Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Speichert gesendete Dateien in der kostenlosen Version 30 Tage lang.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
0c9c8802efb3df72df13ade073c718e47eaeb6b2fdb38031692b0a7d1780f297
Signature (Ed25519, base64)
PgxY6VfymrOH1dtpOsxJo4uzVP0+6e9+31MwsbtRRygifD+1I6ky9YULmbn98lo3Pxei5tVe+aCxb5b2ulNACg==
Merkle root
cc9af896bdf0beb88857e1dcc841c404ccd4c59cbcb6932f17077fc8aa87fc23
Merkle path
["0c9a2886ccecb9683ba18c417af11422a17d4ecd961f4090813e4a2d3424c941","c72371cab42e25f49469a8fffbc5ddb6c6a7c0c7af38bbfb4347af17fc4a4569","bb78321ca5fec55ffa14c990f606c59785db9b0d47f1190a5382691cbd771c45","8fb0bfce217ae89ee95598bb8c60e66356ca4a7d35b4a232c19534fcfe1e2ee2","a086ab2c1d89fba9e0d7b03f29a0e347ee6a4e5d13c7b36f0e310298fabf5257","fedbd82400c420e7817d2a00a2a02a4de65a4cf909bb8c53c4dc31046557f249","0246fc22746760124c11b5cd75d8b166ab72ad6ff32281141ea5f1c8420bc628","128f0e2da60abfe4a99e62a5db91f12e1660ba9897a2532733e05dabb49e302d","0ea4803f7728f53a983fb67ec55c7588364acaf0e3c637135c2ae365a1e40162","3031aafa0e6c082e413fe6ed9bc80f2cc95191b3ab0073c2af3fa222b70647cf","fecc5e9e30221291003d1a993aa8910b3659fa173cafcfbd67671f76ab66d39d","1c2809e47d2975b766ef995b7d10124aac0516db86022be7da7348399138c170","4372dc9da9497fee58c424202bb40227ff1140a098c2b49beac2f4c4ae9a0331","0f351cde6b1d9915cc0e417c0e2f1f0e3b04741e1975a4ad546a8eefeb399e09","7e6c62c2991c7cac05134c9f9e2ab89c75f6106f706f524eb2e9fa9f554216f5"]
Anchored
2026-08-21
Public log entry
search.sigstore.dev, log index 2542751096 · entry 108e9186e8c5677aaab3…
Expected log hash
8251ea19feed4cbe325f48ba93f0e47294878633f5d43178e4a3a023547e795b The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787281943761","kind":"published-quote","locale":"de","page":"theme:infomaniak/durability/de","quote":"Speichert gesendete Dateien in der kostenlosen Version 30 Tage lang.","rating":5,"review_date":"2026-08-04","source":"Apple App Store","source_url":"https://apps.apple.com/it/app/id6737686335?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (cc9af896bdf0…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.