Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“These arrived quickly and in very good quality.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
46e36e77676c426b88d2d638f9c0f5ff35bd927abede087e6303e03c412464df
Signature (Ed25519, base64)
NISaewtL+qbUvmKvHPZ8Ih+uS1NsTOFYjfIHAfJL3X67QmD6dKqJlFFIVS9JnqCxdhGGRTyE0UBShiwMSJSyCA==
Merkle root
9ddf6b9053b6e5e7a2f15ee7f3bfc8dfb72c48a1917ae5b7e553033e3ded6523
Merkle path
["46e4471e3f44264f0fe19e8ed67f36f154a1ea07617a7746803e8e6cb243113b","6fa6ee4fd53d9194d186ca58ec013fae7123694af386d5bce63288a60a7373fa","1557025af513e18f06fe01864c3a02b72a1c7b9974bae6dfb3c9616beb2bf273","c500e39dbb6d7fb678ad7db888fee1707e1a625393cc2af4f691bc91b6fd302c","2f0b2228e574e32ec37ad10a948d68cb5cb733fe8b3071747931ba14cfe880cb","91dac43a8293afb4a1e69089dbcd96ffc2389e089706d223c3ade3b6862b1d20","e485ebff3708fdc0b68e4bb71a1caaca924896cc0741fb4ba2fa9d49dc91ce22","0bc48de60f965ce73e3eb2d9f6d8a4c7a9873df27b6b55dcb82a526e1a60b3db","94ab457af097eba3cf46ae98cd40c94bcea7276ba67a7efb79b2a4a3c5080dfc","2c674bb02063a04389143204da6d2759edd35b6dfe8277115e9d26f02425f259","cb95e9113948cf05824a58d5d7c97eda3ca7cff014de08c221454d3ee7e19a7d","db5f52b77dba7e273fd04b4e662f89073fb8d8400874c5cc7bbd809a4dd257bb","4e55fbf7ae63bc538398b4fed1ca658ea06c5c93c0235f9de3c90ed09829d3d0","a4308f946a16111c9d609738b93b2f2ae813ce88e33e490f89cf33e3a52e64d3","50c4eca268fbb41f8c6bc36d8a5d1b6cc09733d96f0fb33e6cb584096c56f695"]
Anchored
2026-08-19
Public log entry
search.sigstore.dev, log index 2514967984 · entry 108e9186e8c5677a902c…
Expected log hash
be0cb34bbab326d10b25013c37c9294b14554a6c6e9fac3dc68c06dc2c3c60e7 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787135269737","kind":"published-quote","locale":"en","page":"product:cewe/fotoabzuege/en","quote":"These arrived quickly and in very good quality.","rating":5,"review_date":"2026-06-20","source":"Trusted Shops","source_url":"https://www.trustedshops.de/bewertung/info_XE3D21EA81A56276ACEED1C9AFB85F941.html","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (9ddf6b9053b6…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.