Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“geht aber nicht mehr..”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
d8d82f63b83a81d0f71bc99ef21a1bac5469e2d79c62752b6d243a480e615c50
Signature (Ed25519, base64)
rvAc4hTlBlRqjAYzZosxUK1DDKTkbVXtqX578t+L+9bYg8xwzO+pXJNFbwHJM9SUFP5XI+1EAG5Qs7eF/VokCg==
Merkle root
9bf5e8bc71b8f6d2ce627972b9fb81fedd792f7b02f32eb60fb8da440673ef59
Merkle path
["d8d638fe4f60bfe740ba93b4feebc38fad6108b7e2f1c4cf8a2c25b05a8d6d34","40b90e3c7ea1051a653e8201f2918b9a1a260299dc99be6408703edf66c8fd50","4842e7ce3154d2c5e00db4e893f914904ca6380d103b49bc7843befd0e9b52da","dc4b8196b53d03691fde659075d5f1187e60a2cbfd56709c53ff20e46f54d975","86b5c208be6ea9b81cab9db87521f9f450f549358c8333f37eadce12eaad5021","883150985d3df75ea75c017c1ce6dcaee63a171d3790fb95e6fd2500bd68e58a","ed2ef33514212d7865635054d42b0649c492519a45753dd4b5a625edc0a1e85c","bb060a27d31d977d69f3e3433a1a0a5dbab155e52bd9d0afed0405de10bee409","aafc1c0aba53f51c94c8d8f46fd33be291454abbbf15975020dbed35b8ecf511","3cd08d11ab62db5477de98a380c4f0cb5d51878ebac26f9616d1ba306274b7e1","ad1aa2f2e747e97de50c262d1ca86a878663f2128d2b5bd9dd3f0672195cce2c","47099ae633d152a2e5926eda7df6cd8d44ceca67c7df54213e0df9ac8afcaa16","fcf1b8a212d4e9359d27a9f0a29966f68072c772f77942f260f879f66ada0331","e3d4f74560ebefc008080794ff80cf2bbc3851f4365eda6b2fbf79bf3ad31493","1fa7003be7676d7952d939a45bc47245b2ced828dca06428675c885e312c802e"]
Anchored
2026-10-10
Public log entry
search.sigstore.dev, log index 3177778280 · entry 108e9186e8c5677a59b6…
Expected log hash
6b6bda8efa0d998f344024bc1a70908bd21604d8857c81e0a6e6c5b1de7aa565 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791603230890","kind":"published-quote","locale":"de","page":"brand:atupri","quote":"geht aber nicht mehr..","rating":1,"review_date":"2026-05-03","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=ch.atupri.myatupri","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (9bf5e8bc71b8…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.