Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“The PIXUM application itself is very practical and easy to handle.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
146f81349ee103d3eb7f6cc5d3ed7bdcbb83f95f01edca3f8371fa55633191d5
Signature (Ed25519, base64)
M93Zc3EFiCzG5r27AJwf/4O2a3cy1ojgVZujHldNj8NDnkxCq1LtLMPEHjrsEI0tWJq7Brme7DjTjI0LCUS/Cg==
Merkle root
7b64262ccb6992b4b1db9e70024ed7bf00a279068dc28cec38a2b0e5ad6c1f05
Merkle path
["147096aac460537d9baebacb4fbf9812af6ff96e01a30edfbca33a9a3ab0c2ca","f4e5f053e8a2dd4edb69ad30a5985cb825206b54aa6c23acda160b36d13df041","36ee9924fa831ae530dac42c536a4347521752e5272c961f4e6754d0f0159511","43071bd0f9da9c2aebc49d4f49d492d815ff7ab1feede58eb593a61df10fce40","63c936169ca2ffe06903626f5b9c0debf2f233f7dbd3f89396e291eb9ccc74b9","5788fcda84ee83ef4ec8f3541b4001f02bd21a302c4e4375b11210571acb67f6","55af973b4bf80db6cb6d6d1c01ffb3ce418d503f6a40603db530cd25c7b7d887","6a15b6f677935cdf4d3deac73430713ca537ecd79b45b6dd24f9666061d25f3a","bd1fb20e160f2d0a5b67add44bc7830fa43b0498bd238b423c9009aae4cba353","ee62f63d1d6a543d3d4801960aee06d20f840ec288bfaf00d90dadf24a274fef","7f6fe663af0898621d81a00559eee8e2e1765df718fc2854d200f1ead808fce1","aa818fc3ed365700a313226e531d8d443301c73e224b86ab4bc8740c08d56de9","df04ec2f9a279e16bd1cc7da71d9e700ebfbf4bc60d39678c8af20f9e3783085","320bc2a1db4514fccd8cf8663fb8c3ce3d8b8f889769795ae761d0eb0ef5b761","6b57fd4f8c09475077477ccea0d971c3d4573af62c3a98d844ca044662800d45"]
Anchored
2026-08-24
Public log entry
search.sigstore.dev, log index 2579318932 · entry 108e9186e8c5677af677…
Expected log hash
32fe6d62a45bd1680e87bec92e1d4c4241f512243c06642638c7afa2cdade2a2 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787537478837","kind":"published-quote","locale":"en","page":"product:pixum/fotobuch/en","quote":"The PIXUM application itself is very practical and easy to handle.","rating":3,"review_date":"2025-12-22","source":"Apple App Store","source_url":"https://apps.apple.com/de/app/id1319898516?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (7b64262ccb69…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.