Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Preis-Leistungs-Verhältnis sehr gut”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
38a19bcbfc289946dff1a16c83550290e66a2ecbc731b6cf8f425aa2ef256398
Signature (Ed25519, base64)
iCnHjwqsQBNw4w+TVZu6WT+h8rGh8JZJCAoc5s5dDrLFhODtRWzDFcxSQkKyiOYAt9BXuxQy3KEszMqddXALAA==
Merkle root
1128c1e3e4534f30e1f8c2f8fc1f60db99ca4dd81f25405dfff62ff1f39e22a6
Merkle path
["38a7f3ee19ac7288cdd3259bb7db73da49c5a7a1743e33c6e5c6ffdeef27afc1","75b47b977d641e5c1172f9f2482f8136d165b8907eed28fd41fb184f73d63163","dcd9a7b90ff99d20ccf791cf4d22001416252ac0bdef503f9d4cd95826861a64","7ba16761811c784cd74e680f4a7aa01351de24bd5735f6836ecfb46e3e45a590","e74fce7f2fd0c755800b8c7208afcf1e6d9b2e7d1d8b73daae329a61934c3f18","0cf63c276e7c76036337cb30df3038ecbbb6efd30dbdf7a3b2440dace0a64ce3","4e4a36ac26ce209b17111b8501779a057e1372614ef206711a2b81c66edf50dc","e35b1aac1a7097ca9f2bd6dd28c907c64800e6920290848d31beb2aa4d5221f0","5508f654d7004ef5001d4121cd34a43122bc671f6c639991260590f3197319a8","533c466914fafbd01f8ababc4cccf0619710d43e73f22e5908a50d9282f06ee1","ebf5bbc673bbbef057ca3da3406fd3e4eba8d1ccad4c7508fb6c382c198ca979","7d9bc8e86d0b49f2a6d446d841e238db1e8a35b2709c7534e4a0c2f441adb9f1","51a64e58aadc1f2055e40db03989aec4d419aafd1b8ee620338c25242e8156fb","c4a4d8b2a4d8c0bfbebb4916fd7e139c5aa71a08248affd318e33dfcfb90fbec","b39bfa02188a075f3ffabe31b61efbaa34ef7a32306f491e668efcd33d84ef4b"]
Anchored
2026-10-07
Public log entry
search.sigstore.dev, log index 3121353835 · entry 108e9186e8c5677a938c…
Expected log hash
3980f7151edd7b0249ea159b11c34712cba10d59cd8ffa603af676e538f81cfd The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791338675665","kind":"published-quote","locale":"de","page":"brand:legimi","quote":"Preis-Leistungs-Verhältnis sehr gut","rating":4,"review_date":"2026-04-26","source":"Apple App Store","source_url":"https://apps.apple.com/de/app/id563888611?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (1128c1e3e453…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.