Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Vielen Dank für die tolle Betreuung!”
Google Play · 5/5 · 2026-10-13

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 3668983302

Proof data

Record hash (SHA-256): 3a804122d1408c6dec69240ad97229308b8b0e5857197e3d821013c5011cd5fd
Signature (Ed25519, base64): byJKv9JHm55MTrYy62Y98f6N4KYVKXapho61DFYPqSuFjN4n35n0iipy/iKGfVSLgU3CW42VmXbWughHgX2vDw==
Merkle root: 405d85333c1c03a7ae86f6b232380a3f0e8a386e4cd2c9bf5bd2480ae9ba2988
Merkle path: ["3a79842141e1ed4b3f6d84f9d93024de87defefc31ab9ffc22bfb0dcedd14603","e9a2cfbdf3bed8bc9ac95a8e53f12e0386ae5b0f60ee354fd33867988c497882","2cd6b0b9b2e935c81e66eb41e02d841f5734efc1d636b65f7228054bc0df29b2","cbd44b4f6800dc0a04e0f6b8c0463026ca1d33d349d91deabce9d79d9f6c64e9","febd8779c86f86bfcac9f0b55d5c449f3d239bc0734bfd89bd330f035330ebd6","9deb581a4f8011b822be9288763e5cceaf3d2c2d589b838de8b2ab50036765b5","613a7885aa8bda1705783bcfede49b48975e01dde56cfef8a71481431c1c11ae","884383c34e1db689e0e0d82d0ac5ed7f26e023c21acfcb88dbcdec64593f2802","7dee8322ad46dbaf1920d6d4c8c1bfa102bec254672538a0619ecc1655262580","f4e387160063f48b56f74c12fef260a959155ea3de756ff3d8a9a08364abde7d","e76497328eaed642912f057fbeab158eca387e5b4455b6e851f137eaa23da451","786bb926eb6a5735d53cb29a06ff3e65b4d29ef8fd39d596873e263e6e08aa4b","19a71f7971408d12f874f3ea09b06e4f9b44cd26f6dbc08d0466f033f9881220"]
Anchored: 2026-11-03
Public log entry: search.sigstore.dev, log index 3668983302 · entry 108e9186e8c5677a323f…
Expected log hash: f9f0f1b08ea9ca6d951fb003d493c517d980826708a70b4fc99c8b9c98e286e6 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1793707617662","kind":"published-quote","locale":"de","page":"brand:concordia","quote":"Vielen Dank für die tolle Betreuung!","rating":5,"review_date":"2026-10-13","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=ch.concordia.myconcordia","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (405d85333c1c…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.