Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Dokumente werden gespeichert/teilen leer”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
0cd93a5d599c70c17b0179297bf2e1e4abfdb2d2fb997151000bfda99ff19a32
Signature (Ed25519, base64)
monL+9MAh81e7FhAWX5n8Vsw1qjHRrbcQTsh1jWOW7dN4q91YVllMwrPhDXwv8pjnbpkquU6OBbELiPpV8fEBA==
Merkle root
105661e0dc11eec81116882b16fd8acda1c827c70c95072f37f1e883085582ce
Merkle path
["0cd997a9dc86e0f26e42c8d1d24e75f04b00047e4dd7815a288dd0b579f2fb5c","0fc5f0040f1c8ea71ff0170dcdc9028310f7770554741c7a03046f2bf3d043b3","9759c857cfb7380fa122eece4816772485328f33d361a96c1a1710baffa48aaf","c51863b44fccaba40d2ae1e90c412daa958a98635723abdb492f0e82c88eb15c","2e04819ca505385bfce5fb3ffbbeb94a819d0b9cba26a751d01e8252dddeb564","21324b8e1004476971121b3207876797cc6d1f166118ec525f89e4161d11197b","e55dd26e6e2d048c016626971a1ae75fa5cd1d72036d43a4c15eb7abf91c24ad","bea2ea454a3f87613e942b0f74445ddb16765cce1d93ce82a16d3c30582426ad","aa9745f05736cb2d1faa11c8c93971050551ca228090381c75a9052124ac0163","612224981b382be1cebf60ba8a8589faa913041bc2d5a93c80212dcee729067f","6b252f43d4cc12603bac5935fb7ed9c77854c6f9dd3418fff08118fd8ac96fb3","7abb68ff7b8e6058b9df117a8053b5b61ef898e5c7cf32b89c5171c046632b99","a13ce97d602a228d6f3744d88932177f5fb29e4b2aa193e896f5d2f631ba583d","b7cd78f72e1ff3ed0e5dd5efc148786b24a846e3493df91cde1b58dbc82aeeb4","caca5e74ffa93053dd1e9893a23cfa4dcfa7162e5f4edbc1eeeead1d2f6b0466"]
Anchored
2026-08-25
Public log entry
search.sigstore.dev, log index 2582642691 · entry 108e9186e8c5677a5752…
Expected log hash
27172a9fe70fe428b6fe8e826e1330766adb69879c24941ce10f104786789683 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787628738977","kind":"published-quote","locale":"de","page":"product:smallpdf/merge-pdf/de","quote":"Dokumente werden gespeichert/teilen leer","rating":1,"review_date":"2025-09-04","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.smallpdf.app.android","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (105661e0dc11…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.