Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“einfach zu bedienende App”
Google Play · 5/5 · 2026-06-23

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 3198797320

Proof data

Record hash (SHA-256): 5119e88da8ec38aacb8433130815ec57fa5b792a8e5bb5486cc86ff33aeca470
Signature (Ed25519, base64): /xGqPoKh5S4urwONbKVKrWZvJCCfOdnIFz7YqhQu7ZTJkogEIIwfIsyOXJRkowwlCZ0yxhoMO6qmBYTjiBtPAQ==
Merkle root: 199738dc68b66dcf66f6b0cc77e2cba74c3bfda88989684620837b4c4e64818e
Merkle path: ["5119ac8aa33df2b524cfa6102517b87df084034ba15b53363977320c84120ce8","2975027e6f09f4fc649041d24919b11fe6d8bc29263ed1e7419d334577563cf4","3c38da2da03021b75a08f96064f5bbf9b70743d990bbdd10037ba6a3f36d13e1","93d8af048ca083443b9a2bf5e1d527a1344252cca93cc3bb7ab7464b8380bbf8","360097b1bb3f79fb79be53fcfbe7de09a13ebb003ad36625502b6683eb100f11","c85503755c57947d3f80a5a52a5d6adc977c3ffebd846ea85db4c66f7e2f973f","0eac04d47edc86ee7e3ef382dec5ff4113affe1a60d1cf1d8c05b5ac03b96d31","a4e2e375c2ec103ad23dc696553f63c9f98eb4b4884367747682aceea06b3028","4ff25e61a48ac5bcae362fb44f2c5e835e4661c0ad3bceebd44c184700fde70a","11cb049d89781be490ec7fdc52a0690dca680fff2212edc38ad3eaf4546c9796","4819cbbd871abf60ec554a51473e2bc17ce4d8ef355170e3a704c7ca1cd1c9ef","793a0a113c6896c3097aa5fd875e658514ad3a060dcb3a5d23abdc1b4da18d9b","5dc6942b342fad0953fd3ad3bc002a6e4d6bf8c4ba6db81c1c43744a0d2c9996","ddc8a66e59fc8f0934334cf08e419f621290129e658cbc58d8ec27bafd90b0af"]
Anchored: 2026-10-11
Public log entry: search.sigstore.dev, log index 3198797320 · entry 108e9186e8c5677a14ba…
Expected log hash: 46227e67415cdf5b62c43420eb8b7a80b35acaa912410c2711787f678b77c9c9 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1791687727006","kind":"published-quote","locale":"de","page":"brand:audioteka","quote":"einfach zu bedienende App","rating":5,"review_date":"2026-06-23","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.audioteka","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (199738dc68b6…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.