Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Bitte entfernt die Werbung”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
a67523cf7961a35c735a22d2c393c40ebbefb5f81a95ad4af4ad7159b6da88e3
Signature (Ed25519, base64)
eZZVw0k4W/R/dxJRB6MntHyqBW3ztN8ajscT21bAbE/Daq4nAWbDzkEDXV/P84RiMRY2ph62wD7DTqdP+gPqAA==
Merkle root
eee462924587f8024361bc8d60043805cf5210f8bd2ef7667df06d093552f9e6
Merkle path
["a6711c2bdfff70d8722f561a759baf72581634d3ce11ef0ba342ce03dd0fd13e","2cea0c747af4477c15b44034ca547f30db8489a0f120b421d9b376af78db8b9a","0b6bef8c7c88a80118889bb0e6699bdce5b0a6ff0067ea09d2ce6e08f138385a","a797e75da3b3789f09735ba3238482a28f059c3dcd843ded964d00c487622bf3","86abbb0b8e63409b87b7d0b5834ed1d408d0cfddf3555cba9b46fce70c0ffb74","4336bafb533c89b7e317f9f961a4eaf6f21149b7053ca638384ce5a5cd6d3ed6","d945f0336528e69a74154b048477f6e471fc630a067a13d0bbb361fbf9b55c96","a40d8d44dbb29f0fd7bc52e95ce6d963262b4d6ddc914a3a29b0f4f685b22202","958374dfe30b1bdc66919c7c918b34ca509efa28f2c55282383fd367aa73bd1f","c913f73b75a3ab6843eab8623778a1d626a7dc439534ad5690d4bb871bd95e42","ff2b48a0e4499fba2f0e6147454654d31d5b9b7e7c59f047300283773bbd3f09","a881ef2a70af757470d8c26ade26209d4a9c636254361ebaffcdf8173cc1209b","7461bc2d06b1d6bef7145de580cb46d87ddc9fa66e098a96698a96372c033f50","f5776b4aea049b369136550a2eba5c5f94aeaa8e5ccb2b2ad336fc6ccf74ea7d","452f4fcbca19997a15e6a6869c50e026ff02cb90a6ef21da106ee0457e55941a"]
Anchored
2026-10-10
Public log entry
search.sigstore.dev, log index 3178600936 · entry 108e9186e8c5677a6a91…
Expected log hash
f3dccf508afcb5e89d56dabc8c5aead85de215b1b896d057d463ea1c1bdb13a3 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791606586319","kind":"published-quote","locale":"de","page":"brand:spotify","quote":"Bitte entfernt die Werbung","rating":4,"review_date":"2026-09-20","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.spotify.music","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (eee462924587…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.