Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“The processing and delivery seem to have NOT happened at all.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
9c21da15f12c97808381666ac608e4d218c55083a375b2a02e3d8bcee4059a62
Signature (Ed25519, base64)
kkS9GoktKWPwbb9d+gvuDdAtSBVrm+nJtrM9dibl/tj1JGKyRUAjHHQe/MlrpiLj9Enwb3K8FVvdikMy8CZJCQ==
Merkle root
5c4849a28e8624d6f6d3204e1f81a6b24f2188b6690e8b122801054617ca25d8
Merkle path
["9c212ea3a37a8b13aceb6ed2c9e5481ccdd794feb992a69e3149045be9174230","fae9dfa77730407348cc089200ddc6668e5be40b8e52698d617d35f43aa5ae15","2786731f1110d337ce91bd69f522e92c20102719ba7937e709d9339e095b1ca9","5084cdfc9edcbf483106009997954851d982bea6f1fd93e7b68a76789f2ed500","e683951bbbad4c4078337364cb6a5bf230cc5a082a733d42060acd8e28303bd1","777d5af61f12cb40a2bfaf6dd65b346bc5b9ce5185705f01f32de69847bfeb58","3a76f74d950fc9c157e34a9d21f125d7d5e1e1ad7c61e88cf9dcd8ea886838cd","302dddb9778edc2f206371dcab9769c30eb977d9aea4358f56b5431baf690588","531cbb07241f5e3a774a82104c1f35a12672a08f28955f84bc536bb579dbbfd3","c8354c18b0c0b1c3a042af77752a433ee05fc3afc59fcf7c793a59814f77d7e8","2c9b83ccc0c11114cfb6098ed2bfda024c744847d4e5df2ea085525e963c117a","a6f0393e672db1f7a42a0e48f58d1ab397f70d4769af231ff695e788c43f5323","6f1e467d4fa619cb3e08538173acf01a50b505f4c6c960921062ac94dca51c01","855df8175222f9db398f9629c729494a6b2f86ecb26c7fc54bbd061fab2ad520","649f189ed3a422a3ffceae7f7673f3e683a1fac940fd27a4d89bce585dd48e49"]
Anchored
2026-08-20
Public log entry
search.sigstore.dev, log index 2524617489 · entry 108e9186e8c5677ab139…
Expected log hash
2051fcd76f2ba790414bb1c15fd4d3d064889742ea46f8e55b5028f1f571c27b The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787193158162","kind":"published-quote","locale":"en","page":"product:pixum/fotogeschenke/en","quote":"The processing and delivery seem to have NOT happened at all.","rating":2,"review_date":"2024-09-28","source":"Apple App Store","source_url":"https://apps.apple.com/de/app/id1319898516?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (5c4849a28e86…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.