Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“laufend Riesenupdates - einfach nur Schrott”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2514654467

Proof data

Record hash (SHA-256)

cfbf286d8ee9270eb16deeecc75e3cfa89b536c8c2874850d89fb329332c1611

Signature (Ed25519, base64)

0vbAC0cVqi4G6QybcNl636UByp5t4VreFl/aFFv0vf1P/dDrlc6xqvGX+IcEXc6TnLyQwyZ5T90Eud+uOOMlAw==

Merkle root

2030d4ef17fc68fad1320305cf569e85a00baea931fba0d3ebe628cf9c90c35f

Merkle path

["cfbf3dab0d2354a266bbb2401e703805242992cea301a6132c4c47af8dd54c0e","4abb31d1e9a8d260cf206022209fd5f524016ef982ebb1a7fbf242cbc63d8b4d","e0b5b3e7d2940e28c591d55a984f3305236d8bb2bb438dfa8b2f5a03e39366b5","549b729af5f6ba77904d3a3da364ad074ac9b9b8fe17eb67959112d50a76294e","afecd4a4a048ef7a79f18066f405471f31e4f32c1b812ecbbd4a3b8cc9d21560","b2e89e6081a2b3763c6c4feebb3ecf1ef49a084413882fc7aa32870dee16399a","3549642c3c7fa09b3fc266e952b96cb299d230eb0f8fd6efc78856cf1bffcc3f","b2bb45133d7819f263105979c2f099ef34ec910e3a62db282e652387c4455a5b","d10123c7161eb28c41e1fc9808a33d6f70994cf444762128b6bbbbaaa5b81457","24b4ae0127687fb2005012d2ac53b4230e04db7e4f5eaa97db013c806d8997ac","9e89ea2b5f651a3a619a63e5d3da82d4dc03a920f9bfd09c6817263b8e5d440d","e0d046a89ed965e978e75d0704b50f7bccde4bb5c782d921c638e92695e582a9","3ca37b839a070467b13a8bb9c951d949082d270b5c483d56ccb5c1574c9db0a8","20ea0d6aeaab7028adab5147f39d1ebf52355cf181354f5c166cdff8fc496c2e"]

Anchored

2026-08-19

Public log entry

search.sigstore.dev, log index 2514654467 · entry 108e9186e8c5677a9253…

Expected log hash

ddd8d6dfa3771a4106292f7bec674337dc9649465b28b118bb17bfc2b8ff0a67 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1787132872903","kind":"published-quote","locale":"de","page":"theme:acrobat/durability/de","quote":"laufend Riesenupdates - einfach nur Schrott","rating":1,"review_date":"2025-09-28","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.adobe.reader","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (2030d4ef17fc…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.