Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“I've created calendars and pictures here before.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
13e30a13dd6a8d703794abbc83f478922862df9af0298e683ae2f515a5de8df7
Signature (Ed25519, base64)
ys0W/vN+p/TqMOvpJgDFBC32HwzwnI35u/OEXm4YTgbpM+XAMStvt96EH7Bn15Y2VYGKzMR4QTnNSezUjWK2CQ==
Merkle root
fc0474f2ab9253f8c52a81a0b2f1ae382f5f022f9b54f4e3fe06eadaf19fcf31
Merkle path
["13e70474a6e3c367af325f5990ca3d59d39e9a15693889a1094e893a97767432","212e4ad252c5dab4810ef0bf7392a78c86fe205a292f90d72d27b4747e542d8b","ccc7136173d2414b215f318b8520421dfeea1d25d6418285079d305bbf72f09b","38a017d7577867b21f6a24f0d523818de31cb6c449a1be907ec037aef653fdbd","7760b8d933580dba24d16d87a04f1d35136b431568c211768265f37e94856cc4","b111553aea9326b4bdb2825fd83d33e0b679c22feeeb8c51357871b080f43ae7","9ce64ebffba9a3fb6c33bc567ba78cd0ba679a788a67ec602cf5814bb3dd8887","0b15a885b3b1d1d45f837e00f9cdd3b26bfc059ac3e634947b1e5c85cf5427c1","20d3ae7c32893721e211660da78118662c6623cb60f773e07472926f8c8e9b35","282cb0f4fa4c5780f23965c056e16bd7fd94bff74995088e4f77ac135736463c","22c6e8d0305e3cdb89a71180c8c13e5e7d4e0828cff8a063173b144abe51311d","fee761e8242d8ba3849c6e844aae866739620eab15cd0f1261b960ec67bcf5f4","0762348a28234508bdd1e30587d1fdc0dd40f0417d1221a51093b63a21a51b25","d53ce14c8422f7b98c01f3be46add79c44e4551711bc517ba367121540130adc","df2c1289894581f6e22c526afc719be15b70c61ef4fbef0978dff78cc8fc6054"]
Anchored
2026-08-21
Public log entry
search.sigstore.dev, log index 2544092674 · entry 108e9186e8c5677a1b30…
Expected log hash
e3ca1014bd6a1a766a29da72cd2b9f7f9c6c416fe6af720fafa94eca555dc171 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787289954326","kind":"published-quote","locale":"en","page":"product:pixum/fotokalender/en","quote":"I've created calendars and pictures here before.","rating":5,"review_date":"2025-11-09","source":"Apple App Store","source_url":"https://apps.apple.com/de/app/id1319898516?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (fc0474f2ab92…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.