Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“I can expect a refund of about €1200”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 3096409536

Proof data

Record hash (SHA-256)

4f011bc17ae5f10c33b6c95b72e0c4717341f32fe34ce5633f1113db9c8c31e1

Signature (Ed25519, base64)

tHMy9tsIvTgRkC7M0JhCFMdBrTwIgJYjvacWt06CA5pb+Ei8AwdiV0A/Mc5uZH1OnP1UWtgkkl4sEE3G1SH1Bw==

Merkle root

a249ea91ed6d494b0d321c9d53d89a7bb9616ff6f558eb56f9ac9b7e3eba088a

Merkle path

["4f05115cff01fee16547097a5fa04b2975fd770400f7720cb301f3d097e11a6c","13201c863bbac84a951837c6a97a4b39457c09bdf4f1e109120165759988a0df","209c5b36a1561d1901eccda3614e085fb52e1cc9b35f347aab41953088d3eabe","1ef25c927ac1b3d8baf9d6543e06a185e9f9d6153f84be6cc2cb767dfee62b19","34d35f31719d1938b05a1912be3282a8cc438a4a8ae870605feb000c8cd3e7a7","52cb075a01d6cc41738678f56f30c9841e6577347321020e6589211dd5b56d4b","d6f45c2243f49bb5372df1bb279636fd78bde74bf5f65ca3a9edede7da5ffc18","111606a6e5b91d7fe5b99efe9b979276cfad7ebf78613e15f9e0dcbe9028b3b1","d3a642d29992ce5fa6ab24789ede21a8ee747f10b13f3cdc50ed1275cb60d560","24bdfb92d7e0e2af9d311cfb5799f0342bf14cb3a3b5a9dc64daed6d1d1d3173","7d7660b634e04be3ed4c87973fee5eda30ae48f722fdfbbaa58bd07bc357971b","1389c69ab22daf00ad70b349d4441a928018222b98855dbb5430f8b5741e3ea7","d5e021977b34ad36b21da49b9927d272b0276f8c83a56fc552b6acecbe7e3ee5","754b3941f2d50a8472bcc5169721f8ff0fbf11f5f5f132a78bcf17e8d3758eea","281950cb809ebe3e75d0ee6e38a13b1a88e711d70d03b47950c14223d365015b"]

Anchored

2026-10-05

Public log entry

search.sigstore.dev, log index 3096409536 · entry 108e9186e8c5677ab1e1…

Expected log hash

f1740c5ce7036e4f36513fb4ccb4f6bf95b5dc879a1fb8a1f0778ef42370576f The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1791238940340","kind":"published-quote","locale":"en","page":"theme:taxfix/returns/en","quote":"I can expect a refund of about €1200","rating":1,"review_date":"2026-06-03","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=de.taxfix","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (a249ea91ed6d…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.