Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Wie soll ich es machen wenn ich gar keine e-Mail erhalte”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
fcc643c268f59aee4be7913459c4328b444d6de98bef91695ddc572c12f8ceee
Signature (Ed25519, base64)
kfxs8Bl+9yMvc7i168iVyw+OLR4nuXm92vZHW1CPPInTppOHwDM/AqPYH6DcWswN3t8ajdxoBDY4XtgnxuqoCA==
Merkle root
4354cafe0e2ee66c200238a4bfe005f997e761de26d9e528ed6c12dfe1b33129
Merkle path
["fcc115dc86b4eb1b4b6821fa35b4520862f08800e1bc57eefe9b7916e3bde894","371a0e25f57b40462886d7783db2ad2c2e8216b7fc6bbb922c50533e1530e75d","714b8d2781930e2d123bbdac630f4c9a840e0c7e4804110bf71ce5885ca8a4d1","7c5f77912fd0e1e98c623c13ebeea1ee13bbef93f794a109c89aa1d8b257fdc9","de918f6d192073deaf4dab5ecbbbd0518b920888abd6c86a26b667ab4c104bd1","b637f2392008e1c5b943aa17d5f387b6b4253162ce54cf7586a9e70c2b1de448","ee19b52b0b2a8c2f4db0205c21c128dee630ea6971c4a6137c0772f09cbc9a4b","e3d93b817dde20b53aa4128a77728ee3b4acfb32e60e91880d1bfdf160a8392e","94f57328884c55813633a2d5301046313309a2d89cb2fea40cba3dce2e3a31d7","2697c4c38a6fe1de55e2899f9e8a9c6c86839abf2d82585a527cf6a82e2a0df6","3c8e98bc315bda21decda991d8aa3a524750975bac14c2e5463c889e2f3c9437","4f746f72cfae819ad9f244ee90ed9273f8ea83684e51913618a036c86eaabec0"]
Anchored
2026-08-21
Public log entry
search.sigstore.dev, log index 2542443729 · entry 108e9186e8c5677aface…
Expected log hash
1f12c9d846c7a9fd8aeda84057eb4d8f639bf78886a62c6290a2a60cd48e0812 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787280389476","kind":"published-quote","locale":"de","page":"brand:josepha","quote":"Wie soll ich es machen wenn ich gar keine e-Mail erhalte","rating":3,"review_date":"2026-06-26","source":"Apple App Store","source_url":"https://apps.apple.com/de/app/id6717590697?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (4354cafe0e2e…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.