Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“man kann die Playlists anderer Leute hören”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 3198225546

Proof data

Record hash (SHA-256)

3ab7e44fb96dfc35ff07a86432560dca3734907279ba4de49364c79999f758d7

Signature (Ed25519, base64)

zFyySFRKeaWssYLVP04PDGsFxsq98flf9U/bLpt9Wlr6gxLlzmivIUvE8/beQ4T6rU3vkcYsiesNGnduDcSeAw==

Merkle root

12764493a64961d0e0d426bbec64b837c2e35bc22a58920afcc56db07df6e8c9

Merkle path

["3ab8500e0a64f8638c8d87b38d7405ed985294c6f1030772efaf6a0037611b34","6323a77253eeb7b8d88d9be4e20dcda1384de1eaa4c5cc22aa1b30fe68626741","2aa30277d101f6453c9bceb9bb7877354b659485ed7c50b684e3f2aa02f4417e","9a0a5542bea9cffb2311cb37cc915d4cbeb6cdc4a640cc9227b45966ea2565c1","991566371cea8c6f02f3f2b94ed637839a6fdf6b3b16be176dab43f76630fd80","80911449a48304620d1435278f98bb82e4364cd8ed54fe7ceb5a7f7c64b70f14","94ae1d7c787ce93d3fa6ebb717fefe9117f86f1ab0ba9afe323770cd79030a49","36bf8672c1522236fe8628e9c8977d51cf35128d3de2b0266e3a4a359c4bdad7","81c45d71058f93fd320fe069293127d4597b2f8544075d0062e4ef0d424440c0","845d2b9aca9b9ab74d092f1396d90769947590487521ec7fbce144ebdb46fe5d","850f40bca8479fb76723330a998b26e893fdb60793e9f279781b0ed6032b5058","b52a8a3015ae5229f5a7205f9433251f53bb2b22b2f3bb0bfbb3deb2076f2c89","b6c6b7aa75be4fd4f206793d7c98702963f427cfe45d9c46972416cafee9a131","bf01790763bd70681430a2841b8504c59b88918b5b88c9d70f6ee7041d7ca6c8"]

Anchored

2026-10-11

Public log entry

search.sigstore.dev, log index 3198225546 · entry 108e9186e8c5677a10cb…

Expected log hash

a11b46fc63b94f32c49058752856fbdc4e92f7a41d4e67238e3563657fcd50e4 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1791685609571","kind":"published-quote","locale":"de","page":"brand:spotify","quote":"man kann die Playlists anderer Leute hören","rating":5,"review_date":"2026-09-20","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.spotify.music","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (12764493a649…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.