Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“I have been working with CEWE for a long time now.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
3b1a373d26e7e1340fa9e33abf3b94195ba03debe64d577b72185344415ba5d3
Signature (Ed25519, base64)
bIC7QXRk8UKBb3+i+D2yBUlRyZXCSm95IUrN66hOW3q0zcFergEbt+T7XamXmbrX6FpGkFNl11WtR8YSdgFrBw==
Merkle root
6189a42bfe294c4034f316d047a716a5efecb511b8dbe64c4f7f543872c9bcee
Merkle path
["3b1a9a991bc94004de031864397d7732d4630471d47c31c2fd43bc1f5a66de46","8082ae9dcb9475eb850c57a7c84081e9c2e4cebb74154332f7e962615fbaa369","c3e736ac9a2fb878817bf84c6dcdad54b37960a43ab86422c5964ca540871bd4","0bea3abe9f3cc9a1c02953864b0aa844d0146f72afbf90f807830d446122b992","83b8429795af576081b040b15e6d383ab7aca079763fd3746a78b7e2117336ea","e1392a0babf9c3b283b67e2171b9ce4a725e2f9bb58f39c74afc79beb659fe40","b376a34f64d8dd07e2781cc8cdefebeeecafde0f01a3c8f1c6d8b6fe3ce476a5","ab4494cbaa1e001776bf7a098d7241d459d433589809ccc074db3f1fdfdb139d","0a4a6ba43a38081d1ef6e3d8b3774645ca681c4d043a687186a2587812ab39d6","efeb731d5ee5c96ba086128a80069b0fd7237c2d1c7892775f33cbc88cc41b83","1d105f71b48224dba301a79b1aed5a0fa0a4d5bff5fc269258495a723e670280","ab468bb504ef4409473e4d4c44779111bacbf52686b66d58b2abf584e628beb3","54715b684a7aa1790a643866cf5843a2432dcdea9093898d94c331b19a70418e","f786ac0debae9f349ddff34e280cc8a64ab579a73e0a3d3745d84df0612234b6","e36acd56aebd26af88e4e41e8d5bc2a1389f049dd914bc2c3da8d68ac2fede4b"]
Anchored
2026-08-19
Public log entry
search.sigstore.dev, log index 2514188040 · entry 108e9186e8c5677ac9bd…
Expected log hash
b0fc1d11450dfeabf778635bd8a8264987fbb7e682331541ce1f5d7507d4e862 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787125125654","kind":"published-quote","locale":"en","page":"product:cewe/wandbilder/en","quote":"I have been working with CEWE for a long time now.","rating":5,"review_date":"2026-07-12","source":"Trusted Shops","source_url":"https://www.trustedshops.de/bewertung/info_XE3D21EA81A56276ACEED1C9AFB85F941.html","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (6189a42bfe29…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.