Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Everything was as expected.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
288d37060839d97938e2a7c5ffbc53b83456bf97430ae6e9f2bab4fd1106a600
Signature (Ed25519, base64)
vLBop1CpG6EeYJ7Py1Em+MeimQ5htjXelav2rFlRLfpYO772FNp99vYhS+celYOc1p8Zb9jt0GgAM9CPv650Aw==
Merkle root
dd24e9f4e2c157def3e88a505d0f69726bf8aab26b1f5c4272da69b916c6842d
Merkle path
["288b022c2a3640229ba92c4815a5328d1f974a1d3313319e8ca297cc30c870d2","f2c120249a07c768537347a933929c6326f51d745f84097a2bb0cae495e38993","e7e3100ec8879bfdd4ded783265ba962b4f62f88e371dec67eef53d3b65bfcc7","635d5ce1dce79f7dabd4bb8cdd16663154a49165f92d07355df59a77e0fcbfd3","7f0ff67e7122e46ab217110481bf667a22077f4e0a30624657b0544c9e02a4b3","d462f193459eab1e0fc17a60cefd9a840436765770abbad5b5b751c0333a4b7e","69bf546a38b6a5096f67fc1179e71c9098ddd451357cbccca02338f8ed5df485","beed5f2eb4fb6730f69855b7d97be18b2bd207d77e8e946a9c5eb14a3377d756","9b361b69afb9d8a5c14218af3c1130af961f0d9e35c438727f4c100d3ab29a5f","d4187eacf8d5aad2632801b4484a7181c5bb69c7f4b6d45c7699856b446ed3e5","9d470d40c7e63341ad3e535599f2ab9374d43a4ea4a312b6b28877efeb96adaf","ba3c3c9ac7414ae388e84d40c914efe88cecbf08eb6050e8beae8f175abec303","7e11d89f2ffe47873f06394ae6eb73c488c18861ee2d0ec6b2a058fa7259ff17","dd6255aaf7c8114bddc5f1e003a8869fdce442eab7e68a185991db8a5dfcbeca","3dd0df3aa4d54a1f18105ae8426c289b2385d33e7b5c455288c08274c2c3ddf0"]
Anchored
2026-08-25
Public log entry
search.sigstore.dev, log index 2582684999 · entry 108e9186e8c5677a2981…
Expected log hash
2b8ebe4eba52e1c2223ead6031d4eeeb67d9ae021114f03e62b1ecdd41675bcd The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787631865749","kind":"published-quote","locale":"en","page":"subtheme:ifolor/quality/material-thinness/en","quote":"Everything was as expected.","rating":5,"review_date":"2026-03-20","source":"Trusted Shops","source_url":"https://www.trustedshops.ch/bewertung/info_X309A43086E7145E358EE1687E9DF7162.html","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (dd24e9f4e2c1…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.