Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“zuerst sollte ich 300 Euro erstattet bekommen”
Google Play · 2/5 · 2026-09-13

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 3273053873

Proof data

Record hash (SHA-256): 587cb27f1d287eb87f2dc37ca0efa7ae6ed5a188adf0ba60bdddf58e92fe7e78
Signature (Ed25519, base64): 54KkwsiDnZliIEb53yqrbpsyq1syuU0tV+Osn6jRkkLtqfY6kfQbsz1f2Jv0UbkO4wZJqvi7i5rglUtLbnJvDQ==
Merkle root: 6953a5ba9bd00082fa1986982a5979aa7ad5b4654ec368f8d247f13243e4e4b8
Merkle path: ["5879cd8a77a146a6e66ff49fb99a8ea30cd3f0988304e00e872e655805b80e7b","b04e86fa6493a4aad92baceaa3c0aa7cfc725732885a0c4c42fb498bd0a56eea","a78ec2405553571e270f0e6994aadac0bb3703cc0771120ca386f1b5d32167a7","49f9bf0466715f81a766994c508bb2b1ec9cb0b07f78f90f7b2f243d4f469e14","1348c2368befcbf2bf90300930190172c1412a84b6a3e095e38d0a3951fac5fa","e0837ed9709d1f5c8e4b2286270c966005f5d60db00be3ee0fd5bab0031bb0a8","c145443aec01d4158d304ba1a6903fd896d091eebabdb30295d0d9199754cc11","22856359708e29f8247623cf0eb9d87a65b2de89fb183d4635f31dd5e74aa7c1","6043e6d2abfe95a2dec80415fbd10a8cfd58a0a54dee9d7f77575d7b829cb845","8b0635beb378af68ca8bc5d67db733c0ab86604c3dc509ae498aab2e1774a104","2a98c90af67480f4585f64bb5f74f1cbd21dee5af23b3b08ca69e20faf615211","4712a5b33b6ff50d50cb0d169be1d0e243fc91c6e42666afbd10d27e6febb385","3d6624c631c3f201b337a52bc4f9494c99366c0aa74b4db152cef1b6807b4800","98a14e6f55278d0c3f64d31e6bb09545a033fdb7dd6455363be23426eb85b044"]
Anchored: 2026-10-16
Public log entry: search.sigstore.dev, log index 3273053873 · entry 108e9186e8c5677adb5c…
Expected log hash: 8e660c0f9c2f4acb2461077e20036379bc945573437a296969373758a8dbffb8 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1792120102008","kind":"published-quote","locale":"de","page":"brand:taxfix","quote":"zuerst sollte ich 300 Euro erstattet bekommen","rating":2,"review_date":"2026-09-13","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=de.taxfix","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (6953a5ba9bd0…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.