Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“der Download für ein Video 10 Minuten”
Google Play · 3/5 · 2026-01-30

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2543383844

Proof data

Record hash (SHA-256): 9e7311773dda1c38a5af07a6d989199afc2ff7f5639ead5ca97516f78746b27f
Signature (Ed25519, base64): ///A7NDZVkrDNRtmp6nXasMnZyaXk57abXah7/bMW4Ag48ZADZ4wmrgzn+/qLMQmZ4K5sJR90nm3t5DdJvWZBw==
Merkle root: 7252afe559009950531df937e7edc9bd1c57cf28a24ed7f6c6613b65f459eae4
Merkle path: ["9e7492063f6acae957cc0735991dcad346da4c26282a54345d834699f49177a3","71f7e777be18d0f4720c2dcbd73b9656b8e67137afd1b58e2da31a830b5f2beb","dd8f9d1d536be01548117154aaa61555da306bdd9aa863d9192255c8c0f7bb78","c1138d2a239fe5667c2955ff5ef15ab76433a9604ef057a232c9295bb077d301","0b9b4c1244462aa9e4dd9bb578ea9956ba81383767a3c2dc12ed6db3e1720bd1","c8dbf0db360ab647cd0ca5019ab136950c40146ad200e97024761b1f4927fa2e","87cb526b552aa1edb0ce434109a53685c447e0b790d887cc1426d3194f647e5a","763dafc783670dc2e54ed123cb23d689fd7000dec8d5b58361eb5a1afd095d8f","f4ea2f96f64adc448606e02914ba8985c7275d4d5ffdcbec0f6f19c324643ddb","373435199e66f7a07f554ffb0e8dd2d2b90f99bcbb3f41ae6c7ce75205e4074f","71593d8fe778c30d22c07e46470f4a4ed3b27d5cb997d3c14fdb8533d8aee7cb","795be378d73178f67ff58e2fcb7da9a9066199ac025bf692c0132b88f6675786","ef6081918e55eca3fec73973584419d4a931794de381cb36d066a7397e956060","cd4fda8dbbc96e358ebf0ecb75fa543c15a1f0707b57959166ff1973bb1b4136","b3900b15a2a9b7aa805b691ce86e29db39e03d547238a84a3c0fff4fc2daa54a"]
Anchored: 2026-08-21
Public log entry: search.sigstore.dev, log index 2543383844 · entry 108e9186e8c5677a6025…
Expected log hash: 65212d488cd7bdd0d67aebdd70bfc57f4b622fa08b8179427635d69eb7ec385b The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1787285599851","kind":"published-quote","locale":"de","page":"theme:canva/delivery/de","quote":"der Download für ein Video 10 Minuten","rating":3,"review_date":"2026-01-30","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.canva.editor","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (7252afe55900…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.