Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Since I ordered the calendars, the invoice had to come to me”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
13584ffab7061b939bf92039374d4d425c166a53083089caf4c5357142db8aea
Signature (Ed25519, base64)
s2HZ6b+lbVHTj2+zOmuxB7gitbdbsdszt+X+k8z32IwHijPyBL/73La1spwrjgfqj0nEa5EUc5GzXYBFnGNwCA==
Merkle root
21e7bb8f2fd2dd8d8171a23c0a79176483db4731970a3fe8e0e328189fa103b6
Merkle path
["1355e601eb9a174221f0b462c5dbbba6bd0073e27e45aa20917c6d7e68be290e","714291753a095bf42a572d3c20bf137a47a5a2724f61d240ba0b7a1887daffa9","2f9cfd75bb3b89635ac4e09061b229321d6f33b608b116c05bd509bc8654aa97","abe3c6b7a0feb0fab62867aa288707c4271101834b65a4e063f7bf40c776c011","e99f649f0038c802698796dcc77434271656093ab56ba51da0bc70a10a2bb23e","ff57bc637afdbeb0efe897cffe481dd6e51ba177b855da97df59e35cefed2e3b","671654236291ccd994bc5cdec7e4b0e7ed7ffa6c0458f4157e4caa7e89d2bacf","b98e908aad039aad70f735e135b5687c6c082eccf260ec0113511727ca2c9438","82debe2513c2c13f68c69d95bfc673abed7035286b69f929ec927bd153a302b6","c00b881591615a93a29d902808b084252c7f0a2f706cbdf5f8ec0c5c63ce6048","88ada35bb78b27ede593e14711da944a3079634fdbb1e8fe2c1d64145e341bbb","a27949797d6acc76608eb2454a12e7fa3b0e23a9ff082297ecb4e8dc4f5f392e","3cea60263bc32cc376b16e1efd7740bffcfc93464b1276fab6e76a09df031faf","26fb1a8f86dacedb6315aaada1d0ce79d7f80a57d9cd232cbd85d2599cf8282f","2b3a1c21e085528ee4dbbc92da4d806c0eacec4cb4b4d9f473a6ecd411dc064f"]
Anchored
2026-08-28
Public log entry
search.sigstore.dev, log index 2622255255 · entry 108e9186e8c5677a7795…
Expected log hash
f2a0e8f2b4dab3949c746be15f65076279656fc5309daaeff038c9a778ee0653 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787896781880","kind":"published-quote","locale":"en","page":"theme:ifolor/billing/en","quote":"Since I ordered the calendars, the invoice had to come to me","rating":3,"review_date":"2026-01-15","source":"Trusted Shops","source_url":"https://www.trustedshops.ch/bewertung/info_X309A43086E7145E358EE1687E9DF7162.html","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (21e7bb8f2fd2…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.