Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“das Geld kam von alleine”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
4b05b63a4a5c390be39218cbd709e2c416518b12675b194c0d69f6fc6023a1d3
Signature (Ed25519, base64)
ZDlKxGopR5W4RYdx5Mf0HnPORFydml3VY6lf+2BgRUAVrzmXnH0JgaiqIFHKnQ7mgFqT3x3UVhSr8cjxmsYeAA==
Merkle root
a4d47c2a34f6eeba31e2744fb1551fe9a0e34820dfc152f1ad93a68b24759c3a
Merkle path
["4b04c3d5fecb6f7b7e2def8e51ed39128f89950dc7bd97dc1cf7eef7b08ccd89","6c4a593d0026409d5304f96280689e34f9d7a2ad209d351a5850f52d90d1e1f4","f3b33af26e561d225a8d1bd4585ec88fa28d0e56f3b7a80da390f9f0d24f80cc","3f77df100cd6a04f7e62756412b8427a0badaecb4932a23f6c47e8f2a39b5287","77d1521057c9a01d5e4043a41a896c2b1374b3846d89fbb5e4a38af69207c992","11d84454079f37835e1c4f1d4b97bbcbf52cca4d61e7ac5ee2e30a315c85c72d","deab4d36ebc6b31d41b9c083e6966a3f5574e0e7df2df19dd62297d7c8c5e3cb","aa23937f2a4f89ccd3a9ab7b96b129090e6df9ed68655180bc193f37304f0bba","695eded4b4b5d29944f1ea76c5543e4bf6bc425e4de9481171b1b8c22f0a8e59","234b251913a4b9cf6e5e752f39644b57b8861e5188ffc3a9e35d5a7870ba29ff","0aadceef0f0d856f742d189406dbaa3aa5c755ebe9fec69552e8b54169d5a407","349e15569e0a1f4fe3a9d16d01f014e54bef7124bbf1f14bdc15063bbedc0e8a","0d7c4faad4992f205f2c1ebb2b0e4b1b7e9d070f1f77d3f8d64b80626c324f46","35108299fffbb5c1a0d86f074b5805457d73da5ec7c848a19bc9a928f6a42a99"]
Anchored
2026-10-16
Public log entry
search.sigstore.dev, log index 3272274666 · entry 108e9186e8c5677a2724…
Expected log hash
d56e71820b4c8c62b755e9f6e3d2b624566d12db6dd1606e99ef55749400c387 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1792036997995","kind":"published-quote","locale":"de","page":"brand:zasta","quote":"das Geld kam von alleine","rating":5,"review_date":"2026-10-12","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=de.zasta.app","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (a4d47c2a34f6…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.