Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Kündigung folgt”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2543547848

Proof data

Record hash (SHA-256)

13d8df9490184ef5bed080933d5833eeb590eb69c6a70227995cc36e72e17e5d

Signature (Ed25519, base64)

Tsx1APU9blJyib0joQ/L/W44kajjnOV44heMJjtlw3scPMseFGkcIg0I2SxTEp0NqfJsNNR5cWRqI/ubjkMHCQ==

Merkle root

aacc11945f125ee3fcdef86ba030016c440bcc608f4e51f0ffffdb4cdc5e9321

Merkle path

["13d06a6bd9d406155e5a6997ed745b1f627d03122ae0a0c0cf0eb81bb44becb3","21b468eac902684dc377beebcf32d08f0ac946e8a6971536032b26982b4205e6","1c86fb56d31929780bce9c960503836307ff3813ada9b605a5ac6c16ddd5efb7","da21ef56f8d8aff5be1c5d772667e94bd68ad70c9517645e435af897662d0e58","a5942ac7adb72460a0172033d7d71d5b1270fae93645895d7abe10c77faa84b1","09bd3d6f1a9d5023daeb349b084830cea37db66e5624ca7e508496e11341e59b","ba642e42aa79fffd52601cd98e350cda6beb0c92d2a1497fc2338f63b74603ac","e5045f52538ad5e77b38e9b5712851d19beae8c3935fc473b31b14c8a6a4be2f","3971a06a25ff60229faca310d9b5ea8303045c3c3c911cb36b582a50b956f860","6dc2eee5d04891a9860fbf866da5f8320b57056cb7253ce6c5acf5ff81e0bf3b","45bc209c42907432aa899d8bbd4167f3ab2d99683f2a40995cf09663b91f02f3","1c918bc7133b8b33cf667d10d785c214a1388e2dc21092f234795be8425f7f3f","24192d1fe3fa8596b225aa5d8055e7e92d26709ec190f1226b913a3e227f64c3","5366af6eb1ce50b0f459da15c1d7eb12649d0477ecd930804e506d3f2ff66aa2","2309962142b16600f7fc4d57273f3042f382acb91be89aac7f00112f61b58f1d"]

Anchored

2026-08-21

Public log entry

search.sigstore.dev, log index 2543547848 · entry 108e9186e8c5677a921a…

Expected log hash

bb93f13ee7a4a636e28586b842e19662b148eb18166a89b3ae7d189bb8e81689 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1787286345433","kind":"published-quote","locale":"de","page":"theme:sevdesk/returns/de","quote":"Kündigung folgt","rating":1,"review_date":"2025-10-07","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=de.sevdesk.sevdeskgo","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (aacc11945f12…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.