Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Auf jeden Fall zu empfehlen!”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
236521cb7212ad251fc93853751c2527df14f7cd75e1e51b07ead94755819e47
Signature (Ed25519, base64)
e0OyZg5BsShkl5lcgjD3KTay0ginFxHU3iqkrc91cM+iWyvpZ+hxo4MWUjX3qnz19uQ3ovR64UKDwAHAE4kpAA==
Merkle root
6471d9991f0d0aacdf442d5cfa660f2886071005e4c3d26a992a3bf38f0a7695
Merkle path
["23643beff9357d8c6521f86976db63e0a824a690959c1f1e028d7eafa54c8765","61842c48371a1b514729e62bfb1d84e8c1f71015e24d39b8ad64291ac1811233","c7b64def3f015331d041f0404fdf43ee5eca988e929b0f8424e62dfa7085277c","c708bd2bfd6e1b8e383dd4aef3938d78f97288b4f69ff68ebb0b8adbfd71a165","64946a4dda17b8070efa6e6c18bdb8ace349da9043827a5c42a90efcea10ca8d","1fe28567fcf787466d45e5f33e9e2d3673b989d3e363bae892632df4edb9bcba","c5bed920e1384a839f15b010f0bed26b8d9cbe843c38facfd6d4ed28fa74a66b","bffef5dc3bf6130ba7026104a707b940f28458ac3a55368e47d45692f8503e2c","8fd98ce177ac2d3ff82bc18b0988c13909be6fa05b1929cb2c473c661dc2f7ef","6d6c7ef8ea4970e1beb4a36979a6bd0edf9ba2afc8924369a8f72192bad7e530","d8443dad2eeedcaf6b1e08acd67a777002ddfa3615683fae3f12ec17a32198db","a59f473f9d274506fa4eb8bb77435c46df9ed0e103d16f78c4025ff05c650093","f3f4254b899098b98c7590d670f5fc0f992a4df0218d6bbab4ffa5ea42255835","930b7277e2ba0f1d182f8e7d0daf885f1526e50b29d8791024858ea5581e285b","a2fa997090d23b1f352d383369eee4da3a6661cb0956969a3a99ec5f82390d95"]
Anchored
2026-08-28
Public log entry
search.sigstore.dev, log index 2621523249 · entry 108e9186e8c5677ad576…
Expected log hash
644ce1c7a13e9edd388468f8e29bb74f49a15185930851951709e16eaf23744b The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787888369667","kind":"published-quote","locale":"de","page":"theme:acrobat/fit/de","quote":"Auf jeden Fall zu empfehlen!","rating":5,"review_date":"2025-02-06","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.adobe.reader","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (6471d9991f0d…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.