Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Soviel Service will auch bezahlt sein, mir war es das wert”
Google Play · 5/5 · 2026-09-11

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 3081733041

Proof data

Record hash (SHA-256): 87b55024cc9adb7e6f4054c1804858e02f7132e5162ed65313a8cb9686fe4878
Signature (Ed25519, base64): 4w065sQce7fvJE80dtcQJbKGQSBqSSG/OhDFoH00BidL9+40VUsdHKAwHBh+m7NNuBXFPy5Vmr+a031Enm7bAg==
Merkle root: c5671f9a997da9b293a79ebe58b20e4534ae608121169f15a5adc358d42ed147
Merkle path: ["87b764addda7c322eb8eee93ab00977ef928eab23c5f825093dc9b2b628d0dee","fcbddd1172a6919759161ba177745221ca6f95cf1839515c90d1e8eb7ee1549b","885a8be22743720ffb88c17372aef923d7791b2b3393d45d7099e02f2051f7db","405d0799987895f2ab19cb98207b53d79e0cb3d039ecd01f74c035c442127835","0b6da17e6ba0c09bca478e06d009c6cb6cebd3d3645585e5884e2b39cbc13cb3","bd26da34e40b7132c6312d0daab976879b8ef621c879c7d9e967fe8d68a60b69","e245fa8963789a1823cb37a27cd9c4e3f1cc7630722a8ee2f52c955e630a4e3b","9a532f62e54f0df7caea4ea392d3d71488164b174a282dd0ebee15129a223db5","e07ec8292eeb45bf012415ec043f0ba28d19a993d6f44c802ebba46b5a589e39","48ef97b7024b8d41a53e89d8ff1aaf82b40c92af2d947410aa5a7601e35fc49c","eabbbe209187d45e59a30e17d1323b5f642f6d5868a3fdbc5f3b2c59d725c73c","2ac52bfd7019efc5590b5cfeb80fdf634434e8839267865b515b47069d2c6ef0","d2482c8c27b9666d395774cc0539a6ae5a22798c7dcc665c13e5aa68bbcb3778","8621becbd314bf961e51e6037fd253dfa12e66cb7b2d1c68d51addc52321e8a9","b178a1b83338c84f1a44bf8fe330ca4b62fad9df75daa4f4e38c0d04e336f831"]
Anchored: 2026-10-05
Public log entry: search.sigstore.dev, log index 3081733041 · entry 108e9186e8c5677a0bbb…
Expected log hash: 88ab7ac46d4614551fa6e665889f054d7592b15d91016a45621b5c46a7ae8e2f The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1791174108170","kind":"published-quote","locale":"de","page":"theme:zasta/price/de","quote":"Soviel Service will auch bezahlt sein, mir war es das wert","rating":5,"review_date":"2026-09-11","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=de.zasta.app","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (c5671f9a997d…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.