Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Der versprochene Gutschein auf Erstbestellung klang gut - war aber bei Fertigstellung nach 1 Std schon nicht mehr gültig!”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
0cfa4f16b462c13c6d6a575efd3850bb8040d2cd31d012d1b73a8c8882c89ec9
Signature (Ed25519, base64)
usZu/omXLGy3n9VvUUI32pGDk6bsBb8O/lXa3i5ZBCEWGqzxRqUUHvEYrQfGGmK98tz4CR4O0mAtV+/c2R7sAQ==
Merkle root
fd6fca9e7cef37aada941aac92decfcc64f6ccf1f80e46f326058d1dbea3be25
Merkle path
["0cf9452bef95fc16c6daa6baa144becaa8161cecfc2f575cb937e9a0e0899516","71667c3ab24baf49bda37b4399dc72652a2798842fd57df63d8de4fcfdb4fb94","dbec3549b832237cd1af21e974a7a9c034fdd4c0d1d2344ce6b981967fcad78b","a9d38f383f30c684aab788a5d47b06a1fbe797d317c8406412281aac1d1c8bc5","5ef9cb54f6fc43656858923c05ff95a577761ded2ead4e7abd9ec8e1ef457ced","ec829ca4e8c7efb5278904a9a5a122ff91078860db8447e7540e64cd5a56b78e","06dc014b4fc3e4eb2e79a7681c8a2dfa5cc31f75328804e90d15074a5e3fef79","dc0de3c411cfde1b420f354f609e04cfc631c0c5922e48091e65110806dbcbe1","398e81b6fb7be7e122cadc6bb30359a5c4f92df2977193555ab31a0b743b912d","0c25b6c81f278aa26af2b67df996075595b698aa6343f53dc05376aaca0da2e8","837e21a65c2e7e9a1ce78baaa0cf6b585e93b4b3d71a69b16e8ae761b6912a16","9920afaecdf2c0fe347b654bebc1ac5233b2ab1d10b2ded7a1a817299c6d2453","f88aa868377e782be92c7bc17cca7fa56bb539fff729ac4b230ecbae8fe3bd50","af8b7672f7140c4d5f8cf5a204256eb8a0fe0ba6770180d832059e5b511f691a","d2a30b01208ae5f7745e5c8a474c1f34f9628e43b7a0d1b0d1ac6b378b7f866d"]
Anchored
2026-08-29
Public log entry
search.sigstore.dev, log index 2632025295 · entry 108e9186e8c5677a7e39…
Expected log hash
327cdca6f67e0b8900de427ba632e65f297b0edb716ae3a08de15ff81c0cf3b3 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787971088504","kind":"published-quote","locale":"de","page":"brand:pixum","quote":"Der versprochene Gutschein auf Erstbestellung klang gut - war aber bei Fertigstellung nach 1 Std schon nicht mehr gültig!","rating":3,"review_date":"2025-09-22","source":"Apple App Store","source_url":"https://apps.apple.com/de/app/id1319898516?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (fd6fca9e7cef…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.