Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“bietet mir alle Optionen, die ich brauche”
Google Play · 5/5 · 2026-05-23

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2515144749

Proof data

Record hash (SHA-256): d2c54d6c29e1a91e94a47179dfd129df01c0653fdb6f92e95f0b1898bb8e17a2
Signature (Ed25519, base64): 5vxRQEMvX9sIEzQFPd3GZT2ySX4V5ADcWPoMyFbTPnJZGYH7ItgNJT3ABDc0XjtrmfH1gi56J3z2R3FGydeXDw==
Merkle root: 8a6ad893af0f0bb6c448016a777af61f3f4935afd82df0db132e64f813535715
Merkle path: ["d2c5cd8b2d7ee52f6a49fda48d8657bd1e65f11ef06531171e543f6fdd2f36fd","e9b0b8e1042985c0d8288b2efb3ead2db670c85371f45c32fe2f2870a07671ea","667429035245f71b859b9b060ddbe5ed195fe1cbd95f991d5e5e4865ba6b5252","fe5192701a2dc1e1f03f8b9da79792909d7a6e36380c75bfea838e3c73c60535","3075cf1458a879793849d3a3c14116d9a969c970f0ee2d134f23202299ed3881","bcbd94152e2216485dd6924a38516d775afa03caa2e14b1b41d4839f0a2df02c","8dfeb4801d123d7a70bfddab983451b328b606252febbfa16466e3e515efbdfe","802984dda86059ee642f06004761bcf1965cb9004f360d171d5b1bea44a4f0f8","ee8dd7e2071a2284491a882f2f25db2ebcc05fdb513adf277592028b8bbe521a","c3d7ebdb75da37b400342c8e015fb8a7194c7019375d319151cae3e0db4f851d","e4a5927c8d1cf7d6321d7e4213d24194efb209aa3debec989d17b3b9cd3f01bc","bd0c1f2bb293beca31112cbae0a0701b5af110df7e3fca022c47447f9bd964a6","86ecf9405e70cda4b965af2cb0338f06a3a6959b04914c1f62f998ca30a5b84d","aca625c2c743c13b7e188c90a8dcb2895afae601815729b8511e9bcc31ba8968"]
Anchored: 2026-08-19
Public log entry: search.sigstore.dev, log index 2515144749 · entry 108e9186e8c5677a63b7…
Expected log hash: b6b79ad662332330e69c4ef135f6fb13ddc70048f846024d496aaa533f7f7fc0 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1787137589246","kind":"published-quote","locale":"de","page":"product:xodo/convert-pdf/de","quote":"bietet mir alle Optionen, die ich brauche","rating":5,"review_date":"2026-05-23","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.xodo.pdf.reader","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (8a6ad893af0f…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.