Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“very helpful”
Google Play · 5/5 · 2026-08-26

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2685374445

Proof data

Record hash (SHA-256): 08004d8059a775821fce5e811ddf2e7754e946effb78bb065efe69611c5eba10
Signature (Ed25519, base64): 2m+NRRYuhz+hFad6n75E9uCbHxDsUnjW9p/HJ4Y7tTtpHON7R72stA+NemO6E8zeP7iosFOJIEwQiwBj6KEDDg==
Merkle root: fefd76293e002e3e9b1a8c28dd2b21a6a31f7840085e07fed39fb8f3e1a027e1
Merkle path: ["07fb698329255f063535656301820ae2fd5c2a6624fe58e724cfffae43afacc5","6867171ff3e096b8ba31161ce211d540184b3114836a7fac7d3479d4e938d545","2e95b1656ee358a8f97b377e54627cf20561f54523a471964926d87aa8a4f9b1","6dea91ca7aadacea035e0630488a8368917ea6054eeba161a14e6d29ac90f025","b7453a6b616ac70fc0aaf4fa7ec4d9719d1787eb8a85e71313bed6c4d4b85065","f5da1c080e32b027a18ae51883fd9dd57ba517b87c25ca1e1d3554d26e0982b2","ceb17ec1fd116d71d078da08bd337c2811e77d992cdda85fcdb6d927a37a8244","b6ddb91dbcc2a7cfe3ea7c73d166ab4deb0b369258ce6232dc6cbaaa1e926780","721b12d37f45929abf4dc243ea06042dee085dfe9abd4c6a48da06cc7c7330dd","4afb10ddb171bd71836e5942623b8e2beca1a81927e7314250af1e4e51855099","abd1e888f79e983105c85576ed44c9bd16292882074e51c865d6ad42220f203f","d27700e0dcac6f772fa379b6c132461dd1d9bbb4bd66bd6fbd691a6db4ff5136","d0641e67695166d7e3874838ea7f56eec4d56cabae20255fadf79275a15c8853","7a42de951be4e00d60ec0bbe464a0e0231a5c4314a65e01d8dbe2db19807a7a6","5bcc0454d959fe45b9d8cceb30d3231d2e09d219fc5bea4ea59efa077a6567f2"]
Anchored: 2026-09-02
Public log entry: search.sigstore.dev, log index 2685374445 · entry 108e9186e8c5677ad2a6…
Expected log hash: 8052ff4797a042637f5e0b94324bcfdc656477714cef5f2a8f0c16d93147fe68 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1788351002274","kind":"published-quote","locale":"en","page":"comparison:smallpdf/en/cat-convert-pdf","quote":"very helpful","rating":5,"review_date":"2026-08-26","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.smallpdf.app.android","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (fefd76293e00…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.