Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“I've ordered a lot of prints.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
bc4843059c9e734eb2bbfb5db1b1641102ccbcefa2e75698a5f61944685fe987
Signature (Ed25519, base64)
iSQWYa4//kj4ONkeq6FP3O4gruFpIubFQbwhx+CNhQgNWVtNXW3p22SQ6bL6fZBWFWPMlicHZoHQ5gCLx7sLBw==
Merkle root
c35385e3159410853b606ace3c93abcb561dc35874bbfae2272c5b0050f06a48
Merkle path
["bc3db0382203a8deb009fc310d785eda8fc69ba5f137ebaa157706d23d6636d6","aafd65aed8d83573ef0dd3c8bdfd94ff1ef1558e85d329b76e488c0e70e61779","1b3c1190051c80fb0c2188dd744d7a4b568804872c228c841905ab8cd8962e05","4392281c61b7b0dcf44a0f0a9319c2e1f59213b839faf3dcc1a95017dfb9daa0","820e2235537ec8a4ab22948975941b2e8bf76eba57a0e5b95326cd7956dbc60c","c12093061984177ff7d45fd6391821165e0ef7ee158904d458146d1b352e222c","e5081cd93cdd32d243548a8a41e4122de0fc4e9091749623dfb8df33438a39b6","3d7d6f8683a918df5bd479f7cd35001b6da0a06ee891f26de2c80e6bd64d4be0","eb69280e4dc2c21a80cd02cedfc57fa5b9baead263ad11c9163580e6061e987b","30dcc6e08e57c8222ef44bd69cd8a6d510a170fa1873c0f81e09c2fe5a1ed6da","f8f574716f5c27b6f39147e91030f066e11ed77c69015913e3f66507d0172fdf","0081d7770eb293ae5d35e3c52bc1f7f037a9a5130ded29cca3bec60c2f494ec3","0a7c80986147018995c9d907a329586b34e29fe08f57a8d6faabf732331fae2c","c6a0d5b9a6cd8badcfc7fc966f87c537da74da6d7b76d14d1aef5f5ac379b21c"]
Anchored
2026-08-19
Public log entry
search.sigstore.dev, log index 2514083622 · entry 108e9186e8c5677a81ef…
Expected log hash
eb47f42546fcc705387579993679cd6250c0b995d01bbd10805cb4c8d66efe2c The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787123762743","kind":"published-quote","locale":"en","page":"product:pixum/fotoabzuege/en","quote":"I've ordered a lot of prints.","rating":5,"review_date":"2026-03-23","source":"Trusted Shops","source_url":"https://www.trustedshops.ch/bewertung/info_X3DE729F568C455BB31536436C1CD5BB2.html","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (c35385e31594…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.