Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Ich kann eigentlich ganz gut hören, was ich will”
Google Play · 5/5 · 2026-09-18

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 3100032352

Proof data

Record hash (SHA-256): d56b50afc5651edc37966869a98f3b7ef21b8b77a99eaedc5e1d9ea035094a29
Signature (Ed25519, base64): C6f9Dc3KVQIMuErF1WL7H0aPQ+5d0TmRt9DZSv48SBHerUkPmbl5BcVEMCpktK08lUE/B+jYXVfFl0wLYTQ5DA==
Merkle root: 61203b6d05350adaaef087cbce75d25fa5ac2036c1a66344255fc73a224d39c3
Merkle path: ["d56b53239d965dc1689e24df3984000696e49720b9510cbd867a8a19b5c54866","efb21347fe7762c1ac534a47832887cc169b04ead60e24c21eb40560d869a914","ebf4a6fbf3a15872aa90ee50a3347001b8103969ad494845ceadbe9e88f64db2","c59c21718627cabd2827ba3c946adef5eab096b575e0a1785c05cef7fcee590f","bfd695059bda359a32417cf64c743d5110458cbcdb51066a9a064b1d823bc5fd","5085ef488fc5880de8a764df41bbe8bbd757a88a2e51eb2cf76dc71d140f69c6","de42e3968de2a66436beb64f2132fd52ec18a70c38ba187112465e0221aae6ae","f3cf949b62bb33f5e2c8148fcdc790362dc7433e59eab8c562afabd6c0f3f67f","e1e700caeb0a8c66cc92312a313ac5fed8d5fd4448f7e724f6b0f9d7f70c34a9","6a5ddaa68df202c2b4d972ae7f78dfe31ee1f28583d622f543b954a0a08784bc","1c2c73c2a6c134da874ecb8765d30a94887b4ea408e97693a4ec3e263a4ab582","651dba15ff20819edb2c72ee0fe76dfb8a85033248a48440c50debf21e32bea3","20287ae7c1fefdf6cb9b396d6d303939703f8236403ddce9bb26cadf5d6c0b12","341c8949cb7d1561c464131d45fb650d8979e144666a41b9b51158f1f195448f","2510f720b3b91a4799a8e500c87cce52153f0727344aadf519237b8a09b893a7"]
Anchored: 2026-10-06
Public log entry: search.sigstore.dev, log index 3100032352 · entry 108e9186e8c5677abe62…
Expected log hash: 0a0ca7b748f6c99c5a75a761289092bb11c807eeee08be8ec366fad5b0bfd2d5 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1791253605372","kind":"published-quote","locale":"de","page":"theme:spotify/fit/de","quote":"Ich kann eigentlich ganz gut hören, was ich will","rating":5,"review_date":"2026-09-18","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.spotify.music","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (61203b6d0535…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.