Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Sehr benutzerfreundlich und funktionsreich.”
Google Play · 5/5 · 2025-02-06

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2541942774

Proof data

Record hash (SHA-256): b244caa40f74394ce84b9ab9023063ca8846036d7bcb235fce7a82be8c0aeab9
Signature (Ed25519, base64): y8Im9alag3u4064zn26Jk+Rpxya1aNPLBg+MGhLDQVZKGT9F9wzWNMxd2C5x7HV9H7uE2VNFdVgnNF/jK1w2AA==
Merkle root: 0fdf8a945cf322eba60395065bdb38bb3eeb32c52e065b6c93c48bb56aa3bb91
Merkle path: ["b243a56a4da0c31fae23d56a9800f0d636f1a809c3e84fd00bf07acbaaad259e","81e30cb9da238fccd492dfb4694d316596a40898e1f02bacc95390e78e3cdd58","a70f52bf313b645c9a151715bb5e240a6396e060cd4deb6871452d78132c9d72","d9cdb4d1cf6294504a3999797307f427cbbd2126e55cf0afce9ddba96a98f2ae","0ff5df1e05cdddf1534814643060f217bfa4d4734100427e623088dc8693ce90","561370e21e9d184138bce4c6c80c76af12215eae93f3d451e40e805d8bf7bdbe","13e97331fbf8933337f24022a9aee1af451eb57fc54263bf9caa2ea7c497dead","2d6d28bc2a8707d83dba2b0fda48d40b90fa2db1252d01e4f4849f37d19b857b","de19fc446be2d720751e752709607648d2b040d23bed0f876cbb291197051455","a5874c174e7c9742ce38938822209fb3d87ddbe46cb9944aab33b04a180ff86a","2820015245b6c74da0d8c2dfe79abd0c0b0d103c943642262a5cc5efaee939b3","4718e5a389b40d266afa20f51cfc3ee74cad421d785a3208ebbbcbe2f90d6b7a","35e532d6ab241daaf8e55aad2fae9ab09803278b73b0b4941e8a8e444e6c4d11","e612bf3863a4ca6db004d49df9b16b869da6bd7612ef55762e23c722f5ffdfff","31e60baa9fb8f672f686fd126d7dc82498bbfeaa38bc676e67691bf1c2c7c210"]
Anchored: 2026-08-21
Public log entry: search.sigstore.dev, log index 2541942774 · entry 108e9186e8c5677ae0bd…
Expected log hash: 4825ba618d3c3368179be13912e101812df871de37f30b1ec256ca6d987713ec The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1787277864570","kind":"published-quote","locale":"de","page":"theme:acrobat/fit/de","quote":"Sehr benutzerfreundlich und funktionsreich.","rating":5,"review_date":"2025-02-06","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.adobe.reader","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (0fdf8a945cf3…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.