Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Im Web kann man nicht mal jährlich seinen rechnungsnummernkreis zurücksetzen mit Jahresbeginn”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2472785369

Proof data

Record hash (SHA-256)

335ad2fe5498ec421d17761e12921df13fa35b6e81c645a12b270e885ea03ad2

Signature (Ed25519, base64)

cEB282ePGWODH076uu7y/oqNbszdAi51ldkf0kxme8LoRChQmQsljeFsXqKQ2og7ET5kpqqbvEYBsyvHsA4wAw==

Merkle root

d4012d7b55ace7b121db1c228197aa3496a055f0662ed02b31781c14c3c10633

Merkle path

["3361e002c5bc42eea7595d2580243409ee4114584c6a58511fd1d4ae22747687","7047f424b0c22daa6dab368c3e2be02c65c13e615d6af63e5c232faeae5ff622","1e2b1da2229c7d2014109513c8db779e7408e9e994a2e0057779d4f142276f92","5000a787d9e5ec3241e48a7beaea72a03cca51dda0e26e3fa658f32e04c82a61","4704e942f5aa5ff3aaa54dbf41ed7362330821e3a2c18e13053731326ceca4e8","36b173dfd9306e642ee4a9b69d2924086f0aa478a2af87fc39ae3664365581be","94eafe6c4ba9f831b8ade139bdd57d1fe38440339678ad19eca115ad39feceab","f669db7158fc2c4f6bdbce6ab571ee026e1c94205c4e005ed627d19162d27924","08e9a9bf940ba1c16ba3b58a2ac55be91551ee44e764a7ddeda082a92c6d3229","d1edfb9f954cb262f6f859823c1458d3b115e04d3c5dfa5048a5d194133eee4a","b9481b7b6a1b43010736969789f7663948fde937407e728968e13d3d191496a9","f2f72773eab0041d255af058fbb2525eed23e8879a8d448349115f796f9f7a25","f61850a567de29eceb5a6b083d24d3d1a0c0f3781f8545c703f9b98012e592fc","0e2004b9b19d663f7288f3a966f0d1c4846f4bee6fbd11cf70671dc6d2c1fcb8"]

Anchored

2026-08-15

Public log entry

search.sigstore.dev, log index 2472785369 · entry 108e9186e8c5677ad9f0…

Expected log hash

55e32604e78b7c07822b8f70b5d6a8c56159b7b02fbe9ebaa5d723318dc77aa8 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1786767737769","kind":"published-quote","locale":"de","page":"product:sevdesk/e-rechnung-software/de","quote":"Im Web kann man nicht mal jährlich seinen rechnungsnummernkreis zurücksetzen mit Jahresbeginn","rating":1,"review_date":"2026-01-16","source":"Apple App Store","source_url":"https://apps.apple.com/at/app/id731738076?see-all=reviews","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (d4012d7b55ac…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.