Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“€75/year for only signing documents”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
37b97b0cf690eb36f62a30410154b108c948037777a201bc760ad0c71060aaee
Signature (Ed25519, base64)
TTauxi5cpNuwdZIwfghheJrEeJp2KtOtdC5pAUsidvi86W1sDONNYYNVN67n8lb87PQHWMNAcwIqQm09ivpzDg==
Merkle root
92de3fc6370869ec6c1d0482494ff1816d45e719fbf27ec8d8d02933c2b7c658
Merkle path
["37b8d1e360a995f3aebab76ac79574bea9bfdb0d308d46e815b8d5b4aa08cfc1","0402d5ba7bde53af4a917efb362203f44fd124a2ffe8944c343b26e5c84ffdbc","79777ffa6a81795ac6bee4fc6d79bb2e184251323fc1809f568fc174407c53a7","f49e1be064fd92d1520af809156f6dc9280be2cb04fae885764de55da2b440a8","7062d8e0eb653d328f47b57fa81b5b644554535b907c7b6ed2c94589766f3665","f5dbfbe26ab1880a37b8cdf346e94c387a54074f19400f39b7255a711ce4cdd5","4a0f900f82cc5dfeec9c397e7807564aae37a3b2794d2e10848f10cd4f588931","818fb3b1fe07b48ae2096fb2b8b2e23a77cc3ee6bb6378366f848aa44f1b9cb0","f010198eb3f84b6a47652b306040341bd0205d1c7f585bb70b966ec10953e784","32aa68caa4f8622541b346efdbf265bc4113bb10fd53e0ac6e401ed319de9578","ae9fc411dea7fa3a6579932d1263688cd21f0d1405a931e5aeb3f5feebfac140","1e75dd942de25b5f27a7c27279d0120f9252e936ba149451e1e56e393abc64b8","a509e8f4d2cb543c440130ca624f7c471ea935c47688fc6a0e46ce109d6bda79","4e60c8870052117ad280950bee2be0f8a355cdc9c18fd48de6f1a997eb38ac39","a501be5c1ab88f300525e7c01289a28bce17334eb0d8acf270b9e649519761c4"]
Anchored
2026-10-06
Public log entry
search.sigstore.dev, log index 3102753131 · entry 108e9186e8c5677a9761…
Expected log hash
5cca28352ab3a467a358005e8b17999e96a5be0f2e71c2152bf575d4cd8c238a The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791264491480","kind":"published-quote","locale":"de","page":"brand:signeasy","quote":"€75/year for only signing documents","rating":1,"review_date":"2026-05-01","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.glykka.easysign","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (92de3fc63708…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.