Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Ständig stören Popups”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
1d1de5e50bcf975dfd2a1c9c7f3c6d97d9977851679b9fcb906e9a143baedcef
Signature (Ed25519, base64)
RZdJHo4uJ2pdXXDlb7So63Nt+L7gGkEpgff2h0spoWskHWT+RJ4vwBIV5K7cUn8wSStP8vF8rZYOTu87e2PGAg==
Merkle root
2915d94fc718eb48f67362a65d9a83b80dcd4c926c786eb2e38f4d8ced0439b7
Merkle path
["1d1ade96952ad59d9ded1aa43090a79982befe27c0e4b0323ff4186da3bf3a52","b55bbd3207450ff9370ad3c158b38550e0613f8d24fac24535ce799e054470c0","3a4466c676fdedbe5f07ab09ab88b6e04a8e61dda49d0e52ee50c583a26f5ace","e81e6c033166f6fc2f8b8fd794db32667c74b661ca4acd471656b5d5fd39c7c5","7d75edb169c623d7ee65ac4e0663ba09f2882017c9ac6000841e43f08d3a262e","a6b6f9f8a6a4550240c31c3130be554e766d2bcbc4b5fabb8ea87ae1dc1a7e46","3b7584fac1aebc8c42f0fbe4db4f311b550c80978e0320a8747325214e8f27ed","1e5ccb03691839bbc7a32e1ef88b1c88e62af1c6a883bdf07b9ceb3c2afd8469","5c6b9b5501aed0f739c655c4df0ed43567d164a81cdf40b761febcdb4370f7c3","68b6e4d8cf34b153d4d2af42e514ab93ade95a5e71df8f7f9cc456f06363a7d4","eaefdc9d2153cb57774a542bf4960da4b3943e04088e3e5324afc336dba0d757","1ae3280206ab1fea5c578b024927fda3a1893a5a0f8d253d79243408966b0d5b","dbdc65b9f91ecf7a21686f427f84950f149ff3313cf7cdbaf938355c0225fc98","5b8a2081ec81ef2101256bd7209457c75dcc1be14257b40200d45a88003c0c32","1936eb7713ae59e20354a37b8314d3745433b23d047da205242414a6fea32b67"]
Anchored
2026-08-31
Public log entry
search.sigstore.dev, log index 2657230937 · entry 108e9186e8c5677a80c3…
Expected log hash
1d9aec1bd239e45b6e622f366eaab4292482e627111ddcfb4c651bb1e08e92ad The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1788143889053","kind":"published-quote","locale":"de","page":"theme:acrobat/communication/de","quote":"Ständig stören Popups","rating":3,"review_date":"2026-08-12","source":"Apple App Store","source_url":"https://apps.apple.com/de/app/id469337564?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (2915d94fc718…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.