Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“kein Zugriff mehr auf mein Geld / Depot”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
4220a206fb0a44f8bc618673cbf8ecbee5f4f59f920e81d40988acacaf28e63c
Signature (Ed25519, base64)
tao2KwaNMIE84Xyr/cWsBKUCNeFcQLpxg05E//RMCpennvmsp7mUeULLaV/m7TLcK+L4lbl3qnhuzCRBsK2AAA==
Merkle root
9ca8f1c1ad15a78206ceaec922c537c0b0ac598e12c9c25877f5e0e19de38c6e
Merkle path
["421978b97c0238c89fcf94fe097e389ebfb04249173a6b8d147a5ce251e6b4d5","8140732b8ce3acf9ee1a5f4f549538ac87d705b853dbd98f2662c137a3ca3cd5","cd9cf8bc50c64bc9168688359a8538699712e0b63c4b214b493fb117264e5cfa","91b1235a8626ee7a15da95212559a6ba519dd45980b43e32d9510f7adf414a18","beee0b1634edcb6786b7b0ec558eb8a16f86477527149f9f512e2108c7d8d3cc","cd02048442f05c039867320ebbbdf8e57bc3ebc1d4dbe702eebc816a795adb78","ce0ec9ec3ce7ba3c6cdc09d08174e2e538ce7e6ac047bba740a273294e7db909","45b0182c2a828a19b3b156b96abb30e03c753b5e94a065245ac9973111ba68d2","994f9417e84a6d65ab92add84e59428a5bbf3720c883afa8f96006ebd5057e61","7e56b35d01505fe714c7ed05114e39897442d23a96f979dfea6fe23ee9f554a9","a1f0c1efa1a62de1f6b8c0ce480f8ba6e131c8bfbec56cbb6fd8d51e29e76eb7","6cfa292ea4c59c0be00d2f66970090451a732bc5a1aa0d6c7f7fb04538bf6096","eaefccb0e1aa85682b1d5eb0fdeac76007d7f9e97f87d680b9b26b421dc772f5","78e3a01c18db7a3aa85fa160432e1aa22e4b131e9c27c5e2e4566764a2ee13b9","deb69ba818cac6d60ad262ee5febe93ecfd14e4c978778af299f82ef8a69b934"]
Anchored
2026-08-21
Public log entry
search.sigstore.dev, log index 2543154575 · entry 108e9186e8c5677a0eab…
Expected log hash
0099eed9d12aa99aaa44ed875b87ffaf90c46527b61dfd92cdd4db2c148aef65 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787284115102","kind":"published-quote","locale":"de","page":"theme:relai/returns/de","quote":"kein Zugriff mehr auf mein Geld / Depot","rating":1,"review_date":"2025-07-02","source":"Apple App Store","source_url":"https://apps.apple.com/de/app/id1513185997?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (9ca8f1c1ad15…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.