Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“NOT THE WHOLE THING ANNOYING!”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
187c1c2b974fe336577e4f20848af2dacaa900629daab97b0753756db4ed1767
Signature (Ed25519, base64)
Fi6cOIR6uZOCBhf6dcLDYs96qYDc7wrGzqznzFioPYuvuEmISf+yKvIG0ctPpNIxz1bdPPrQAxBSOMZoUSrOAQ==
Merkle root
8d929b933d3da853a342174568dafd4f2990c556a59a904f6c4eac8eca263c18
Merkle path
["187d827a0c45ea68982d5f0d74504f45cba36668bed43f8df915df5ad1137dd2","9aec23719b378fa7392834f82cf15884fe628a0124644ca33ad4387a181c7578","b3222f2bf15f7b2a2113c1bc86de6bb8a6c7a0b4da1e5f0ed5c5a7d55bede493","697f73fe126f360c22e6f9c59b39256e69f1f4c1041551664329fb78a958d331","50965fc086591db04e2ce78119704ca338094a97515bd9c3c4b9672638b29bfc","6752c51c67ca7e99f18e42bd7f2b75703281cdcb2cb0d0eb1cb05f83a882b8a5","ddd66ba7b8a5fde6c0b0f6378a596e7b3dba422679ded2ce7d48f3acba28c2b2","a363280fe9f81abbdfb75974e675dd4b0bfa0fe23182877fc62cf948ea406206","4ac1e27d9df21e0cc38c7c792a7cad3255314b14c64f8fb48c3a1833599f86b0","d9239e949635978176d418c979d96e224a5e97582a5a5bc7345cef2851eb89f5","d8f9089bbaa166b39c66d8d46212baa18bbe6e974865684197ef92ea197094ca","0b2b4f40dcdde808f62b3e4ebf260be017a870e6cfdcbdb9db918ce3b9a44669","db36e5683a162968d642d2b33f1127be2dcf059690ad38add1e5db8d7a7a41ac","9576369f408a7fb58ca2e97774369b4e7458346c8937c3d02549b43f61f201e1","67cc9c31bb9e37342ca834f1c2afacca9d4e9ea3aa24cfabf98f677678d81a55"]
Anchored
2026-08-24
Public log entry
search.sigstore.dev, log index 2579616312 · entry 108e9186e8c5677a98b8…
Expected log hash
169fea3926d76eeb6fbcc1ed6cb8bcc55e598869705eefd29172a719878e4a1c The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787542624469","kind":"published-quote","locale":"en","page":"theme:pixum/packaging/en","quote":"NOT THE WHOLE THING ANNOYING!","rating":2,"review_date":"2025-10-19","source":"Trusted Shops","source_url":"https://www.trustedshops.ch/bewertung/info_X3DE729F568C455BB31536436C1CD5BB2.html","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (8d929b933d3d…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.