Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Sehr umfangreich, Super PDF-Bearbeitung”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 3124493015

Proof data

Record hash (SHA-256)

35619e399ff1b69a579f8fe40d2d2c6b721a8d5521650349acf6eacad5604943

Signature (Ed25519, base64)

kfIeI7Nv8y4P4g3MGIFOEmxFymXJzCBj6ua8OFu1gfBe6g//cyXyGRe/U/r7mdUeQi4A3XqxJWGXEeC/1OWcCw==

Merkle root

c481d62412848235567fda063ff4784e8e49df41ad8b5c570de24ba396415d22

Merkle path

["35627545e8a986a2fd9f53068e5ba64e62c63ca765ee41bc5fbcc5a5028b49a3","7116cbb6edbada1e9de052fa288b852c90f23a01b8991fda81acf029f8bbdb64","7df275b7eff119d1cc92d0450a7960fa9b1d27754fccc2dbb786aa375680cb86","08a62a997517f38b9f513076e8a783913a357d5c32f1349fdca9de6778d77aed","3d1c28ef4ad6a3e32d31e6d755358239007fe02b7404bcf4fb74f9e0ed244eef","38d30fef4d58b032d7c1a44680c6505b023daec25b57831d056e3c922addea3b","db07fb0f3ae5e3cd75cc46a6920875312c3e7e9ffb27219a834764b0b9a0a3c3","0bd0e9e14b1d56f352ac8e97409baae30b40243cfe0cf56d6e67a64ff47b7842","ef0a109a98f269ada3f7ad16a8d8214e81ff675d440a19f0fa978360d70673c4","0ff2a0f45a870ed5cf36db184dfe5760cb8d489187c08fa7d9d9b903a7e6cd73","95879bf6a3fc7ce70ca2b471f5d4f88658538920a826165aafc72e37a36801bf","561138a292ac5e055874c6350bb92a5c3a0d1ad819d0ef5aca78b9282f712d50","8e2d739e7baaca5eec7f3b63cf14603ac9110107e45e291795e5962b0aa5df6f","ed99a4b837bfc052822e7d0dbdd9c56431a87e8600550f5deaf9f7068616c82e","0cbfc145d581a4c4b7198ff8f397c34cb4ba6263e9e9892372f878302426dbe6"]

Anchored

2026-10-07

Public log entry

search.sigstore.dev, log index 3124493015 · entry 108e9186e8c5677aee70…

Expected log hash

0056b042c00529af1248b70a0a2fbed761990dd7841ea722369c29a2685ea6e1 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1791350987184","kind":"published-quote","locale":"de","page":"brand:xodo","quote":"Sehr umfangreich, Super PDF-Bearbeitung","rating":5,"review_date":"2025-02-03","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.xodo.pdf.reader","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (c481d6241284…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.