Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Update vom 21.08.25 – das neue Update macht Messungen unmöglich”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2907673729

Proof data

Record hash (SHA-256)

57bf61f75cc30da170e106cf794dbf2e260052b04b4b8d00d168f861c17a5506

Signature (Ed25519, base64)

nj5B31F/ZOiyScohmsFWpGqoFsX/xuo7ZkBRiOI8+I6MvS32AspgKOOIPRM1S02GbOpto3acdvhIMb8TIZ0NCg==

Merkle root

b9a08f9d6d76dd148110a496219c42cf3205c6f982800d84d5c85d77e9461e02

Merkle path

["57c23ebf696a1b3de246d1243d44f0255fcb4e4147868d97c8973c08295a6615","b872cd621502e385805cee50995e56957f1d03e09acac2e2068101d22074fd29","2e3a81edb922ab6108748494f5198ade1589adfd8b5c78f86920966275e4ba58","a8f576074c43f6580a88ac11b46ec0b21f73a5adf660bc4f5fffebf23626b711","4d4e6cbade61e343459d162adcc1fcb869a981c4910eea9489aebc6d41611c2e","2e364b31fa797a4ec5bf9eae82d19f7bb48f91d29d9e888cf0990b973f7f59b1","a4a6006e1e3369e853fffc11b731f8a7157e87cd3b1f4667f17bad8c70eb1a94","63361e057001b525d1aaf70bd1a4d577829d7403a737e427b1976fb541209eb4","77f80de4362f4f772f5d6552f1b46a300d7687a44cd8de78615c14cf70af8012","766bb4cfe333eac1737cecd6265d097df60f473fc80a54e7c8c7e0a78563296c","87d389c83fd89e992a96d0b9792dec0eff9c6544ae6310a697648d3aba29323d","0197d988959ac12f7d8946ff2581c88b7ba9a4305193828cca53fbbb9832a064","bcc0d977b8ab2060a87584efe5d0f5545e840726716d3f02c248db108122259f","6c299608515c69a03540be35865f96ca4932f3e0403f8f39fb0e1c2e2aedffb4","43a562d6822dab12c673c1efa0a3171d1ef69b949f676fb01847e1e5b56274de"]

Anchored

2026-09-22

Public log entry

search.sigstore.dev, log index 2907673729 · entry 108e9186e8c5677a06ea…

Expected log hash

bf9a74000249ba6e66b1e29aae9d8cb95c3400dc118569a80e5c0949f3e8ac62 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1789969984102","kind":"published-quote","locale":"de","page":"theme:anton-paar/quality/de","quote":"Update vom 21.08.25 – das neue Update macht Messungen unmöglich","rating":1,"review_date":"2025-08-23","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.antonpaar.homebrew","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (b9a08f9d6d76…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.