Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Eine reinste Abzocke.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
3255cdddd5421261ecd17538b80cdbdfa1fa63d9cd34e5525f56b409d28a8e30
Signature (Ed25519, base64)
DC9B0UduBcLo6EsK9/IceRF+9L0LxFNduV97EDh4iRiSGBR95NYZBkGOXr0/nEDtiGtmsfF/lRe3/ERrPeqyBA==
Merkle root
d414e521fef9d6d099989fa0d693684c20b42a89a12033fe1adae5ceadc28160
Merkle path
["32553674f5751cb26a377cf85adcffd7ad333c365f0d8453839337a1baf1e7f1","a5911b37b9286ccfbc67f1301300520dba02374a94d654080aee3cac19ade36d","511e32cd96dfd931eef4cbbf2eb9a909fa31018c0dd7942a13b329ffc4e678d9","81fc36fc9ea30eac79497427288b103d8f10480bafdc6816ed712a76a4e90a13","20363f75c578762469a456f80cf5817342d9c09a058b55d78a634b91b11c2c8e","d595fcf0748acd9bcee2e7a18d36dd3b79c96f42087370d793e9ed42d2979be7","4544c872fb9a763d868d2c1e420abf8b05b6c89edb89f507be41ca7b24486061","b0b74752e9932692a32c6cb8db153c006d0225660bc8c68d992c3a85e4788594","b11bc34b0d85aef0d285f719cb338008bc63b9bf6e1580d68c24c2dac277367d","2140bcf93c71bea18fc050f70c4bc25224c61a674429d408722b550a3ffccc73","e6001f679d2702fe309a20c007dca768bd33ad01ef4c1f6804ae7c301ef39fd7","f7689b85a55e695c70332c7a5482e0e4e39577760ed75019bd20ee8b6170bb32","6c6122ca1d4e612760da6b18990241721e66a9f6d9245bcc3a249d305328ae19","dd85a03194c1b09d93a4be119d3146825d20c9e375d143636eff256904ff3e25","d9bed3bb20fbc734967be09c1cd24ec9d5bb72fd1e4fdf84e6057ce858f8bc78"]
Anchored
2026-08-26
Public log entry
search.sigstore.dev, log index 2594412582 · entry 108e9186e8c5677aea33…
Expected log hash
b1897d255cf944fc063c3044a4546ab02c40327197d891ce843dc1c45c2dff03 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787713855428","kind":"published-quote","locale":"de","page":"brand:bookbeat","quote":"Eine reinste Abzocke.","rating":1,"review_date":"2026-08-24","source":"Apple App Store","source_url":"https://apps.apple.com/de/app/id1056652614?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (d414e521fef9…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.