Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Vorsicht, Sunrise-Abzocke bei den Rewards-Angeboten!”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
6b0863557b8f4f1a07634c1fc1074d7c0e1ce59e6187c3f90050798544b3c0b8
Signature (Ed25519, base64)
NAoxwEJUawipHh3nFzA4WFbuMvbOMvhL0Lia4ICHiZ8naEe1qEgV7jwWwrjW1ikdK3Irp2SndlROsdstXuhRCw==
Merkle root
1dd7fec10002d9304505761bfad9c0f048c94d1d6a0775b6fc4291f712d4106b
Merkle path
["6b09dd85b4cd7f3b5c259d6496248a31e9eff5aaad91a1153dd5b23844dfb230","e527b97c061e84c4a4eccdfe295a436dc652c09634300b80a719bd37846a96bf","1dab9af2eb5d851173b8c597b7438e55f30c5196ed270f3c03fc9b44ec2176c3","c71c1978d6161b5ff8c28d02c5658b872ff61749274d4257b106f344adf86121","74fbf30d64a0b2d40caa1bd2692bcadef77f3a4cb770a521088a181a9686a4f9","71f986f0d9e45079982aac7abd4c7569afe94dcd8dcf1985607aedc87b737cba","aade50ee80f3b5c7187077666ebea5445bb16c61386049019c8b712a3843937d","2a4b99b04eea44ecfae326cfd5d04e77a404f059d5cf7887895c3824d0146669","b5e7dd7978039579f664b5c299ff1cb3ee1c6647e3a0a40d21acd540e3809767","50e908e20a4f17eedb5b2538498eb535272f62a8bcf8c5e92de1917b999d029a","77c0128bafbee3d1aedbf84b73b75519a5f01009255b74ad251d3fa3a8d03e94","387150d47bb0c4bfe3e5c0a94c3f02bfd44b2d16e9be4ef7e2284565f7c3de2c","4ae35980c39d5fe55d029f85be00593c03277b5745fae784d4668ab06a3da5e0","446b814589c9564f51a341535d393ad23c1a9958834addb7d5c07c1be092092a","54bbc2d7930ffae8e416e662d825fe408002ca5c9c581c2388ff0eb5a37134ae"]
Anchored
2026-08-19
Public log entry
search.sigstore.dev, log index 2514297706 · entry 108e9186e8c5677ab801…
Expected log hash
861cb9c1424d2f408888a591a8305206c340f8249f4a4581b32f940ce8815405 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787126020727","kind":"published-quote","locale":"de","page":"theme:sunrise/price/de","quote":"Vorsicht, Sunrise-Abzocke bei den Rewards-Angeboten!","rating":1,"review_date":"2026-07-11","source":"Apple App Store","source_url":"https://apps.apple.com/ch/app/id466738063?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (1dd7fec10002…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.