Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“I hope this is fixed quickly so I can still file my taxes on time.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
d3a019da629c7ede05994ac1b248ea5ef40740bf2b0421426101e38f9664a2c3
Signature (Ed25519, base64)
UEHcoN5TexkOkXND3/48Fgc0+h3m1TOL/mRI+pIdXYq/RIlVbk5af2vstd4ZtWEHgPoJXNfY2sYo9JFLbx2kDg==
Merkle root
c9e6077a1bda893f1455402f424b1d526c8cf2f47d428b611fd8d7fd8b45f80d
Merkle path
["d3a2298b827b75ef05013974586478a9ba17f469c0250ceaa9f51a54ef6b4346","26d1cc55f8a56d187749f965b151b2e5e72ecac97aaafc124c4b682666511db2","45cb0f55863bf562a522d986f12fe08cdfdd1daccc4f71f74c8ce762702e2fcc","69f39bc3a0d1b07deab2d2b8a0ea5bc4d4a780876c97ea1a9757d74cf9780e8f","7a70286330adb76c1415dbff78ca509aa0b5aa66d31e190b2b11e0da6450ce0d","98c0a401c760c5ce0b222775205d9e19713ffaae499942b1cfd876b63490838d","0a0fc419dd7cfe82ebeaeee79362b66a0bfcebe460c2b04f543dd355b23883bc","6b3ce2e0f67f6fb229f9290e8d3ef6f11724ab0ca7e7100fd5bcfc6efeebf79c","bb9ec3ed4fe92315b2ec50e0581981a91069fe754fbe8b102c8f62aa54c00e8b","b66ae367e6377bbc0d7d44162387ccfd963f9bfefd17876e6e1d1bc91977f61b","9fc1b1afa60f26f3436d07a2ec53b10462a4f4f9159a3d4f494bc838bfb490c3","35c966d410ebae66403b20039887edc58ff83b04ca2ee73f8bab105e4292b00b","28f09febe910b8ffeefe28f4b3e25d4946f6ec33a76812b567df1654abf1c9b2","595afa49ab9420d8429afffaf39a6f4725518c7a8b9f2c89ac8a7ee0fc958fd0","e91b4f1cf428f19a0932cddea6de9c1c364010417f9e244d933b133a023a7aa3"]
Anchored
2026-10-01
Public log entry
search.sigstore.dev, log index 3029042635 · entry 108e9186e8c5677a4403…
Expected log hash
38d9b7e95b1b3c998a8128983d818774fe7ee047adb6f05ee608495c2d7aa418 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1790741815621","kind":"published-quote","locale":"en","page":"theme:lohnsteuer-kompakt/service/en","quote":"I hope this is fixed quickly so I can still file my taxes on time.","rating":5,"review_date":"2025-07-30","source":"Apple App Store","source_url":"https://apps.apple.com/de/app/id1586330607?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (c9e6077a1bda…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.