Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Ich bin sehr zufrieden, vermisse aber noch ein Widget zum aktuellen Standort.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
18d22c71f49e198a7c30e96e93f446c14b3c5a85bede90426f67370f95777117
Signature (Ed25519, base64)
GWV3QR9IlWOGZ8kI+ttb38KuDQs2l0zq9BdFvMH/8WFU4ReIKTuMhDvXGA71ARkjNe+a7yRjygwCX5zxwiOKDg==
Merkle root
f1675b25d5466797aa702b991c0807556a3aa1a9c10b1d677032c5c3e40f1b0d
Merkle path
["18c87de0107d5fc4b7975db18107d1667af2a112dea106d425fd34d0321c05dc","213e7a91fff29c235598ffff43f7e42c8ee259bb1fbdcc225fa5a0540975e5fe","8d0173cac3dcf7323cad088562b6acacce4017d47de96c5a3855819a4085a32b","d1331f6ac36baee3a2ead0b93b7b7d296cc26746e2772dd84614300d25a1a1d3","54f360909768331d5dabe4def198fab2a228c81f0390b330d54b23051f9eb621","294274b8405e296d8e5b9fb5772be49648c01c0b1178e9c88d101d9405a40e33","c366e38054eaecef83f0cfc28c0743e6e56a0c249da80813d4ce83c1c55aaaac","63798cc944b4bdb48d4713c72e7015b6d1d36d15a15328c5ed33fc8391b61c16","d5931cae7d0b8fa2605e0e884373a5aee438425a04f63006a75adf2bad6240ef","5048f468fb5b39e566da601e826e303aca00f67732456e8267516df034651a8b","e94705d0a5c3ce6cdf14ea1d3d5827ec4a5b19fff1e7758089ecfa18c979e805","3ffeefdbb85ccfdad5dfc0be577d644da8a97ffff64074f8a9bd984a32cf4900","eb2c0760e56a26a302dac6e5e45cd28c832dfdb704d2fad1f950ca9b04c06ac1","ffe25fa82d2e39f699290daa5fd756c6fc66643a11e22672ded33d0c3f3dc940","5fe831a43839c48bcf12b225ea332c8993d31242d7ee3e005d566c8030d9fb31"]
Anchored
2026-08-30
Public log entry
search.sigstore.dev, log index 2647241519 · entry 108e9186e8c5677acc32…
Expected log hash
b1a9a39ed2ef6e13fd8c734573349e96c5febf297457b76656f9e7c62e15698b The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1788056210386","kind":"published-quote","locale":"de","page":"product:meteomatics/weather-widget/de","quote":"Ich bin sehr zufrieden, vermisse aber noch ein Widget zum aktuellen Standort.","rating":4,"review_date":"2024-09-23","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.meteomatics.app","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (f1675b25d546…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.