Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“man bekommt was zurück”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
490ee81adff499e0bab515bcb0528d6ca402379056829f984e3eede8bce71dd5
Signature (Ed25519, base64)
O7TccnvfPrD6MNIfeyddqvtpOj7M1bQoXCNK7ZK0r6s3OiHDuJ4IMWF3KqWuO50shZTSwkPhJbwqVd/NqLkXAw==
Merkle root
00eb1252356f6576712ea4fb614a5236163b3b1821e2db4cf332fa9ac5a6c4e3
Merkle path
["491500a8364945bfbc59af46f285cda1b05b734f6dd35278b60a77b58b7562ba","e3bd92e4acf26760d3d9250984957a3d5aed57536359ee4f318fac62087afa4f","6c3d6da84591b85ddddcbbc0b6150a10752faa321e01aaf3d36904fb947c2483","3fc938417d71c789ae7e3066125f9c7593c6eab1d1b0edb1504a598d198747ab","504d3ffdea79c15b9cf06e958b2048a3e0643c9373ce66e5f23f6759fe491ae7","67442679f03bae0c48fc7f6386f033fb0c3819b8bcb0a77305e9b48c75635d0f","76262057dbf7f3b55d4568534465cc823a27018077e0e19549cf158bd5691a2f","a62e0f7af51eba8ab8a785e2811ec7f055860a1532f9aa8d54ff5b8b0842de6a","0b068e6854130354a8d9fefd7fc69a73247dad5a9ed9d865cae2a86847f1caef","8a615cbc7aec89475e110982fc995faae9284984b278371e8ef07bd30a59cb44","4b9a031e437a6c454f26ce32fae6ae397a78ca77d6d2b46af0d0d39b534fe040","25d7ac60fb51f190c5fd125bfc2dee39bd667591cfa2116a4be1b947d7b1643f","ff1681d6a39d09be2c2e13b7f21da8c4d20785142bba572223fd8a1dde6dcb1b","5dec716281725808bed0364df1f1b242a9cce0f53a1e675331a87d799bcee6c1"]
Anchored
2026-10-11
Public log entry
search.sigstore.dev, log index 3199819547 · entry 108e9186e8c5677a0b40…
Expected log hash
54bf23963e2d2d167d69cc8eefdd91558bbc8835be34c5469b6e0b1af30e4d15 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791691808362","kind":"published-quote","locale":"de","page":"theme:taxfix/returns/de","quote":"man bekommt was zurück","rating":1,"review_date":"2026-08-04","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=de.taxfix","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (00eb1252356f…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.