Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Everything is explained very clearly.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
82f4c0643a32c4fed8b77229d3f69163ce85a5e81f56c5405bc6728e2831b0f0
Signature (Ed25519, base64)
jXh7pbb9i14+0/zwhTWHnXPAiZt0eLEvZFPQkGkghcN7xzPrgTjIPd/EAZhreM9LSMdg4fNwzpuIObHN8eQ4AQ==
Merkle root
cb5472fa7b7f10b7453a4f782a38c5dbb3d782ac291369ed3830c2ab783a230e
Merkle path
["82f2c203cb656c9ee2dfefae94444e4d97f08803c3f7b5e448f91ba640376c65","8f642420c0432cb25392d803ea2f7ede300b26bc7e8001a8ce3d8eaee6b1eb5b","780c8420396549a7460a1dcfc4dbfabc3efcadcbb31d752f471e046a7801b45f","a5b443331f4f9612ac4305c4733b1a83c37299f50acd8d8c9088f47583b7d56e","970caeb5acf110f18278f68c059d5348322175f9f3e45d31be7b42e27536869a","04b3bd6828c4a8136ee2ae0ac4ed2cade38763a7016f6ca4260ee010c7326e45","6981d88c5f3e033d4ca66a5c2b9063d818a2982961d4ff48700c07a02505789d","0b93cfca22e2457b9676c99db59d5d403707ef48c09b6ac5e54ad65a07832113","5935b214a877bcba6ee9f8307014241cc3253e88991d0620935ecdbeedce8e32","c2e02d79e621abaa247fe31c23d112865e80af9ba7dd18441131f868971e9573","238686962e641a6424ebc11247a4306699c154d4d3486fec19316dded41e60f1","9abf580f4ce85e12c89ebe6d994628db41b6942235022aa14dbc3f27213cab3c","d5c54f6be615dd1c8e7a065afc12e543325363bfb66a63065a4aa1d52a1dc406","6ab0f07aea38f551fb6ed4456f21bf7c468ab54859dff87b6772a51601755f64"]
Anchored
2026-10-11
Public log entry
search.sigstore.dev, log index 3199295725 · entry 108e9186e8c5677a3fc5…
Expected log hash
59b8cd8284c909c35d85f443b6a086d482f8b667c56ec942d663937a75e25638 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791689736846","kind":"published-quote","locale":"en","page":"brand:lohnsteuer-kompakt","quote":"Everything is explained very clearly.","rating":5,"review_date":"2026-02-21","source":"Apple App Store","source_url":"https://apps.apple.com/de/app/id1586330607?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (cb5472fa7b7f…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.