Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Overall, a waste: one year, €80, and a lot of time.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
35d88525522c2eb81afe62a64031f586489eae64e7e0c9d017dbd610fc472f25
Signature (Ed25519, base64)
InzJ6BJ1MklobHxuPW7Pb2VCnrCmMY2a4FZY36qI3pdAwDmwRzZrekEPz9vFfnyV35DlFT0Fik8jTkpadP8BAg==
Merkle root
2030d4ef17fc68fad1320305cf569e85a00baea931fba0d3ebe628cf9c90c35f
Merkle path
["35d5dc69ee838591a05090959527bf174a2c9f07aaafd0d6da3b33b31b57c139","0f26c8ffeae3917cde89c2ab87a2f576b6a6e99383fee5b37bd8ed75db3cd519","3bb5a87f1bdb98e504b3cd4f6e1a98258ee75b006983b5f01025684b7b0d5c11","7e8c019a7fe622a090fc23f346cd5407e3eb598e0859eb8cc2e14291b822a991","186423b4db275fa66907b6d1f225907c8d9b8ce4f4dafe44bb797c4dd89ba5fa","a8f8fa1438b0fdcdc73aad2decf264288ad85f17579c0c0c844678f8789e2dad","9729f1d27698879fa5f319c42607ff6abdeb3955663aba118dbc08a15fd1539f","423a68fb7ec9c9fd32592192fdad1ca3a53a4aad3be3f87cba01294a3d8e6d45","b0ca6c8d5a482e16555f14556d98c351ae0c4151db3ffeade7c06ede5c1590af","6f0b2e50eb9ea43f430637351315d9107a5ce98de0145f7a6d8fdbe39c2d9c49","54d61dc8ef7a7ca46cf7f7757bdafd0a7b0d8f92d723b668f28f377d7cc97d17","4c80fac9a3e2bbcf6ffb025e3533a28515475c498708bca71247f8bf54931d04","3b94761186bdb870df8b4ec2f52e7092158883022257291c3f0981e4939e9a75","bac51ea5b704b29646e9427857e311e108c5e79191194f7fff260047321ecdd7","e362b663c2c1f5a93380a04a7aa41b42f4bafc7f870e85cf63803f76c744c486"]
Anchored
2026-08-19
Public log entry
search.sigstore.dev, log index 2514654467 · entry 108e9186e8c5677a9253…
Expected log hash
ddd8d6dfa3771a4106292f7bec674337dc9649465b28b118bb17bfc2b8ff0a67 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787132872903","kind":"published-quote","locale":"en","page":"theme:sevdesk/price/en","quote":"Overall, a waste: one year, €80, and a lot of time.","rating":2,"review_date":"2026-07-11","source":"Apple App Store","source_url":"https://apps.apple.com/de/app/id731738076?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (2030d4ef17fc…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.