Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“geht aber nicht mehr..”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
5364e6197cf5eb5e7016559b1a0407e804deb3f5ecdf75b3c2ab6268356f4322
Signature (Ed25519, base64)
NhkX+3EAcbB0uqezNJ1KKCtva22L4K0RBAjCRAZ8EAig7dT8G3x55+eZhs8ZnQ8WfSkMBQMbmGlZrSogKjyYCg==
Merkle root
c1d49fab62e94ee1796f3eb15e1a21f856756e9a68ad117a17ae6c9694ffe1e9
Merkle path
["535ce51e973a9dd5b447f7e4fb7d940b206a017995c86808cbd966145cd7d608","0b768dad7abc7564cd21d4a44bd3c8aabb25c503d3d0880c9acd15dc7c24c5ef","8685ad741f338d8fa0fb9e6ac8592d1f23348c0b0963422a23fb00da3b177185","57731485bb4edd68f428b6dfb2072ec35ee9120d34e980024334f3079addf5f5","c722923eb47c3d33b6ce5b46c7bd152e6712f9526d5e3e9319a5c1ad5655078f","dcc0a52980ffdda10e156e76ed238f64b08822fe149751c3e2a757050bf659ec","2a16324d216aff91dc1a95885527642ad341a708b59069276ed8624367ebb52d","de288a21522faadafab927b1f260500215ca2fd44a7a09ed5fc80a4be8beeaa1","30f42a78495057f5df469d3c93765af68510445a11d0e4b9632d5eb018e5c984","ed866abf8dca932aef8a0bb02181dc7f41d06dfed4b6c440b9c824e90aca5d68","710ab634f0fbac2e9432b0434033e6e979f94f32e8195b1327c14f872622319d","9596fe45b06313e9f5998895cbf556766fc4e5e93f892ca136b88ff88cbd99e0","856d9a6a3e94d695a98fa0bb5ce8d80e9fc70a3794652b53ea754ef3c0720b7a","436050ea3288f64644ca44d910bc166b737265d33885dda72495c78f7429279a"]
Anchored
2026-10-15
Public log entry
search.sigstore.dev, log index 3258717636 · entry 108e9186e8c5677abf47…
Expected log hash
30640a6c2a3bbbd5aa6e5244e634da7339a6d42d7209b3c3a5dde0fcd662474c The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1792034121129","kind":"published-quote","locale":"de","page":"brand:atupri","quote":"geht aber nicht mehr..","rating":1,"review_date":"2026-05-03","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=ch.atupri.myatupri","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (c1d49fab62e9…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.