Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“and well packaged”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
1830ddea5bf743168162e34516fe6579f26a36b33fa3599cb365b7520af5a3df
Signature (Ed25519, base64)
vV2P8k6mR9bNoJhEJAUzVcHpu0hjZ1cKsnGx5zyV0Q+EJHiLNUDGsfzs+KHFmCAsRapwOMrjzouO8Z53pFFjDg==
Merkle root
761f428c7f44b8ba37e197f3cbb402245009b42c2fe1c2d1c22502b7539d8b92
Merkle path
["183967b9d331ca59f1ff3a1392217f586657b7650739a22b34a333e6a9d3b4e7","c1d0915dad369563fd9e88a9ca74362af5821a6df478031d54d071ff95952223","dfb3320afbe5736bf4420ad34b441a7dc0aa35608f3181bcc52544ca658b507d","22c8f15f4820e1c0058ec70b7569dfc3bce347e17f2b1c909d2fd4cc225a07e1","084107fb9475e362fc58b2124fa94bc65b1b47e9ebd94a24603c02b3b18c6979","61cf53247a14800d9987dc83af25b38500bee282597640d581c218733b1ab5c4","8c9cacb089e3a1f48cc160a81ce19819ce8a69ebc2e1d0c54c14dc0bd19271a3","ef57ccfba1c60ec9cf5468bdf910ebe6fad9e79c339a7b77ca9e8fec328c4d2e","b664bb0dd85a136764a187a3057bcb92897c118f431a21985554246af1469397","ff75f62b1b189c426257d696832100fc96912cdb72605cc9c768ada480127c55","825da8037331e42db8a9cca808cec4078a1fe289c754d6812541d1e8c14757cf","ac2f3954890d50e5b934e4f938dfe72f0ed89b30b6b5e9ab8d03e21aee2ed045","25ba2ac2abca74d5248bc368aaf9983fea985a62c2acc2567cbdbe71d6bd7cc0","d7d046f6bf143929536e498046e2783984565776df0c4d84bbeb719debcca31d","98f4686310343eccfc39a6e64e03e6f8dfbadf7603f7baffd9efd8b7d19d425d"]
Anchored
2026-08-29
Public log entry
search.sigstore.dev, log index 2632992954 · entry 108e9186e8c5677aa5ca…
Expected log hash
96c11d64daec1fd5d2cb12bf1cc37249a60cb62f00cae505cf36fc8b47d6ac25 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787977614417","kind":"published-quote","locale":"en","page":"theme:pixum/packaging/en","quote":"and well packaged","rating":5,"review_date":"2026-06-18","source":"Trusted Shops","source_url":"https://www.trustedshops.ch/bewertung/info_X3DE729F568C455BB31536436C1CD5BB2.html","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (761f428c7f44…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.