Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Konto vorausgefüllt”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
0f87f566fe5a42ab858017c805670434fee9a96f3346be0e0f86f872cf0e2426
Signature (Ed25519, base64)
HTlBZCdUnAh00C8oavseBmKdcACwsGMqd90kWSgduUO0KtdBB9c0EuWQJssOKjs75Ixk79LlEw32B8KtQlfcBw==
Merkle root
daceff63019f1382850c569367d5bdd590ed4595ede014f2eefb6ade2d806300
Merkle path
["0f88d0e06bd5cb49c403f33d1dec809210c88f44955aebc5563e1fdc30207743","d15a46274a00026824f25475ca416e44e0b2dfd872a8bcdb55248aa1847c5e1a","a21188361de253d32d026a0c1bb8ac61025894c9c1236be875d10262608ba842","24dacc5a02db84b5ee10172066958f380db861fc698127b02252fd53f59cfddf","d5ca8bb186b6d6b148bfbfd77c79b1e3b905aeb8bf2dd1b191e3a27a54572c87","67cc9823d94d1df40fafb897a490bfc42c580e0e197674f039ab151b0a5f9371","cba084ea9352166fdb2ea0db16959dbc597a4c1c1d5929eb9b1b69ead1882299","f76d93a760e42969a5b7b0709e87bbe1935d71b1ca1632d9e1d46bd3a296de5e","50e0390bdbf6c75afb5798ca2b89be76ddedc8bfed344e720d5f52fa3c72ad39","b167ff548d72cbf2ab46cf1b92d09a24622e2f1f63bad4b812383fd973be3c8c","c133d580b70ff862b0bbedf9018e47502e8b9abf231563068ba34c099e7a0eb4","4eb154225d75b2fc9623b30803eb8e6cc17e88812a8398c0b1cba20353eb7721","c9a5d3209bb3c3a2fc96073deff7ae1f24ae948fde60a1909715d29f710d4a67","658530d1379fb6dfa08978b61c4f970b14d7010c6440325a1cfcdd219f217d90"]
Anchored
2026-08-13
Public log entry
search.sigstore.dev, log index 2444811071 · entry 108e9186e8c5677ae518…
Expected log hash
2aa059ff0634c0f19689b671a4618bfc73026ceba74535f0e877ac13568b88fd The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1786572717732","kind":"published-quote","locale":"de","page":"brand:bexio","quote":"Konto vorausgefüllt","rating":2,"review_date":"2026-02-11","source":"Apple App Store","source_url":"https://apps.apple.com/ch/app/id1481169504?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (daceff63019f…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.