Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Was soll ich denn während dem Hören in der App machen?”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2543383844

Proof data

Record hash (SHA-256)

f37c8d07d0c31b3e5862e0291ebbdf5ddaa33277e756e2709f48a576c6a57874

Signature (Ed25519, base64)

t1Vi8YUO+n7X4TuH01+51NlJaU7NApGQ6OxH6ujhoyns+wN4kVPoyRmoRWi11xjfnCX/M79r+fSvoWo+SMr1Aw==

Merkle root

7252afe559009950531df937e7edc9bd1c57cf28a24ed7f6c6613b65f459eae4

Merkle path

["f37ea83e74f7ce63ac1837ddcd885394bfbc75ab44398a999df05589badbf13a","3f8e0f95eb15be7232de67eac7709bfdf1862a07c0ea869cfa53b6da0c8d843e","8740fa29f6bca965e543c7fa66e12d81070fab5466355399fbe7438c6ca99770","8531b1bd654e22c0fc8d2aaf4daa8c8325c970ac3d8a65c2f60fb1d2d64147f5","4180186564a9d7669af2003d40bcf2065ab7a8935a6fa5d0dfb2dacbbca23485","45d00f7cdb9dd98d8de92646fcf7fd58ac5e08c68a6ffa39c001308d00a9eb89","d5c4114c57239d138b08c26c9807e26504f3ab6d57e9b473fb420c610bf573f8","a8db5ebdcca0830296e9e21d42fc1092ee3d2175310b13ed307da978f71a24b4","829ad25b1b34c656968822836b333b613a33628ae4b387db60e8fa401d0d25e1","c3c5df8d4896159de4f51f6d8123dba33296923253c1736a909de91e4277fcf8","a53bddcbfd074a520c0a307f9a6af5d08d74dde791197bc3bde4d169ab735a0d","294dd5ad26ab0e41922d4273a32998e737bd53b87027866fe52d3435630a8d95","2c96f5685bd00c8ca915ff033f7bac6a0270ef1bfc410d83f46e4d3e8989b220","e3ea462a17033cf2b2bb196bc5b07383fce456bc3220c1b5de266e7e78fd5dc1"]

Anchored

2026-08-21

Public log entry

search.sigstore.dev, log index 2543383844 · entry 108e9186e8c5677a6025…

Expected log hash

65212d488cd7bdd0d67aebdd70bfc57f4b622fa08b8179427635d69eb7ec385b The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1787285599851","kind":"published-quote","locale":"de","page":"brand:storytel","quote":"Was soll ich denn während dem Hören in der App machen?","rating":3,"review_date":"2026-08-07","source":"Apple App Store","source_url":"https://apps.apple.com/de/app/id348177651?see-all=reviews","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (7252afe55900…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.