Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Leider zur Zeit nur sehr eingeschränkt für mich verwendbar”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
34f95023b59e7432dc3ab8eccc9940db9df555fbdaa26aa67b05f928f07f089c
Signature (Ed25519, base64)
m+HQmyJvqaL8umEYcFXvvA1F91SrRZev1iTjUK97y5r+rFtVM7sG+TIpfLXPcLqAtlIKpLy/aJpXg2FFEKawAA==
Merkle root
e880a518ba68bfe85ddff87a241b258528b2896d8ce031c201c4697c0b7d2205
Merkle path
["34fbb43af208528ea4aa27afcee1a669200ec1f4da927a403ad1f514e6943164","e316beb15fa5894b060d576ef6589279869ac7f1a0bc03073a7ecd323067bbab","04338715f49102a4b2635f1a64face522ee7755da0c8a2078a333ab7ae6e87ea","a845c264a48bc3af1dba645feb41e622bd6cd2d0c78e973d1415e16071c21e12","703d6bc046df6f648a86609380b9dc772167d43987f8cd382c65aba28b3e5077","0a15654d92174231a00d6bd9b921aac42cc160073f69cbdddd215920d628ba35","11dbdad46e87d886037e5c20d9aed1bc83aacbfd648e6c9401603f9e7097b01f","5f983d28b800b9251c744dfd9ddff8d70dd36110fb96eda7f9868581d474cfa7","aafd2a6b6f04dea5aab2594a926e460eb2fd2599579ce6466497b9c9bb2173c1","67d997c199efb965ba6bcd0f8beb57e674c4bc163dabb451e8b02f367cab667a","efb95eb1a5466d5b3893dd907a826faf41d3bcd3bc0b57ada7634d8a44095f8c","8a435733d6ec9ef6acef1a68a8abeca4856d0cf9144e380af029c4d42de078d0","b82cd14df0b3d85584df275a944fbf2d2903869ea29e988f14fdc663ca4113b4","8c997d59f41540bab49c6414578aed00ec9a73fd31959523b43a0af5a2eb1e86","269c643459740a67a842bbee9fda4a35b5098a4f015e508a69431212a0912770"]
Anchored
2026-09-01
Public log entry
search.sigstore.dev, log index 2680681799 · entry 108e9186e8c5677adf7a…
Expected log hash
23ab6878cbb153d06d6958de44ea3fafe32bd61b03ba95bcd26de9e09248aedb The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1788297623062","kind":"published-quote","locale":"de","page":"brand:tomorrowio","quote":"Leider zur Zeit nur sehr eingeschränkt für mich verwendbar","rating":3,"review_date":"2026-08-03","source":"Apple App Store","source_url":"https://apps.apple.com/de/app/id1443325509?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (e880a518ba68…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.