Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“nicht kostenlos”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
2d2962bfb394b6cc277dc0f94fec32628de4eff40d00844873f67388efb85c2b
Signature (Ed25519, base64)
COuckup2B3U2R1cwZFm5p5mMEBEU/1hILEzWByCMJFicy5cn2odomM+VhUgYvDeNpY6d1lOqeOfY5bLhxQ//Dw==
Merkle root
5d4c740cfb04de8d4854517684b156439ff79300bdd067e79539539dd3846340
Merkle path
["2d2bdc8b00c8a75fb179212240b3d5c8bb1f8fc6cfcb1c9a49871f0359371062","9d689e575985fedbbbfc9141388db42c1ccd8b9df581d80df155ac76c171a509","80dd9ce43c1b4f6059f23dc3b26092e7901ca2f75ed35ec2733a6bc8075dbeff","483357e46483e244b20b7750de9c6b1cdbcb3712652a5071daf75492990fabb8","8da0f6a7b2fc805d90d41c1ed26b9f85def477f95b4875ae8e753695616ed546","7395bfc6507bc4e373a008da8f2ee1b15d291273f69d32dc424bcddb8298ce00","8f03aa2b1194ee9f706098c9e8fae139926b5b45ddc477b9453b5b9bc942b181","ea3a5a3f130944c5c5d2ddf9608c08701beed5af132026928c437241ae82c3cb","4490513d63b53d2fbaa21083fd577d93e57ec843f225dc90860d7663cb6fe785","0fb21c8c120a0def220ab5a21fe1cc7606081e4c10fe66b076478e19a1197b59","2991e62555825e0e72c5f62ac10a98a9edbafbc777f4e1c408b27525fbe850aa","92697f8d877793860bd83425153dd6f38ef7d483e8b41766380b1645872e3eea","db99b11a7090a99a71714d2faac3c5db9e128a17bb8152433891aec908b42d1f","a377e8a70654e5d15090d2c58b23722fc9eaf89fbf61d1f3010bc694e59ee4fb","2e63e22e3b767e949db06640d7c1058b569ed9fafcf20124800547f9cce53523"]
Anchored
2026-09-02
Public log entry
search.sigstore.dev, log index 2684971219 · entry 108e9186e8c5677ae85c…
Expected log hash
fd3192eb36809a910252a34a8f2882c4830a1a219dccb9afb1f12e6b5620cd6d The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1788343168574","kind":"published-quote","locale":"de","page":"brand:acrobat","quote":"nicht kostenlos","rating":1,"review_date":"2026-08-31","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.adobe.reader","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (5d4c740cfb04…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.