Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Benachrichtigung über fertige Bestellung habe ich auch nicht bekommen.”
Apple App Store · 2/5 · 2026-07-23

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2612470999

Proof data

Record hash (SHA-256): 135cad9c4c6e35c8717b022071baaa0ab628dfe629b392ce0ed7a8c222472232
Signature (Ed25519, base64): IkuWsj/RqjpmsHxnHyJJ2NputuGvW3IrLqgjFh/GdiDUklZHnLD/JXHXJU/zuVRTkGp4Gv82Er1Evye5CyfeDA==
Merkle root: e1d85175eb3de20460be7478d6cbaae36a1b9ffb3bb4959306f8da40e58cdc53
Merkle path: ["1361ea352ed9fbc4a0b085989e6db19c2d85b5b54ec06af9697bca99cdd71f52","5d800dbb1de4de05eb51b24985ab0f8d40a32400ec4e62c017044e9bea0f3be6","898bff50b7b2ca723ab71a7f1b89d39a06e22c47ee42dad66b215e490eefe423","bf04fd3716d98a240098ab5a97b5d9cdba093466f0edc391d3357e64eaaaf543","ef7d40d8d0c6539cf86032d0dfa487c68990c5ef4191c2a5e8cb2ce4e7fa30f9","22f101dba300f5a5c4382a740371d0197f5933f10a057abe60249de043f8a24d","fbf3f5b79f9b01914ecff9935a36564377841c6fe4032bdccabb76fcb493a2b1","807f7629bdefaca36fa813ec7b4977afda34fe71e7c994edd4303659a04b8a63","43949857a791f0bd8fa3a67cf7b1193ab0e466aea3310cbb838b64405910624f","6b749bea5e5ca4004c6f5c16d31efe6bc906d7ea7b2f651af50a27856e5d5426","1c0f5d1d994cb00a4c0193227186e28cbec8da6c8aa718463a9e48ec1599ed07","6b15bdaabbafcb8727c139ed3e055f6a1191e894da99242e3d2b5e421a64fc5b","9ca72d0c4bcd0994b86773e4ba6c3b971bc9ef769c49c764975054df4ee33b9d","d2259499a6a15953fa73bcc6db9325f819dce8e785b0f957fb07e2831cb6c331","696d05a8fe8f7b7737f5171e0d56574eb9fcc6fbb6486fca2bc89866a85768bb"]
Anchored: 2026-08-27
Public log entry: search.sigstore.dev, log index 2612470999 · entry 108e9186e8c5677a32d0…
Expected log hash: 320f5e8c7b6a05058b811d24c7cc7229f73f49082335118037aee793eecb309d The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1787800750172","kind":"published-quote","locale":"de","page":"theme:cewe/communication/de","quote":"Benachrichtigung über fertige Bestellung habe ich auch nicht bekommen.","rating":2,"review_date":"2026-07-23","source":"Apple App Store","source_url":"https://apps.apple.com/at/app/id583713833?see-all=reviews","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (e1d85175eb3d…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.