Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Muss ein paar Sachen ausfüllen.”
Google Play · 5/5 · 2026-09-06

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 3029042635

Proof data

Record hash (SHA-256): 9654bace28ebbfa7826d59a2155338d0841e75a453fea3ddd50c71f310e456df
Signature (Ed25519, base64): UWf+eiPR1iwd+jOL8qyYdOPujcgu1H4xQmpqPKfB7GK6jKiquZ8kQ9sWrHv6prk3rluEwoP4jjgwttqWGF48Bg==
Merkle root: c9e6077a1bda893f1455402f424b1d526c8cf2f47d428b611fd8d7fd8b45f80d
Merkle path: ["9653d340466a46e0951cfb7bb51e45449ab8079610442081a8d310e62a88351e","41d6c6bce58833dbc2594b3c625dffcd26cc6c2d2bc79840cf736de1909988c8","4309ec2ef3939ee47221c9117146241c48ee52655afe828183491c5d09be421b","9d88a544ce08505c64c13b62af69f270a2bd0a57767ee95f90e79bb7d23e76ae","7f3865337691ab10eddf4026309b4b5024fab0a3d125c41a48d3a135c23632fe","c04e28d661a32b02dad67b1960ada25b8df87544fa76cb6b89b738e6ad2f6c47","b2fe7b5e97c4ab3563f583d997c80a578734f0e49d4e7f0caef248c21afa697d","511ed2c8cb0b0c61687d424d912f1e66f25f1df70c6b665d146d86b02d7ce162","76cd913952d99890c82b6aabf0c9e9c720b2289a584eddcb67c0466b4af72e62","3ee38b69eb982fac5a92ee89c2849edd6a1698ff9aa2ac5c594ec86a6b890d85","e3a2c33b9e947032b36a21d9f66d94a741072d32607fcd104d5367e7470deacc","61a7bbd58684db7aeeae7eefa5216c69a33eb017625b68c3e139cda5fa8fd78f","4795d13d6bf5f17d5468f644d3fe22d721bc2ec6d3fb73a43613e87939855d23","1616c16ecfa49e18821de7767bf3fa1e1a6fd3ec2fa090ad2f10f8770da252c6","e91b4f1cf428f19a0932cddea6de9c1c364010417f9e244d933b133a023a7aa3"]
Anchored: 2026-10-01
Public log entry: search.sigstore.dev, log index 3029042635 · entry 108e9186e8c5677a4403…
Expected log hash: 38d9b7e95b1b3c998a8128983d818774fe7ee047adb6f05ee608495c2d7aa418 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1790741815621","kind":"published-quote","locale":"de","page":"theme:taxfix/ordering/de","quote":"Muss ein paar Sachen ausfüllen.","rating":5,"review_date":"2026-09-06","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=de.taxfix","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (c9e6077a1bda…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.