Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“es ging viel einfacher”
Google Play · 5/5 · 2026-09-11

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 3102753131

Proof data

Record hash (SHA-256): 979e64a729e01b4bf024dc2cff47173ef47cac64e1163290c80f0448660b35db
Signature (Ed25519, base64): S3BgGBoFOkHqvESluTYmorQuxhSK5RFJYctBe2ghywMJXgF7/zGGF05dU/v0Vz3sXrc/z7vb7NkSrgS34w8gCA==
Merkle root: 92de3fc6370869ec6c1d0482494ff1816d45e719fbf27ec8d8d02933c2b7c658
Merkle path: ["979fa3a73dd6a297f05e3040e0f3171d5692379acb2d18fde211307dd2f4e15c","f4a69287ff0ba3302cd1da853b4c5aa6aa21b206d15b82d3b99487fbccf556f5","4965dcba7800cb7855fadb4af64fe5f2d1bcd36240a1c31951d137393dbf35f8","2146d3d849ae47ea5130420a4386320de79f57e2bb357a60c0d2d8e98edea179","958eb19bfeb140e5b9fe3a7aa7a66aab19fbb12c7e80d7651f7aa479e6cd4ea3","71181560a75a1d1b26b1769971782cbf6a0dc5c7ea1ee1f4bc8863e3133211e9","7837f396a0bcee15ea7430fb3d27af4bfe028e903a2a9341a3ea9e8e64ebfb27","fec01e33eebca8b607b0ef6d2678e0f004a9559830cde6df1e908cea6c4f0ce7","435296754bb0418254905b452b5e8dc0ad9121974f36791ff8fbb58017b39588","c6eff9dbd49415b2cd2eff158b9246fee8a8998cc278328b5ca2317da5466caf","458e203506f942347215c91ab5414294b456c58b6810c52901ee5ea3619dfa84","6465ba4ce9ef9551dc865bdbb93d128ef719afaec6ad6a63fa7c0e5b37a3d418","eaec115b999ce4f56ac9da9af02e783a3380be0a3b796355a5f877302796ed54","a7351db54bb74f5f5ac28186d9fd23b3f96813c66df528665fc553ab2f8966d7","c3a054d0149b6ba893c9f6835a95f324a05e1406f9665c11f96203fe902ebfba"]
Anchored: 2026-10-06
Public log entry: search.sigstore.dev, log index 3102753131 · entry 108e9186e8c5677a9761…
Expected log hash: 5cca28352ab3a467a358005e8b17999e96a5be0f2e71c2152bf575d4cd8c238a The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1791264491480","kind":"published-quote","locale":"de","page":"theme:taxfix/ordering/de","quote":"es ging viel einfacher","rating":5,"review_date":"2026-09-11","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=de.taxfix","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (92de3fc63708…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.