Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Es hies keine InApp-Käufe”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
ffd1da4aa0eec427c92c70edeb137aa87dd5f7f3ad01c8208d83077d1bfcfcf0
Signature (Ed25519, base64)
lOSYZ00jNPqUhhagk87W1fsDAvBjhLkhwYlsjgJD8xNfPz51Xanztow6/YILOKGnr/SqRiCL3XZ1GuFjbEcmCQ==
Merkle root
3030a3ea5b39192cafd732e0b397cfa387f40a2253f2715cd6a4d9d218dba468
Merkle path
["ffd1eb378edcc9b87358f1e1316984ce2c29b0d88ed3eeb5dd8fb08ba9590afa","470aa174aaeef1d986f4011cbbcfa7883c3ac5bd19ba943e99c9c0c9dcd0c61e","fe6470c3312523091481c5a104fc6c8946a9d5f9fd923f668debf0454907575e","5ed59a9c7e532bf8a6edb3a14a305e50788d87258b4626ec81aa9e0a747248cc","6c73edcedb5dd4b5c2b39f9e4d27eadb78378bb02c5128e3169e4eedc5cff761","1a501ac1aa4a2425bdd8b4a0e93a1f356b3df2af4710064553d1b730b69adbd6","c8bd8303b46644639b52bae5e3642667cb21e8d83e5c222146130a32cc983ba6","8fb4dd62d80149b557bd56820725d738a8a171e8f080a5a791cfaac77ffc9ea2","2f6e1791d4f1c5ef93c093dd0347c707a3bd45cf36c7bd81424f8f46b7609620","0ea42471057aec8c3ac4ac6621fda487ec59b98607af6dc1ccc9c03a24175618","1c0d046578e667374df87204533133657b4a39b1566c3798d3efb2b6dff73361"]
Anchored
2026-08-19
Public log entry
search.sigstore.dev, log index 2514446349 · entry 108e9186e8c5677af084…
Expected log hash
901e903dca7784cbcc0b860ca8f2ae684aa8c7d566efb3654aface7bae409ccd The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787128322154","kind":"published-quote","locale":"de","page":"brand:bookbeat","quote":"Es hies keine InApp-Käufe","rating":1,"review_date":"2026-08-08","source":"Apple App Store","source_url":"https://apps.apple.com/at/app/id1056652614?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (3030a3ea5b39…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.