Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“eine sehr übersichtliche und einfach gehaltene App”
Google Play · 5/5 · 2025-12-19

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2595408668

Proof data

Record hash (SHA-256): 0e9ab20b0dbfeb7c3e5019f317c5cb1a006f4616804e4c526614af4b36eeb8e2
Signature (Ed25519, base64): UJqfx0+W+EU/KIh9noi7b2liy6Oo3riMryOzbEGTB49PRmHSHoKzFX2wpnndRLxY1CKtQhv6mekKxg9IICCdDw==
Merkle root: 7b9a4691b4a07ac5d1173e4626ce63916affc643ede736e9a42881218d31d172
Merkle path: ["0ea69f424adfc96706c4bea52a02fab428e8dc69b649999aa8b2945bb982374a","ec288d6fb046b06e4ced7b3e5e5ff61b8acc0d4dbb741f9f87c8b88ce1dde9ee","a9bd6f656b3e11df8a7efa3fcdac29bc04edad676b2dacada0c0c7c9cd5b4c99","4ed96544781bae5e47728aca6098ed9614cd9c482b4cf304be4c24445c15ddd7","bb70e19682a1a9532ed8bec9ec5443025c50e727c89632c417fc3263f780c1c1","614a03933cc3ed804e562bb127a9832e76186797cc24fbed8846cfd60a859511","09db1df4ad376280fb8490b99491565ee0908524db54aa54df61823ab38f556f","77172e48ec8128b2252150e661e6d866cf8b1db17dad5cf768ce71d2ba3ecad0","e5aad05a3c783297938a493f7118b1e1333788d9f9d1f0b86f823323ebb1a37b","29a2e3218a6932024d692a2326c7686c58208bf6e86edf7fdf4f6611fbf4aa1f","c3e223ddb2a33abac9d6b7bbfcdb227b67cbec6b0f3c08f7058e148cdebde1f1","21bcfa0a5403e9274d8e9091c14e04623f5ac4426dda825a46d0463078e2790a","7406413224613615cc5cd19a127a6e24768c7c8638c392959ed907b3dea0b3ce","1a45b3586aaa1d52bf0d35f80f59c2194992fd40a7bb573af53ca4a9c5b2c40c","e08d96326ef8a4f2d48853bff915e1bfc3b77e83a5f37428fc0c18a79558597c"]
Anchored: 2026-08-26
Public log entry: search.sigstore.dev, log index 2595408668 · entry 108e9186e8c5677a623b…
Expected log hash: 7ea3454fafa335b6d74b2f12cf180783c952ccc9a9ba89af7d5ee27b01e07154 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1787718572132","kind":"published-quote","locale":"de","page":"product:findependent/anlegen-fuer-kinder/de","quote":"eine sehr übersichtliche und einfach gehaltene App","rating":5,"review_date":"2025-12-19","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=ch.findependent.android","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (7b9a4691b4a0…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.