Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“perfektes Poster”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
17b37498501bea0b2382c790e40f954dcb60c9489671666594b51cd2bf768253
Signature (Ed25519, base64)
6aQWla3xoKGqhvOOZdcakWLp/A0pFaiwwDsZkM5Rc4wa5Dd+HwIDfm8FzR8LP1kV0G58XnVYXbdh041Ah0EDAg==
Merkle root
f91c744e1108c1bb1ec3259bf4dd752db9e3b06ce3ca7c817c48f3174bb949cd
Merkle path
["17b42ff352c6d9b85024b9a3c641ca3767595bb8288762b3018f685179a9c13c","34ff48efd6ca0f803e78d7b3a45d935859f7bb79421a552cc274a5af75eacecd","da548b6464affc07c2bfa2e0dcb7bf8d95000c75b5f6a1556ca29f2fd984fdc8","6a4ca1d8c27e2e1c75ace55ba2ec495392c74e65b8b7adbf12f951c859350a86","ce95cc76f374266e99b47998fd660e19e64fab5bf09db276caf49f98385bea66","1aaa0d4c02f887fa8f9b28d03cf75dcbf983199a06f2cd32f676eede1c54df84","c67eccdffdc2511d107f104ce97a756caf96fa64bbc96e5c57c83cc88d049bcf","7393754e8aa57bff53d40a4ad7a4ed846ae9655341e907e9b5eb0072b8968e16","018220102638795e5d4eae3ff1a039498afb78511a4c9d7da01cfc8538bb8f02","2fc3ddee33de399b9cb3f5ba9812eb7c89aeac33d8af73e1b3ef58674936d906","d389e59b968cf7a24dc02281aed70e9a9e591abdb29c44d29a5b85db6685d5a0","e2f14ae6121f38aaa4982e551914713979fc1b85e0916996d36fb727a77cdd06","38add9619d9f1ac1a688809de34787d9c7d7b4d2116d16ab225a1d2f875ff278","939bb6f35c7a9334365aa0f05d437301f5b11fd1649b761216a467d624b12d5a","7e33dd613a6ba5c13ea4ace578351ca5e0375312f966275d25485ca016b59318"]
Anchored
2026-08-30
Public log entry
search.sigstore.dev, log index 2647332298 · entry 108e9186e8c5677ab309…
Expected log hash
5d995478a14ac45f67e2121505e769136cf509c045e6701e0235a25f639d0a15 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1788058735671","kind":"published-quote","locale":"de","page":"product:pixum/wandbilder/de","quote":"perfektes Poster","rating":5,"review_date":"2026-06-20","source":"Trusted Shops","source_url":"https://www.trustedshops.de/bewertung/info_XFAB7C17C298F48909E8C9F2BFAA5794B.html","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (f91c744e1108…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.