Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Nette, praktische und einfache App.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 3163352270

Proof data

Record hash (SHA-256)

c48556079496731cd9d84b9d006bd05e7afa9cb40950016b17f8bcbfe8fdef38

Signature (Ed25519, base64)

nJ1qPyNo0r1TbXMvq1w2bW0VGYStAC6QUt9k9fv5bB0G0uafa0ejZqsjwQAtU8+aZXmMsBSAF/SIaa9vMfreDQ==

Merkle root

784ff8fc3c42eac43c7d399f0d67bba55d28073a7e106789ae0c6c3f5ac9dcc8

Merkle path

["c48614b70ba773f7ed70e72135c7bfbceae135db4fac57844aea1648574f69c2","cafee77ae023d0c428322f8a82097576a5cae0e7d3013e177aa1e15e8e37b1ab","1781ce774168f21c06d5e0c8bb8cf4002278100740a3a673cb72ebae6760ed8a","cd80c4fbf40bb0e36348964680e621260f3dc0e6a2650f82ce8a3e818d7fc29f","c05517b75e86daa5fe218a8bc0bdb91f7306de33799b2f194d23c6755f0794b5","e97b0278b067f042c2d1878b4d99835006fc411dec007a4bea7b17c3a10af8fe","3564023760df9794d56633ba55c5fe92c8065aeb8767eb5ff683cf9d97e70d2a","8c6b76391ec61c76ed5b7284008fd3641e00a65ddbde6724677e9fe36e2ffc50","ac9124fbaaa3cfac585982fe63c901a09649a9f5b351969132ba354a8b4e52e3","cd88794951a27b103ac9d4980bd9267dab1a046871a88434aa245e5bd1220acc","2a80d767ee1fb63633191edbe66b41d2bc88f3987747af9859e28e281638af63","e2b0e3873bb6f302d8973b719ddf15092bf2f1faec4d0da0d93828c1edc9eff5","961ed00308b1bffaa9d4958ba201b674cf19653b91d35ecfae6b978cea02e075","c0acf811319c30afcbe8b77293e97c6cc46544f39bfd9b01931c88a06aefa19f","5fa09e3847513934bffaf71960ac2a100e20422698698ab1e19a4fe8ac133514"]

Anchored

2026-10-09

Public log entry

search.sigstore.dev, log index 3163352270 · entry 108e9186e8c5677ad020…

Expected log hash

a3ae0badac804d14d314abd0e71726d06a96c43a3840dc1d63acded9268c461e The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1791543790412","kind":"published-quote","locale":"de","page":"brand:schulthess","quote":"Nette, praktische und einfache App.","rating":5,"review_date":"2026-01-14","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=ch.schulthess.mobile.android","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (784ff8fc3c42…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.