Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Auch nicht im Spam-Postfach”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
fee672c4bdb5db9c6f6a17dd53f1935fa1fbcbc253b2fd0461ab9f8cae986e79
Signature (Ed25519, base64)
tVmExK0XbrE8P6BSwgJL3F1OqRVXmrKK8BQQTjuwxZVtVcnlj2e9VkjpFAN3yW/hrNX8aL9E4pO8xC/LB1TGCw==
Merkle root
681242bb8cfa94d3b60cc06de1bbe3e5e124dc1675276b11df0aaabc9faee58c
Merkle path
["fee853bd421c6284a3048639ca2e890d99b7136cd01d8b1c56717bfcc119e7ed","e26c89fe4e245468cccce187d8dc42a926f55eb928a41f94f0c2e39c34430db2","83cb8a0a704ea1ca1a37f3b40bb8dcff0c71493ae91471108946fc9d23319f3c","ca4d69ce1f57cac638cff674a3e8ffbe4b0861270deed2ea55dda41f9ce3ca67","2b93bb09f26decee838256be72b68ff5a502dfd1c022e911976e2dbac3499292","9cb61777507c8499710111e16779775b92000f6ddd7a97b4ccd197b309b6f2a0","1fbed4581d7c4349ed07129583ab81106c6ec3f4bcfd2d786fbfd756cc5b39fd","56f7f8e08eb6dd5bb9b4ab68d378d5325c5a03b214a680728bdefe4a2e09ebc5","6a9f159643de763560bdc1c836539b6555cf08f51cfaba7b030d7e2e51e6f4c9","e054afc74577ca0aa5e7b52a63f4e70bd88a2709271dfe3ae5f3639376eb4006","339dae50e33d50aa0cd1dc447432aefad2a6e04bc149cea692cdd6f203acc133","0931601ab88b17ced10d210b73b69d45855330e2f7d04827af69758de2cb8cd3"]
Anchored
2026-08-21
Public log entry
search.sigstore.dev, log index 2542879916 · entry 108e9186e8c5677a2329…
Expected log hash
8337812f20bf1207a3c96eed87ab975d7e92ac1421dcded24507b32e456b788f The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787282728402","kind":"published-quote","locale":"de","page":"brand:josepha","quote":"Auch nicht im Spam-Postfach","rating":3,"review_date":"2026-06-26","source":"Apple App Store","source_url":"https://apps.apple.com/de/app/id6717590697?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (681242bb8cfa…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.