Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“The option to pay by invoice is great”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2524617489

Proof data

Record hash (SHA-256)

4bb58fc6b3c4adcc4fa62711330cb7bf7b39452bbe8e2b3c0dc905bedeb22dc1

Signature (Ed25519, base64)

/RDUqC2hp0R/d7uLaJcAV2ICbU7kM6PN4pIlhk4FFCgasYO8Bpry8k/v6g0jgCWukn5eyAHusVgMDZozCpwrCA==

Merkle root

5c4849a28e8624d6f6d3204e1f81a6b24f2188b6690e8b122801054617ca25d8

Merkle path

["4bac3c6bc3cb7fe2f5eb01b497b6bd75a67c9f85f319736cba22b949f003645a","7b53a8f9834a7aa30ba6f1e0f5bb555100f9e9e0a24a4d7633c2c377c08f26a6","ae5e79e509694ec3527ad4ded6c91721003f806b98bebdb426519c4ca085c849","2ec49ec28aaf1915382bac97e075a3cc40ddaff184d915d9e0300e7542b41c57","a068c00d792b6cd2b73773b03b7cac94d7f1763c7e209e44af7c9b6a3d17793d","e61581fade5e44f9bd0579aa0ddded98f082ea055d45f0673bb452f15076e826","75d57a3f622bd01916e025932ef0cd6271c8f300b4a50a57045167249f120753","76bb8f62cd62dac080dcaf127258c5b5b2f4a350a69f66e49887601cf8dd3462","ab5a32391d06877ba321743a1579394f8be8c0f3fe6a9144c45494245fefc79b","d35944fd1df8fc7cf4f3a014d26a536fc7a3140a839a957222adb2288f5de7ff","4b457aaf7c240eb32b68053d71b69880761807bb5bba51f88652ce032699f4ac","466498d84190197378efc373f44ee89fa94c6c46d968f52da9433662aced390c","45616304fbb070f744d098367d3db0bfb10c29fad886560a2ad4fe003bd3cc4a","9693116cb745ecfbff942949993950a2efc72f3f48b394aa6516ac43c745a9a2","649f189ed3a422a3ffceae7f7673f3e683a1fac940fd27a4d89bce585dd48e49"]

Anchored

2026-08-20

Public log entry

search.sigstore.dev, log index 2524617489 · entry 108e9186e8c5677ab139…

Expected log hash

2051fcd76f2ba790414bb1c15fd4d3d064889742ea46f8e55b5028f1f571c27b The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1787193158162","kind":"published-quote","locale":"en","page":"theme:cewe/billing/en","quote":"The option to pay by invoice is great","rating":5,"review_date":"2026-01-22","source":"Trusted Shops","source_url":"https://www.trustedshops.de/bewertung/info_XE3D21EA81A56276ACEED1C9AFB85F941.html","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (5c4849a28e86…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.