Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Unfortunately, not error-free even on my second order”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
24b0a82e649cf8cb1f584792b8f3d4efa5aaa694e23c711ee554ae7e49e7e381
Signature (Ed25519, base64)
Rn5LDKYydzOybl/4t60f/hCZXDG3qJeMlKl9AFiMT44nTyHiIOKK/X9eT6x88leCsjl6nnYn2wRM6rRt9klODg==
Merkle root
c5c707bf97ff73e1247b0ccd0925f0db0a83cf52cb887b20768212ff5bbc5fe7
Merkle path
["24b027ef67c61d50b5c3e59e27b7f301917449d9b137cc015c2dc1f7fbfb2cea","bc352d0fac065fa90a368b74bb3ce79d144486ad8f643f8143c8a63bc5bda1bd","1372067843f1cac189b4e6a44f10f96b7b05f1ad0409d05ad992b92f73815aab","c7a8a303d925a739d109dacd9024e2a5a81bc7ee9b585759fccafe0dc983ca61","26c7de233c3abf300598268d39a4b7ef9ee3f129cb369638b9c8c0df9c8c0e58","951d5424bbb7ecf896059e6368e16932f1a1676fb205393eca8ee67e79bbfe3d","baf6607b04959a328d7e05a3a99de438b2c88de8f0d0975f5951fe86538f4dc0","b704f3bb29d69938bc94ecb886446f4aefa1cb102d471ec5a667f75004909b82","10fe751609cd3a6fe420bbeb5be25b1b4271c70a12b3dade56274b596db3b3d5","dea374864d91438624d5befa63693738d08258a9bf21d9ed21ce7c13be007647","47928498d8e3e66f8dcafb7c9275f3ff63ed9368c4963e4f685abc44c9f685fa","9d217558492e33bac29c61ebd9f00f03694ad3feac30b56224752718fdc4d0a4","bfa6d3174dc6ac2ac973ef7dbeb8001d2697f9586894947f07415b5ac90efc1a","61d99ae8fc79aa7f239f794770b00be2b8c5cc1d2483d723f849c6b764907eeb","3e1fcd4bf6d45c101c10e6b07d5c593b58f9445be77bdcbde26aa7026b1ff6e8"]
Anchored
2026-09-02
Public log entry
search.sigstore.dev, log index 2683301360 · entry 108e9186e8c5677ac685…
Expected log hash
2e7e5158dde5972120030caa35508ea4274f63d72a51b34adc6efebfc2f2527a The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1788322918375","kind":"published-quote","locale":"en","page":"theme:pixum/returns/en","quote":"Unfortunately, not error-free even on my second order","rating":1,"review_date":"2026-03-12","source":"Trusted Shops","source_url":"https://www.trustedshops.ch/bewertung/info_X3DE729F568C455BB31536436C1CD5BB2.html","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (c5c707bf97ff…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.