Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“underline, comment and write what I think as a read a book with the app”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2514083622

Proof data

Record hash (SHA-256)

6e674c6b434d8153f3f836adb5d70b6ae6dafa70caf2d0457407ed0fcd182ce1

Signature (Ed25519, base64)

xFSLl5OyYER1XmBAA5sR7/1jU9zT1KOZ8OhIDnszZ7HmAd0f0+bhTyrTDjp3Ys0VEQ8cobGrE5GGQ0G3BWlVCQ==

Merkle root

c35385e3159410853b606ace3c93abcb561dc35874bbfae2272c5b0050f06a48

Merkle path

["6e64eae43c3a1db03c2bd1d315d52cc308e01c3a49bad02d254dc6fb540d3081","fdf92479b46c95ec5cd12a00b19899c97b195e6e02146522ea529cae1e0a6c8c","8e51a220697d1981ff02dbbc27b1c307eda2bf43317fb3ba6a8c9a7df89ae7ff","dd8263b5723cec7759eb93d1f657483c7c35c89d97d799ac3dd35ddd9b9c5ee6","9ae7b5193effc5a64cdb962a9ef622d53983bfc98eb44a426f1fe18ee9e440bd","537712e6e7d2ba25d470a75d8910f84e924e328b988a08e018b52e1ccdeef986","db958e75b1d6faa20c08e08c37d9cf0fe91e53760cdb22cf4150557f60a1d0a4","a9cf6d816d805076732b9f6af6a7932703e2fc563ef5655a1382ed01308907dd","d7c69d71dbb85e6500894d9e5498e05c3d18b66bf2fe8535aabf9c5f84653568","dbf7c5c902490d69ed822e04cb826609a5449268c554cb1e0156f05be6758031","539c875f215245e52db4a8c66bc397e32d92ef530dd4b3023b98ed0439d34a9e","8e5f57c1a2e96cf055d7b9737b78ff93242efff1ec17e65db056e13fb18c4839","6cc2706a4ceb9b9114520cebef77f34a5bff54a2bf14e315fba81a7635eddb21","eb865981e8703d40e97f7a1d500cef5e7bd341c0e720b4ca75d23312d5aa5f63","19399f0af13a2147dd8ceb83692caff2214adce3d49571e366dcfb3633df2667"]

Anchored

2026-08-19

Public log entry

search.sigstore.dev, log index 2514083622 · entry 108e9186e8c5677a81ef…

Expected log hash

eb47f42546fcc705387579993679cd6250c0b995d01bbd10805cb4c8d66efe2c The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1787123762743","kind":"published-quote","locale":"de","page":"theme:xodo/quality/de","quote":"underline, comment and write what I think as a read a book with the app","rating":4,"review_date":"2026-07-04","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.xodo.pdf.reader","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (c35385e31594…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.