Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Sehr gute und einfache App.”
Google Play · 5/5 · 2026-09-17

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 3240231023

Proof data

Record hash (SHA-256): 683e8bc8533bab107f218cd0a9b2019da9ae7a14aa82bbb10849853ac0030dd8
Signature (Ed25519, base64): /Y0xhP2gNOdD2hgDrw4si3sB5e1IEeROBDPigJChp47e2DeD4UU0mwYEPajayyok751jFBJDHfrRbvkHOP8PAw==
Merkle root: 888a38c73939ec95e6f226dbfb3637325026fcafc5a795aa4e227b811d6b2c84
Merkle path: ["68478e3b15f3897901c17bb3008be14aa86777d97fff38e7f31d517154d82fed","9f12ca5cf03df62a4a7e89afe8be827a7773154b35c99c5d76e5710e2519ca70","162e043c6990b2b99eaf4b5a0e7b8943f5411a1600dfd6ecc1fd40fde3fc8d79","ff504982d0affea10e8f21fea7957d3ec85dc33efc79ab3a00be29a17ced5948","c7d91d1f11564d977c9be58affcb51534bc57df37a305cfea32a55120943f88c","a681e8187e810eab90915cfe8673ecac4580db70ab341982807015c1f57338cf","19076e0ed673a2f96ff0f750c9f7c31b83d5caf57bc3e0c3f3c7ef1145d405cf","bfd588f0de0b377da41ff80e58cfacd127175af97cae8eee4725b774e290c2ad","fa6add171f5923939c0a3282d76ce06c569ea8da2a31d939e8b44e93d166542b","a8bc6cbaf6e83050a6da3fc95a0970fd6d40a9dcce81a6b134c5ea9b92f5657c","dccb3ef893f023e5d3a169a433d7e47473e23751a12ff4650c7265b0155f4c73","7679ef7762a2f2264918aefaef827758b32914a11d7fe90e91135a7bccfb5f67","e914982b1091e825c1b1eed272fcd3bb043d32154d866d3ead686c2cb77bc78a","f46648ad2fd9f2769b9fc0ba1c434d2040de67cbd8b7a61df7b7575cd5a9206a"]
Anchored: 2026-10-13
Public log entry: search.sigstore.dev, log index 3240231023 · entry 108e9186e8c5677ac0ab…
Expected log hash: bc440cd3136178aee800fe49b9cf2e319542a645c9abbb8553c6ae1e354ce201 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1791860805798","kind":"published-quote","locale":"de","page":"theme:zasta/ordering/de","quote":"Sehr gute und einfache App.","rating":5,"review_date":"2026-09-17","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=de.zasta.app","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (888a38c73939…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.