Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Funktioniert seit einer Weile nicht mehr.”
Google Play · 5/5 · 2026-09-19

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 3100032352

Proof data

Record hash (SHA-256): d522736c65919ae0cbfd74d99fce7df7839b6c1eb945bc4466584be60fbbf1cf
Signature (Ed25519, base64): uWZXE1iYZWKEEEm5ji4ey2akGge26hp3mdTwMtbIWIXTcHELaQMJ6cWuOFIeIAXgFLHrU4kgNCFVBeiBXNCwDA==
Merkle root: 61203b6d05350adaaef087cbce75d25fa5ac2036c1a66344255fc73a224d39c3
Merkle path: ["d526b484084c645e8cfe10288ef71fc01edac539eac54f9a190860d0df9de673","3fe8776dffe6939036445046cd0680c4b75e1ddd4fecadb0937d390188f48066","62e9f158e9537b1c13159987d21ba6001de61cc5cf0d9eb405d4a7beecedecd2","c4d8591603ad6a95ada42b4947d8d7eaf30589d75f94cd9b011a513804c9b61f","91d77dae44f3c382ed0ed96665b6b6d5fcb6106576cbcbb23eb288c379013668","244b4d6239081d116575f273b41da03eba3a54284e129eafb135571458281e08","de42e3968de2a66436beb64f2132fd52ec18a70c38ba187112465e0221aae6ae","f3cf949b62bb33f5e2c8148fcdc790362dc7433e59eab8c562afabd6c0f3f67f","e1e700caeb0a8c66cc92312a313ac5fed8d5fd4448f7e724f6b0f9d7f70c34a9","6a5ddaa68df202c2b4d972ae7f78dfe31ee1f28583d622f543b954a0a08784bc","1c2c73c2a6c134da874ecb8765d30a94887b4ea408e97693a4ec3e263a4ab582","651dba15ff20819edb2c72ee0fe76dfb8a85033248a48440c50debf21e32bea3","20287ae7c1fefdf6cb9b396d6d303939703f8236403ddce9bb26cadf5d6c0b12","341c8949cb7d1561c464131d45fb650d8979e144666a41b9b51158f1f195448f","2510f720b3b91a4799a8e500c87cce52153f0727344aadf519237b8a09b893a7"]
Anchored: 2026-10-06
Public log entry: search.sigstore.dev, log index 3100032352 · entry 108e9186e8c5677abe62…
Expected log hash: 0a0ca7b748f6c99c5a75a761289092bb11c807eeee08be8ec366fad5b0bfd2d5 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1791253605372","kind":"published-quote","locale":"de","page":"theme:spotify/durability/de","quote":"Funktioniert seit einer Weile nicht mehr.","rating":5,"review_date":"2026-09-19","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.spotify.music","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (61203b6d0535…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.