Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Ich bin sehr zufrieden.”
Google Play · 5/5 · 2026-09-09

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 3100032352

Proof data

Record hash (SHA-256): f4e0d497861de8650823fdfd1e12cd4eba136074a54aa82be260c350f4a636d9
Signature (Ed25519, base64): n3IYh+tSZr9cXhoGOajkPN4QZjjMlrfp5tLwh5umiwV+PqN2M5OhMiapR6CLt5ghY+c0nfy2z7bh3jIVLXxOCw==
Merkle root: 61203b6d05350adaaef087cbce75d25fa5ac2036c1a66344255fc73a224d39c3
Merkle path: ["f4df5f4d27e24f9822e55cb55693ca3ce14e830b52e53a35e438229a14d305c6","0ca88f7fbf11d8fd33a3a502fbb068d7590e71150a6d97a1e942d06112175761","8570de7a1c319973f6dbb327961ebae388ab8fcef76a202b6dd2ac0b7072212e","f2258cbc27e79efc0c62bb2f6935c8f17cc00930e2d0bbf534f18938159ff210","bf5e230dc3f44ddce45ef2fea4eaa121f32494313b4c6f35f319d0ceec0e00bf","8c3b60a6ea946ecb30a8c2737f2d615b8a7393e283fa13bcdcf0179ba100dc30","c6e689ff210255e2bc27b0a661387042591b7b7a9a69b57410bdf4931cf468a4","0c2b2a606fd795e969c983911c9559376e715a54f624733c7e422a3f29844062","92b4633f5d362cbf007b749de5a72896e0e24f89b0c366c51a0cd5f9750be162","ab28753ab27152038e3541bb94b11caa709f2c6d82d0b02956aa0dfe40cdbf4c","a9398817911c28db75b579ac4f057798d7eae45d292d15abdc73f7ad3c9ae407","7c50652f37df5f604887c0b116386ec670256bdc43ffc218a92e95daa62d4728","103940001013a47f10aff0c6330ea248cabd3683a28a117b8a46cc0a6c9062a1","fb12d3c300b4d1b1623e9522cd86e623211374da9dfa56f64ff24f713c393afa","2510f720b3b91a4799a8e500c87cce52153f0727344aadf519237b8a09b893a7"]
Anchored: 2026-10-06
Public log entry: search.sigstore.dev, log index 3100032352 · entry 108e9186e8c5677abe62…
Expected log hash: 0a0ca7b748f6c99c5a75a761289092bb11c807eeee08be8ec366fad5b0bfd2d5 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1791253605372","kind":"published-quote","locale":"de","page":"brand:taxfix","quote":"Ich bin sehr zufrieden.","rating":5,"review_date":"2026-09-09","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=de.taxfix","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (61203b6d0535…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.