Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Also stores my important documents”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
29d99791ef21c229bd08d317a4f49f68dc1c5ab9bc285512f3a3c3736337feaa
Signature (Ed25519, base64)
EYeLDML0U0L1gJLxTAEZRZelaVswlukX+JroFn+/19qe1UJXOfRdSVejPpLYfek7f7dZiJmEOh4NahyM/ltYDg==
Merkle root
9809cd1f65a3d4e144579745a20f7882b635b7ad9e75f8b31fa040fcb7e74470
Merkle path
["29d73df850b00a147efe386c45eee3b110f8492aed6ea677c013834282096ca8","773f8e769666312ded09176b95ea68c44d9cbc49c5b7d1098f9b03d7db5785e5","42c8d46e4e1ad29571a5b87050378e8542b7bdf7b18d50c85baaa2c47eaafb04","f9394175181101c2f508cd136229c88c44af2d5429f00b7f681a6d2dfc4cc09d","b603bef9eb9fd314f1d3b9205abacdcf179a0ce9c465f565a0df7d83e639c213","0d3d9f180fbd13270bed6b9f6008a3b45e20c9db192ef9d3808038af8c35f673","de6e664c277b160312261037f6f50f08ace86e11ab876415c053be1732b7581e","67279383a8f1c0de350b46f1b81f4626bfa385b766bb1e621951e134e97d7c20","e2982fcc1dc2692634bbedbdc1342bce29b193fc4027110b16d007e5fc21fb71","ebab01b2a9ed87cff14fc4c9c65b855ac6c12a5dc2b81cf7536dcb6d9ebbf274","20a7cca8623f29848247d74a10a6dc68af6f3658a222dbc8424bb8af91655d1f","e50fd6e705a19121f13c4ff47e0138a541535700c4eabe030bf05136074d0ae3","c33a9efcd0298a63eaba2136cfe18dd1517727e1b9e9bbb60122216df6f0406f","13cef35a80378a74af4faef102936039d3a54a741843391bcf32134dd8e61270","5420b3c3f4a7cfc61de84c757928b42517e167d282e291e38912f2169ce60350"]
Anchored
2026-08-29
Public log entry
search.sigstore.dev, log index 2632227861 · entry 108e9186e8c5677a52ba…
Expected log hash
8be5978cb1be4c5daa434c41d0072ddb211c64c3f93b137b58c71c55ff15eb8e The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787972611008","kind":"published-quote","locale":"de","page":"theme:acrobat/durability/de","quote":"Also stores my important documents","rating":5,"review_date":"2026-08-05","source":"Apple App Store","source_url":"https://apps.apple.com/in/app/id469337564?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (9809cd1f65a3…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.