Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“die bessere Verwaltung der Alben”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
d326fdc99f202997c645f05ce15b435c2006e37e00fd7e7ecc4366aeeb6b63b3
Signature (Ed25519, base64)
c3zFPOTntUCTNKBeVs48Xrfc+RSH8by9C54W1qfI0Lv5Wmv3Dg/S9RpMK8nSq7HMfahBQYLoxSz7W1eIVTD8Ag==
Merkle root
3b820b0e91b2475ca02a79fe65f1dcaac35af570ee21f4c868099b9c17e17c1f
Merkle path
["d32b8242c3ba59943698fc78b8bd977745484d860fd891804929be7db55f54e1","92a6931f290e6d9b802106fe190162b61803649533479b866e580261a3dc5bed","05fb1223bfd11a3e4dc8750a37b0c7ad8cb2fef10bb4e2da960af73edeb5f368","cae6b843172570b7a62283794025b38e7c6a2fa0fca565a846467de7b131cd74","b8d991d26e9dd42c5dea3ce050a8222911a32cd18049a01af71cab0aa8019df5","4e0d23fba5a9b625199598f0ae71ec20e4d6116c0e22d3ccf0b44f7af37b2e2d","9997b601d9a4a3fe2406bee0460e30b5efc1627695eb1936fb552f8cfed750c1","1586d6a1eff1312c1f347c6c198e2cdccb92e5bfe9ede6a363d5111e1bf05c30","1c9899a3ed4f1ab43453814233bc514c7ba5588eeebc50cfe38e1dbafe40ba6e","4ef27bc9adbbdb2f2a98f57f940ac3a8e86c327800012b6415976270f4d98a4a","e5e382513090e98f46cd8e97710504315ecdbee8b3867fcc5682b0fd0d3650e9","271ea18e0d929c969a6b4d324788b46af932cde0a45a951a5ecb3d6a642cbdbf","7e472eb0a3b58e61070423986bd83b0a6c7c1fb4306803b1a250ecaf0ef71a97","00a544d427d2b0ef6286f24c44cfcf3a5f82bad04bf6442e459c003cb18785c1","10553711bf6721bc3fa0f227ed3bf669673b7af202d9c22d19db8987b7ed8714"]
Anchored
2026-10-07
Public log entry
search.sigstore.dev, log index 3124210377 · entry 108e9186e8c5677a0172…
Expected log hash
20a5241ced0c7b94303a7b8002f1aae217df3f1371aea54ff5745a148bddda47 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791349684588","kind":"published-quote","locale":"de","page":"theme:spotify/fit/de","quote":"die bessere Verwaltung der Alben","rating":5,"review_date":"2026-09-20","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.spotify.music","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (3b820b0e91b2…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.