Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“App ist klar und einfach aufgebaut.”
Google Play · 5/5 · 2025-07-02

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 3258071454

Proof data

Record hash (SHA-256): 8dc3ee06c072a0b6fa988261ab971034305499bd086280768b18291ff50edfb1
Signature (Ed25519, base64): GtkrJ1r0yg/veSg/kDDL6jKIT6zEYIp5NjhJI6xdd2mrOfxSBMEyul+9cajU2M8W3tN73EF4GwCo3aIz7Y3fDg==
Merkle root: 3286418fc06d25de584969d1d1d5f4b079918bf6b5a5178364cae8b78bb351b2
Merkle path: ["8dc706f2eef0fb7cfe81eab26460d82e8370d11de2046d852d8723e5fe85fecd","a5930e02d18b5858710f6e2fe50d9586c7d621466d56ffd1a68505472a8b81a9","54422b445e2983d41b38e4c60f201ec7ce115c5f8d54c8e281bafb59f8fa1783","6a45d54e096198d517417595524aa9eb1bf60b882fb7327584a2783f1da03d2b","8d6130e657f346802caf561cd3d2801cac6207f1a81f8fddbd20bab62cc99575","c464d8117383a16fd48149fa31679aa10111a3be2d61fbf9ad9ed7db038cb868","2046332c94c94c9bdc7c6dd4bac32bac17b8942e67300849a4374d3e79b0c849","61c919f8c36369ddcd1dda955b6e9d072baea73bfc077db53af783b1cf86ec10","557d9d17edb93c3d2b08ee67931eb349ee306a8d4d5d4e605af4d08404df6546","a70af128bb7d1c03d01c00295ee5723ab9ff4ba793074f7462db9bf693a3cbdb","d71051bc8be3fa5f511db0693e39507f3edd2ac186ec58b39ef515a707cadb8b","e5cd38d3d25d43710b33698f1ff296c253d6fbff35eb8994af8f9a6b52fad105","c9b392cb00e5276286af30eac47090343f186ab4e6ebd3aa4fe0665b7b0bcb03","b4d8773b8032d1dec9dc6fa4ba1d52baf4d9efac6a7cb542ab0617b855dc5284"]
Anchored: 2026-10-15
Public log entry: search.sigstore.dev, log index 3258071454 · entry 108e9186e8c5677ae2ee…
Expected log hash: f9026b3bdc4a2e986a01140b2370b0ce9ec3e7c9353055dd7c9909c6a9941809 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1792030101458","kind":"published-quote","locale":"de","page":"brand:jobs-ch","quote":"App ist klar und einfach aufgebaut.","rating":5,"review_date":"2025-07-02","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.iAgentur.jobsCh","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (3286418fc06d…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.