Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Nach nur einer Anwendung”
Google Play · 5/5 · 2026-02-03

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2514383033

Proof data

Record hash (SHA-256): af33811a16c7aeb7ed47c6925cd5d9129bd6d902d76ed4a7935dbf61d02232d4
Signature (Ed25519, base64): c7q3KlVd1G+ij+SgenuYM37+XWdaqMN6v0CxdGmVxbhgQWN0yVeGuJCExpnY7VTvP7DQKoVjbwc8RqdwHx5vDA==
Merkle root: 197f899fafda406e0c9d0591eaf3664c281655082dfd19c34045187b374127b6
Merkle path: ["af328dfe77e30bdbaa4b35ef30a0d6b417448dab070054f559bade5405903fb5","1a8eadd26c309718fc8f63094d4787ff1f06ba4d9059677d5438097c1ccb9e03","e605e9cacd7305f5d9b66409c86a3c0713758e79f8d802b32573c125da636b0f","b1cc5bcad91e327aee5b80bce7589f103ed2e35934407f09e9d08368a55266ba","dcf4377320ea523ea5b49a0dbc89d9b705f384b47f0597b5a8fb3c7794ce6461","100a950a28109e92e6ffbb980fb56285649d64bf56fdfc9df406710e71b13a8a","4c940588dc158c412a007b94908c61f49d18ef711b1f088c83c246c6b2814376","ac5581642ad4f3ed5a3c7055ed392d4dbe09e43df92c22013f4f83a76be9de30","14f24854b130270bc26598ee436ed06d8b4458596213e50fb0c3426df4bc9f37","2ce5dc4965bec60a6759cd2a4280d90fd696d606ab724dc22df35f3897342ba8","ce9bfc0a4028fdf50648c78a8ae6f483419c2e23f4ad4a1523fc562233d1e9d4","f933286a212fa6cb27b1910041ccdc3ea70730774ea3872e7c53911215eb7688","3834bc1e64ee97c12b07d643556174215eba3bf453c27bcbd0abcfa618823706","d72b61e7a45df808bdf968855d1d129de3ef5b87939ca0a06b3c95e25211241c","7b5d4c2155ce4f6908bf1c61cdd8b51ce48d7dc7c5d7f3bd9a7ce68fedb43f21"]
Anchored: 2026-08-19
Public log entry: search.sigstore.dev, log index 2514383033 · entry 108e9186e8c5677a6078…
Expected log hash: 4e5cbdb3dc34f3dbd6a57b603e905df6c94968b41f5bd83d5c9a25f2ea060d8e The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1787127398505","kind":"published-quote","locale":"de","page":"theme:acrobat/fit/de","quote":"Nach nur einer Anwendung","rating":5,"review_date":"2026-02-03","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.adobe.reader","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (197f899fafda…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.