Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“READ THE 1 STAR REVIEWS FIRST!!!!!”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
07abec3b234cc366227cd9cb7ffc2a4a7f9d8153582d7ef0af7c6038e22ad206
Signature (Ed25519, base64)
rqkQEo+JhZC5pDB5jDeKfff8g8mnMeDcwI9HahuMBd8muVHFXsQuqm7jqk3MXd/UqT/ndfwmSL6SneMplcarCQ==
Merkle root
beebb1e90fe7e67e33cbec0f03b99eb76d51091b0320624790586a3cdacfd28a
Merkle path
["07a7e92cda2e9ea3b31e08e403483484a6c17086f6597e20f0b236b871ddf2ec","b5c12be836c676f89c9989c4ca5c16320fb6c6185f819a2c99928943ef058678","c6d06943b3e78d370d40848cbd5666e39e3dc0a0fb390508948bc124f31cae07","6958e2207fcfc9ccaab2a31f624689213eeb4629a8f4a2fe9006f37b311a7e72","e5f0955b183c7775f3d7ebf21c0f67662fa4fec26d42bb4a54dc3d315144226c","2ae8364addb563feae9d6b26078645e98bcbcb35088b31a913d9eb53f587809c","b68b3b7c89f08840102670b00cedf8ecf05030c65542a8eba0f7ff9e97017231","ebeb22e482ea2ae02d86a15c32835884c51e737354ba2c70964e5d4c4df350a1","5cb6644a0b4d9042519832cad3f14393248de0fac3168b1f80f39af4643f04d8","aabdd3cefe6be094cdc384151b18b0a400c0117434bf84c612d21ae141ab060a","be1d18f82847cc6f394066f4034b382d5d773f28b4ab8ca255e07c10bad150a0","73b6c01d202cade9897c4cde5230278699ef70c2f92ebdf509b47e3fb229b784","19513067f8bed92dd7049fed420106f7c62159c37086a1108cbdae0ca7dc379b","8e83ff51c482865a520be89d3588d4953cd4ef6526700cb062f0cfe87ac941c4","59e1d7599efc1b651191f22a2d0a899f2a3b0ab0131905b8aa9a10b3a6f59e7d"]
Anchored
2026-09-01
Public log entry
search.sigstore.dev, log index 2671517691 · entry 108e9186e8c5677ae4c6…
Expected log hash
207971f16b8b3b4c1e6f63e8e9291188fb84b37111ae3e0c78101499642ca382 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1788236415966","kind":"published-quote","locale":"fr","page":"brand:smallpdf","quote":"READ THE 1 STAR REVIEWS FIRST!!!!!","rating":1,"review_date":"2024-12-21","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.smallpdf.app.android","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (beebb1e90fe7…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.