Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Kostenlos und werbefrei!”
Google Play · 5/5 · 2024-08-18

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2632025295

Proof data

Record hash (SHA-256): 114ab59486bdace9aed0d64c72849d133f0240e65c8076976b05b8f712a091fc
Signature (Ed25519, base64): 4zCoJ2ojAaiKWDPC2WWZ6TiAOir6do6Dd1nAtnNkd6BJ7ZOWYYwzV5cCDH4jvOUnShdKdGO5ZP1lMfmxalqcAQ==
Merkle root: fd6fca9e7cef37aada941aac92decfcc64f6ccf1f80e46f326058d1dbea3be25
Merkle path: ["1149b56db8e2cd6f72a95a8fa6b0ae31787a193253e0c90685a4152687297fe5","c14f3d39d013777d0725b3835e8ef4de2604a020939e972c5720ecadf52485f2","d4b8f142557c61cbbe51c04651cce2e48889fe8817be493152ee126e455593df","604dc48367f8874f0c33e187d78614d1b93a78b7387603030f2e1b1d6990dc76","1dea2a358403cce0d19afc46a67644fdb084d7081adc14689f4ec8e17e77e9ab","cf9197f830a22bd9be8acf56d7dd57a33bbbb32cc4d144a91de8eb252441a162","4b847e13c378e6a100455d8e1152253d1443dce18b95b64db4a2097e914e41f9","75556f9671c530dacf45e4f825002646bf4937c2baf705a09fef18575cfc9992","4b9c11e8317169fba3df4de21c499f31152a07187d6c8096cec1d92e5176cafb","0c25b6c81f278aa26af2b67df996075595b698aa6343f53dc05376aaca0da2e8","837e21a65c2e7e9a1ce78baaa0cf6b585e93b4b3d71a69b16e8ae761b6912a16","9920afaecdf2c0fe347b654bebc1ac5233b2ab1d10b2ded7a1a817299c6d2453","f88aa868377e782be92c7bc17cca7fa56bb539fff729ac4b230ecbae8fe3bd50","af8b7672f7140c4d5f8cf5a204256eb8a0fe0ba6770180d832059e5b511f691a","d2a30b01208ae5f7745e5c8a474c1f34f9628e43b7a0d1b0d1ac6b378b7f866d"]
Anchored: 2026-08-29
Public log entry: search.sigstore.dev, log index 2632025295 · entry 108e9186e8c5677a7e39…
Expected log hash: 327cdca6f67e0b8900de427ba632e65f297b0edb716ae3a08de15ff81c0cf3b3 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1787971088504","kind":"published-quote","locale":"de","page":"subtheme:meteomatics/ordering/werbefreiheit-kostenlos/de","quote":"Kostenlos und werbefrei!","rating":5,"review_date":"2024-08-18","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.meteomatics.app","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (fd6fca9e7cef…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.