Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Passt einfach alles !”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2969645630

Proof data

Record hash (SHA-256)

d0a938990379fb818e8b908563a6dd084aaf23f5ef476d8d13f86298b03b6096

Signature (Ed25519, base64)

sJH8uvySlzs3F1fiZECHO4mo1EMBw00oegYuulBdS/3PpUW+KwROc8A51cHbkiGL7FEjvQlegSyuu6navzyOCQ==

Merkle root

714fd5c453665fb7238b83bb755c09ceea4f24c6bb04f621046ea8b9d5da1a83

Merkle path

["d0a9701db2a0d4bfe9fd8e5a6bd7197556917cd4db63d2056a025cf1a129315c","939243dbec765d508b6e20e28e5c844d1516b96423e0737811b2c6c2aa861285","fc81037beb56183ba18fff427b4a171e3f387fc61581ab4104019e48129553ed","d52527d56763ef2bc0f5b54f1b4ea3d3c28a8e555f1967db70cee641a60bd7fe","f5d20643b045b21c71040ec07543bb582c36427f480dcc917f748043bdceac4b","7eda4197ae732f330fcac70e8ff160cbb568dcf839829df23a90dffdf402aa75","6c9291b7fdf59631d0fa66c5b05834dd076e6c20bdc3ec02d013e734ea27966f","dc3a5f0189c44dc0baaac23baee629fa6e9e21efe72ec6e89224708928edfaa6","4b4eb067f38414c11d60ba1406c1e19462ce24a36729787d1484acc439784529","14c661366d206d43bf99d86e0c1cd8440554e124dd39a940465d9e856981d72d","b9f17eb7e0918eb47268369d478db94f3c0612383f630033db50bcf1089d90b2","a2333b002bd316646ac60ae61f8183d51de25cbabe2a4c2830c4a315b744940e","57db6462a413875a232fdfba3fc683bdb5d747edf3039bc29d01ead519092097","43b27df08fe2c6b1984decc2b66a8217029c8dd3397b5629394dfa0125d9da8b","63158f878f18fbfd8c365d55048a9cce8cd0631f6b0e87630c3dfd5c86aff59d"]

Anchored

2026-09-27

Public log entry

search.sigstore.dev, log index 2969645630 · entry 108e9186e8c5677ac05f…

Expected log hash

9c269d3e82dba16de30aab3330968f6013b6b7908bdb2f7b3ce0083771a2fe3e The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1790397996853","kind":"published-quote","locale":"de","page":"theme:spotify/fit/de","quote":"Passt einfach alles !","rating":5,"review_date":"2026-09-18","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.spotify.music","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (714fd5c45366…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.