Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Hab alle möglichen Wege ausprobiert”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
e8c6ceb48b7f2985732dedbec160ca46e4fe5f2ef46a37d6999d578040de9b71
Signature (Ed25519, base64)
NWJ4y1CW4U0SXnzoC/MpLScs4SS2ee3Uk1KCsq3ePyg/Anr3ZCr8vwdqJwbi2qAR/Ut0Y40D9s9wiccQQ7++Dg==
Merkle root
3e1c67438f658ba7fd015e6979c1bfd82d90efb0848cecbd4d902d6b2ed171d3
Merkle path
["e8c672bfed55951db968b9d9f2e38f75c06ee9b505074320426dd6429fc634fb","be26f57057e78b278b7463a28b445152a4f33d41c00f99bd4a389334ccfb3019","61abb1f768f875274a26459dc3f68686e826fecbcd318c618767ed57c1a61fa5","ddf764292940fcbf8602c3441a0fd4246be4af5c3305c62a1b17bf8f42207f15","9e46f2f53e2a5006645b286ed7422e5dced76beaafc157c04bef8ad0f254784d","b36711ec70773208f0bf336b67d7c94c0cd76ae37e304449dad6199370cb4e31","56154910e63b61ba7a845ed5b524a4efe54f82357434db993d165fe3b464e02b","1aad690a61c6df361850b0287f235c1029ee43f3a8f2d80ff14612dc6b2bd9c4","cc6b54ec864bf551a827527e8c775abca2909dabcc2b8310da84c7d4952555ce","76dc776977eab945270d483f52579d1a2006b039bd74354de867faf3f4c6b8a9","f8c53df68a1228f6f923bd44effa90c079749e7d7d2d3d3963c61e996bb77b9e","eb576ae451ca05efd17f6c95fd4a338f5d31b893d08b25293f8c517756cd8733","a0995a3af244777f0ba96e18fb0bf20094f6572c532bc8fb87ce83b7c4e3afb2","48925020460bba3dda217ec8c974e96be1bded9d1769192f63a66523a3769db0"]
Anchored
2026-08-20
Public log entry
search.sigstore.dev, log index 2524810465 · entry 108e9186e8c5677af074…
Expected log hash
129b219cb6155ac24569a579c61e8fc9cc2d89305732944b8849d5e719dfd073 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787193927339","kind":"published-quote","locale":"de","page":"brand:yumpu","quote":"Hab alle möglichen Wege ausprobiert","rating":1,"review_date":"2026-07-29","source":"Apple App Store","source_url":"https://apps.apple.com/de/app/id1465873689?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (3e1c67438f65…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.