Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Einfach und Gut.”
Google Play · 5/5 · 2026-06-04

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2542879916

Proof data

Record hash (SHA-256): 70cf97418d90a19e5cbb3ea0dc0184bd01e843518710eff2c153658ddfb7352a
Signature (Ed25519, base64): kqzzu+2tA4LkyO30n/joMmhhy7Xpv90U2A9ly892cE+aWBJuFnj6ciWy3gZ92QqQg5Ho3Qm0Qj46kndhXI2LAg==
Merkle root: 681242bb8cfa94d3b60cc06de1bbe3e5e124dc1675276b11df0aaabc9faee58c
Merkle path: ["70cd15d3bd899bad40fce29fb98ddcaa11c29dd29be3f3cb865cbc2a723333c6","52732733e69d63c0f537db14aae2451d7edb8a71e21aa39a55c3eac908ceb14b","624915555cbf8d63bf51642c24eaf0aabe7c8d8452fdc15896bde8565a1b4726","00f27f9f48a408b8dcf7ede5c950f3d622cae5dc3999fd387de126f3409e4a6c","eb757c9995af633ed3c26d971d80f71112fe9e297c958d71e2f7a3bd0660d155","a42906837c5adc371d2dc5aac88beb807f0339fc24597fb175c7b5c9e06aaf34","df242ec1cf76f0feadd1056876a2dda7d4d50767afd8919027638575c66e566d","9651386ad26bb77f713f04fa09a5fdc9ad003ab01c078a21491573ee35cb8dc6","035517038a2619815f7d88e68f8ab9e5e664831804728756ce1629b03abf5faa","a950c953e02cfbe0bc344082f28a50f7d8ed500d3aafc1d104a81de4fd6c5e3d","b6ef43d38957ed5969e5af54c825e6bfed51efb9dd844dd7f23da6760d601ca8","f44be1811ff0bb195f5fdef3c493187d1dd9ac5bcbedba4371f021a93bcc8365","b8686ad1f3c76af9372c49f04594bb5fe4d826cc036a375eba0c663f521c54c8","ac4c7c6db85c9df99401fda1075a3bd42dea9188ac58b0911e04bce8752d56c6","78eca2193b177c5ad7546ff5d365dd6cb79efa278dddff5151740888f319c0e5"]
Anchored: 2026-08-21
Public log entry: search.sigstore.dev, log index 2542879916 · entry 108e9186e8c5677a2329…
Expected log hash: 8337812f20bf1207a3c96eed87ab975d7e92ac1421dcded24507b32e456b788f The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1787282728402","kind":"published-quote","locale":"de","page":"theme:xodo/quality/de","quote":"Einfach und Gut.","rating":5,"review_date":"2026-06-04","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.xodo.pdf.reader","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (681242bb8cfa…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.