Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“es wurden 5 kleine Pakete gesendet”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
0cf736062844891ce1931a7aca9994a2f49eaeb86bc6c93c36371d7b2d16ba74
Signature (Ed25519, base64)
aZcH1tQVhx1dzHan4z2OySZgA0vWVRW5zAvxuB1+jkQekRy/ptino+LdEqZrQY9yP6GWqlsMQKi8L5+ogOCoCw==
Merkle root
6bd03116d1df73ee816d8573f8d87ba041ae736e1c5e0e29e12049d389eb01ca
Merkle path
["0cf487e299abcd60c69fb8eb2c25e60a54763d001bdd5df7ea1eb64a4d06bdce","3c85b0f30d3eacad273159d5874e7bf940cbce66b1ea5e58e7b687ac3ad32186","b1a17ac8129ee6a2ac43a903d2819b1b000ad74ccec67eb30b0b54b29296a3f4","db112a6f59b7943945cd0d4c523e6347ed3b76a0c24d5039515944799ef5c834","d05ba9b46f840916fc65a68701efdc62b0777385b0536dc4193ddcdaaf197e3e","300b3345dfbdf52703bf31c64f3e4c751e5eb012cdf3a07e612b877f1c0c100b","3ef8a1882f81ccea0f6d54d0563266891bbbe84437731eb718e5639e4426a642","7d9c197437c725552281fe2085e894a651cf0943a2ffc96613b7708ba9c52cca","af19c4cdefdd401043954b847a729cb5a54e294b58f9b1b8e3419db7e06802d3","8fd74f9bca91ee387f5fe2f0dfe1e396b7b2e9729e75678cfd62c02b0c1cf8cb","a1343297ab5299d07f23f24145e5e4a8ac2f9c6ede7407e94f69d9db91ff63f4","7edf61aadbe6b4f9fd48fbd7dc1e8d8957e01ef9f4925a0b74d6dc4d105c8407","be04fa10c065961516fbeceb06710578102f1a0d8b858489c7b3e5b02db19f29","9472f21a5aa921bfd0c2769d4cf925e02a01393b600a7d25900b0e047e3399c7","ce7feb6c28bef73166d5bcad2419a89447fa0c5afed564615a586203d1723fb4"]
Anchored
2026-08-25
Public log entry
search.sigstore.dev, log index 2582588254 · entry 108e9186e8c5677a9d8b…
Expected log hash
70017b2fa4804efaef56e3a9fac6e10ad86cb0524c0c60b33fafc6203b9572eb The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787624634880","kind":"published-quote","locale":"de","page":"theme:ifolor/packaging/de","quote":"es wurden 5 kleine Pakete gesendet","rating":5,"review_date":"2026-04-12","source":"Trusted Shops","source_url":"https://www.trustedshops.ch/bewertung/info_X309A43086E7145E358EE1687E9DF7162.html","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (6bd03116d1df…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.