Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Everything is explained very clearly.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
fe891176f10166a8b8f0f5ff96b2a75a7ad865fdb57c947004bec8c994e114fd
Signature (Ed25519, base64)
6v6yuBuc8dDh99avJ0yDzg1AnRd7Pf8ROaRr6DH3kgbpyMW1B0sI8tRhwB4e04f+ErYF3FewtQPT/GBxy35tBQ==
Merkle root
1128c1e3e4534f30e1f8c2f8fc1f60db99ca4dd81f25405dfff62ff1f39e22a6
Merkle path
["fe8a37d9ffef670b93e442e73360a1a6ba27ca29b5b9ce077b50d66051eace4d","18651cd7ef3375236378c8a0d2cbfd4e5d83786217817b3033ebf67563955cbc","9c3ba5d543defe8f5a9a96f40e2687b605ea3c7e7771352c98c93a275f1ef9e9","eb5c22aa08666e18fd5a35769bb6048b109da4b988b6d99938c923f5cf78bdaa","f5d8d06ead86bd33fe0a1e476a67a60b202ffa714a9e75f9343e4d3e44eef001","eb20f53c8596df367f39038b199c75246342398f02885adb1e185a9a69a0a5c4","71dc54658c1a70218a057e8b0c348a689c42b1f51818c8aeadd40229d4759915","72202c196f85fb289bf0339bed409345c3d79156e78c67b9b0dc1b3f05588554","30a22f42e394b0ce2029d28467124f937da7c6288cbefbb95ebe1e4f060cc4b9","654434bc0759a25e3e0485980743a80254ea23a936bdba95c55fbc85f48313e2","c31aa9f4134390b3e2dc66565d83aee421577b488a71d0f980c0c4b3abe171e9","b0c646a12cf4bfce2b9f004a1db0b491dd07baa76d3d6f2f739b7044b42f8eb8","814e31f10d1e59dae138f8e35098136c11b33d0ecdbdf6bee257a77429b73184","0f1ba71c060deedc77d8566f04d4f91c80878775c47405bff7bedef8fadff3b3"]
Anchored
2026-10-07
Public log entry
search.sigstore.dev, log index 3121353835 · entry 108e9186e8c5677a938c…
Expected log hash
3980f7151edd7b0249ea159b11c34712cba10d59cd8ffa603af676e538f81cfd The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791338675665","kind":"published-quote","locale":"en","page":"brand:lohnsteuer-kompakt","quote":"Everything is explained very clearly.","rating":5,"review_date":"2026-02-21","source":"Apple App Store","source_url":"https://apps.apple.com/de/app/id1586330607?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (1128c1e3e453…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.