Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Es stauen sich die Belege”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
21bfb80214c734195d8d1a811f5c6ed35488b003fc19d199969b145f6d273b5b
Signature (Ed25519, base64)
Z44mVPEuOaInudEu4Bnivo8mHrR7qqv4+/XKoRZmhH1MVekTfRHl54Em8hZr5WPihZ4UEH/4TvJc9by0JvKxAg==
Merkle root
fc0474f2ab9253f8c52a81a0b2f1ae382f5f022f9b54f4e3fe06eadaf19fcf31
Merkle path
["21bf2e914bb409b8f19bf28e39e62bf551e277f62fa0b6626dec0c527b25adfe","a72b8d0d1d321a876ed42a2eed10e3181fe775feb5ae1cb0a7f215cfb0c9f28e","b714122450692a56e87e64a95f94b4b10b2229579cc183bd3309dcc12f27fde4","8df56d279a79a0c0388e078845fa4e7457a124e002f4cc8dab7b412a4a77c017","5ceb9602965b030b8cbc7a8b4b999bae8c94d26edc493cdf2918a17709962a41","96babf288ec0bed378935a080cf33fda7a7ed6ac54ff20caa4f1bb82cd646679","8098f5b98b2716a192fded8317baaf4f6b3bab6bd800e83d8d1ec4348d19242e","760b45b79481ec9d6497bf4e9d83d0ca7e07963ce21a4caef8c47fce14d6034a","1092b9cc84de48b5b062bdb49c1a61a4cca7c8563b2dbe38b1e8e1e59401d140","d9d9bc92182a619bec28b1728aa32ca5b705d70262dc26ca0794db0c9472a6a0","95aae986243af495b0c3b1a3d8f3aab94d9b077592b1c86efc73a0d04d900381","7e0fd08156d3507e2b238052bc49b842e577738749e0c25879dded00feb9d11e","0762348a28234508bdd1e30587d1fdc0dd40f0417d1221a51093b63a21a51b25","d53ce14c8422f7b98c01f3be46add79c44e4551711bc517ba367121540130adc","df2c1289894581f6e22c526afc719be15b70c61ef4fbef0978dff78cc8fc6054"]
Anchored
2026-08-21
Public log entry
search.sigstore.dev, log index 2544092674 · entry 108e9186e8c5677a1b30…
Expected log hash
e3ca1014bd6a1a766a29da72cd2b9f7f9c6c416fe6af720fafa94eca555dc171 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787289954326","kind":"published-quote","locale":"de","page":"theme:sevdesk/billing/de","quote":"Es stauen sich die Belege","rating":1,"review_date":"2026-03-16","source":"Apple App Store","source_url":"https://apps.apple.com/de/app/id731738076?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (fc0474f2ab92…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.