Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“but at Pixum, there was no problem; the result is perfect”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
21878ac732b9336dc63ec4688ce915e76d809486b412ed1eaf841f11f6e744a2
Signature (Ed25519, base64)
nuFK5NvmIZ2d3XLwVbLFKwEPcAz6g5sB0NoCtI0e89dF/zcceerqVgernVbXWaUkd/704E5ry8WetJ3T2eMTCw==
Merkle root
d019a962265fd99700bb41421c12bf721bc431ce9725f4e9d547011775ab56ec
Merkle path
["2186b522656174573a1f4bef1a6a4617565faf7d0477a498174bc6c443cface2","abb4f3d24f75d12f194c113c41463970d16206f01cc29ef5f86bb90292dec697","48992d4647c0b77046050bb08155acb3e6b1bdbb4fabb6c83f161cdacd44fedf","8c5179f09eb629bd9b8bbfda6fd099e6d17659e30b90c95b3b8adc558d20c22f","2cc592cc2fce9a50d6d234b9d4eacaec0295b235001183a3328c31562e8fb693","c41cca243065d963a67a100f7ab01b420cc3980f2a0f602bd1ac52b9af2322f7","64cc7e431a28ed31ad9a316a3469a8d7223ee86581b4a884d39eea566ddf02d8","fa30052092e0cbe598e37fef8b63c78c69b818cc82756acfb618cc2e492a9086","1adc12af21155c35024d92758af4128dc8fc78340871ab53fdf707924129b7c9","c96581e76aab54c052239d91af9c3966c5bc045b9de6a9a98edee9f200a8c77e","765163a9321f7764417f55a1d6a057daa70bba7587e0182c9b010f87d053bd92","1c76b0e02374e061611fe4207c81f2bbf4fd66b45969bb833d49268157862be7","8d7f9bb84a33c413af9063341c8f5160bc8725a67ef59bd2d044580fb9f3155b","65b176b4a433b701cea4a24b83deb2fa9ed09be9f26f9fdaada87e8434a57f00","a28f44db157d986c9333d9e3edce8ce71060ce7f7d8f4bff70f57fc26d48546f"]
Anchored
2026-08-31
Public log entry
search.sigstore.dev, log index 2657725656 · entry 108e9186e8c5677adf65…
Expected log hash
b4666dc064e94c6d0ca3a2e9a0c5f9ff5cb70ce3ce9e0a74343a10c712c15a62 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1788147462663","kind":"published-quote","locale":"en","page":"product:pixum/fotogeschenke/en","quote":"but at Pixum, there was no problem; the result is perfect","rating":5,"review_date":"2025-11-03","source":"Trusted Shops","source_url":"https://www.trustedshops.ch/bewertung/info_X3DE729F568C455BB31536436C1CD5BB2.html","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (d019a962265f…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.