log hash: 5510a497abfe2e680a39c301b0d905c2a575bae0a1f389fbdd7b86babf05240f The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1789619628558","kind":"published-quote","locale":"de","page":"brand:infomaniak","quote":"Die App dient zur Bestätigung von Anmeldeanfragen.","rating":5,"review_date":"2026-04-17","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.infomaniak.mail","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (a893faa173c6…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.