Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Kann mich in der App nicht mehr abmelden”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
142ff931107a348e7f24869dcdafdbb2561e2c4737ada368baf0ab5747d054e7
Signature (Ed25519, base64)
1agMFjpby5iEIhCnLXYflyJA0chfLEtUwWAZv+yb6S6ysWThknRv/DJvRbHHII+ITWYlfbmk3uAomCy4tkTqBg==
Merkle root
ce02f748e6331cd02eca8f57641bb910cfa3ac6a0583f19c214186c96cd0e8be
Merkle path
["142ce2524c8cbca08930dbb6cfcd7f4597c5c0e99c5c9e53afaa62a1798c34bb","658b0bbc255c12881bf6b1d2ddd2fa46fa338c578cf46915d077235b5f25b571","09072650a6ee8e4e8f4d4ca6320520ad318e4fe61de87991d5a607a9c94f168c","730c36d60b338a0d967c29924b39f5cc8c419f1d7975c617c00e1378e1986eb7","8bf70e9a6abe302d7ddfc7b54c232442fa582043a348b77eabeaa3dae91f051d","6cecaf3b8cdc577f62c265c061f810662d30480770afc4c2f849c02a8a5bda95","86b293aceeb2a7f1b3f5f8ddcbfe70f7fa3d511915ade916530e9238ab1809df","81e655a10c7b9bb72ba7b82e710e3dc4190110cc583b5224425f2a790bf923e8","89560209190834aecdfe21ee13a008d8534382ad555822645317169eb5a8851b","c90d5523b670336100002203f3545196c45ba5ea069fcb703f4b24fd8b6762a7","da644d555e538c7c981ba2b58b54008d76800b41edb7fde9e57f8a4eddc673bb","b32c84383744c57b015abb43fa1400023699589bbec65b98d5d9a1020542c84c","2ca5fec314a169184d28bce72e10be4d0dc96e78ea6b0fcf500eb6558685fbf8","1bc99d2925512f6c847da60b09ad8a40a192f29b50aac2ed7ad1b460e9e23fc9","8475fb82080060bd6fa491c94e8e1c5001264fbf6fc66e6998631ee565101bbb"]
Anchored
2026-08-25
Public log entry
search.sigstore.dev, log index 2582604655 · entry 108e9186e8c5677ad979…
Expected log hash
3437b01b95be42f034b7198b6d5e9c0aa9b5bd388493d56323aa647d6d8ff38c The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787626024249","kind":"published-quote","locale":"de","page":"theme:sunrise/ordering/de","quote":"Kann mich in der App nicht mehr abmelden","rating":2,"review_date":"2026-08-06","source":"Apple App Store","source_url":"https://apps.apple.com/ch/app/id466738063?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (ce02f748e633…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.