Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“tiefe Gebühren überzeugen”
Google Play · 5/5 · 2025-12-19

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2483017207

Proof data

Record hash (SHA-256): 33070e5c7ed6c7f7a6e8b77510d85c5a18da793df79d3f08073a75e34c4d42fc
Signature (Ed25519, base64): Iiy69JPjr9uklq9vWrvuhb/4EeAXEFXR+3dPtdsPOJSuCS4gVMHfCqDeDiMfdwS/qJoSe94hWAD5aoDfwiE0AA==
Merkle root: 924dd80483b600ba21e68955fc2650c54fb1b237aa7e11c32fb1b306f6f4bddc
Merkle path: ["330593d08760d8a93172a462408ca6ceab1b0419917163de49163c0fe999f059","9bc02f943b33d1a84e3f55c6270c2864e813f7201bf008e307a5a4578f73029a","1f83cefaaaa99cbf9c0f6b254614d2088d1497b3583b50300840d4e76d34899e","9a32cd6fb7db4d9dd3eda7a9100242f7218f93c101012519c86ecdd0d775d878","4742307db000f3ff7fb0fd3dcf06f7d296d01c600a8da5119dbf8fb736acf126","6bf3362b710b5e6b3635c76f3036ad23f2048ecd647eac096829489acc4539c4","3f6c045a15c42e15300c5921562b4b08edd28ce02a7fe0fe06219800d89bf9a4","b8fcf548ee5e939ef8ab26b841d7039fa7aed62066a48c047aecadfc6c6667f2","a567f9aa7dbd766b4fbb9f925d874103b8ab8b40ed5f4c30644fdbc10af96131","958c6700e68bf99091b6548af62a25fc709b12a466e62eace94e44a79847fed9","92a832b8017d4d410d8d475fd9ba3ee16a61976f652b1c2b64c3eeff9f4290f0","ed7dd7417567700057ae69b4f24e401419245fcc1423c24944da82bae3a66f5a","b2c0dcf6106a1f67377e203fafd26ae03d71b242c90ac43af4118fe6d142f3e1","6c47dc57ef64520d11e9e14ccc06f9275f37345b3c22731ef888f0abb3d98fe4"]
Anchored: 2026-08-16
Public log entry: search.sigstore.dev, log index 2483017207 · entry 108e9186e8c5677a82b4…
Expected log hash: 4b816132046950ac556210cc5233cd7ede4cb3c0c86d542780c32b53f564272a The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1786827975256","kind":"published-quote","locale":"fr","page":"brand:findependent","quote":"tiefe Gebühren überzeugen","rating":5,"review_date":"2025-12-19","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=ch.findependent.android","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (924dd80483b6…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.