Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“App kann seit einem Update nicht mehr gestartet werden”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2670833107

Proof data

Record hash (SHA-256)

1a48542fd991e84ff84d15ec232fa081c9de2a21341832718efb8f4d068234f1

Signature (Ed25519, base64)

Dy9rIl8zrxKZPzmbx61iD3wPwJv7twpdGH9V3VjlTJpGrmhav7wfpIp67lUq/IdroAvGOqQ1OwnwenkLY4WrBA==

Merkle root

37bab7ab6bae92a907497e5a4ac9fef6a8cc674cc365cd962e5b33be029217d4

Merkle path

["1a4921970f0d479254c378cdeb57b4e59eb392d6a17d104ef4c4e36592239098","9e1fb38d1467995cedf94d5b47d3a2abf6f812d952333bd1e3e8348a311bc65e","3f44268914cc83ba11676b0b2eb84df1d767508aa51c54a1642c0248a674eb0a","412e60d13ff0be3d082749d3a9e2167df5fe69c844672bae27c012cdd66e2e39","dfcc20d78c88bd594110f71c9fdd89f9c6a598f2e990188d6d320e4846d5e03f","2e2774891bda4393b8a88fab13752370b2c1e07315cf7d7210cf8962f6c3855e","21c164bad50fb0d210b3dafce3279d1936bd21992e8b845a917795ad7ceff60b","d643fd00c09ef3ec64147ade179c45d53f1b2d560b3fee528c110c7683015b01","980ee55029b7f8415f96bcb622f0beeea2641727c81712978e53e12d00d826c0","36db2e38381957aa7c79376e89e7db32d72bae63658d5be225a823d3522dc453","3486f6f18514ca74d7e5f04a04402cfd9528bf5a242c1db2a66676dc58533e35","f8c87cefed54583dd6efd0a241c9f160ae382442854924df276fb7e0358b4e41","ec831a88cfac83431928609cb4878ed5619e6065160f677d7645e0479a63a3aa","1c8a8edcf77caa5fc3af0401d1e3fed2c8693428493c7127f3e51eef4f9cecba","61a69baf0202b9bc9628f4c2534169a082ad6e9020746ee3a84c82ac414b68ee"]

Anchored

2026-09-01

Public log entry

search.sigstore.dev, log index 2670833107 · entry 108e9186e8c5677a11f0…

Expected log hash

93b6693570baaa3e2327aa4b03aa01159ba10923124d4cddbdc139f813f3f422 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1788230822517","kind":"published-quote","locale":"de","page":"theme:sunrise/billing/de","quote":"App kann seit einem Update nicht mehr gestartet werden","rating":1,"review_date":"2024-09-09","source":"Apple App Store","source_url":"https://apps.apple.com/ch/app/id466738063?see-all=reviews","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (37bab7ab6bae…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.