Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Super einfach und unkompliziert”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
89a660909ff57fd026ea515a12ec39329c226b7a4dda90570e263dafb1937ff8
Signature (Ed25519, base64)
4/dBZAeelc3zHOsJVPvbQLlpd2SzrI6m3JMs4G7XkYiA1hBq7ZehGv8tmCJrnXECE1/HuG9pBGvGzpZXEKosAA==
Merkle root
cb5472fa7b7f10b7453a4f782a38c5dbb3d782ac291369ed3830c2ab783a230e
Merkle path
["89a555fe6df7ab931f72ed1d4d02437901898e497d2722265a121d6336b534c5","978a83e4234884511a8321f09927cb6b723c18146bebd8888f2deaa1b7be04b5","e6ce77ab38e0b85edaeb3122508091d04bad3e486010c4a49fb8eaabe4bdf94a","57cb271f6a33d2294d850164b039a6539ceef01dbbb04cae38216649bbb9aed6","6c52c681919c09db11fd68faff8f92bf9760bbc41f254b98ac09c1e861716c77","129f5db22a991b678259587a9e611e817c5e3aa486fe9622410173d28ea7dd26","882b4d68ff0bcaab3e8374ef20402773447bfa4995cae954fd2b4d4efe91bd9e","e1a0377bf70a68feb7e0d25e722ff40324db3808b0a50ff65ffc1f5138e1b8fe","fdfd17da9c87f9ae98a73c6d3669f3ad14832869f85bbd8ef56a805281f4b4d0","fad7f7747159b31165d6c0cadec7a2340495c9fd8bfedebd05fde0b9cb9eb4b7","5d972ac187c7eb665d1a4798adfbc89e8e0a77272e9b08340949e9d23cf65e5e","298176119fc2f3b3a1dab7e656db7c970d8ec6f10b91e4ac29f02827c451df7f","4a6727126daffc2e2ebfc8d3cbc74674dac5a876fea9b7ffc3ea5e7c28e2e01c","26f00ef18134c3a71192b8b80981be2ea073cd811ae4af22a2c976c20fd1879f"]
Anchored
2026-10-11
Public log entry
search.sigstore.dev, log index 3199295725 · entry 108e9186e8c5677a3fc5…
Expected log hash
59b8cd8284c909c35d85f443b6a086d482f8b667c56ec942d663937a75e25638 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791689736846","kind":"published-quote","locale":"de","page":"brand:lohnsteuer-kompakt","quote":"Super einfach und unkompliziert","rating":5,"review_date":"2026-06-10","source":"Apple App Store","source_url":"https://apps.apple.com/de/app/id1586330607?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (cb5472fa7b7f…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.