Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“free and no ads, automatic five stars”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
0b9d7ddf007894ad88adc791ee53dc60d8d64413b1ef3ffdc25609107b980c19
Signature (Ed25519, base64)
05pidkIVIfyR76zDzZjNCIdQ4NZtDKE5kdrQ55NYCo8Q62+AwdziZQdElq8QD2EclZ7RaqkdU17/O8BF/GXGBw==
Merkle root
a086f9fa8309b32cad6e06b6c84c12133a405483807f462eafed4cabc6f3fb99
Merkle path
["0b9879766ef9199ab73e06a36099910300d1dca9f32ca0b91f3672ae4b7f8eda","6a56b4677fc0430fcdbb899f8ee3b6d764bd913417fcb693b946b937cba67758","afc1ae9231381159de0a51715205e404dd7326404a181caa8d79898e2e8547e7","572081664d4c1f3892c2a39c05e2eddda28586b3628ca837d5ead3dd3b49cde7","7b001dc5e0a4fb6f74cce195dbf9317c06027ff88a05b5f4e2ad09d5b0e37438","508cb0c3ca4b757e1b0d1e16c51e58ca50eee5a3083fcdf2713a69e20ef3eac0","b0274e40b8a0e0e282711dc2290120166f1a377b4b25d7aad181eece2fec42bd","b6d07a0f0b07b63383e4f42d524da04d600dfb39d9464ad20eadfc6596b0d181","4ec4d3a7bf6984812eb2cd920b6429aa2cf567539dab0b7c8a00705c64b8c70d","bb5684c3d87ec4d9b4f808137b1ba025f3917702a1657403268de0e1e0b188e1","96493e4a086c37f8a74a6ed1ad7e4595b74e9f113dc11acbde03ccc9e9055f43","0ccf6f0495870a48fb418bb7380dbb8df9da396ae2836c877ff838e92e889b31","6524172f6bc7fc76e6e0803c488a2dc7fb1fb8c35a8cdc8ed06b91c9ec2353c6","3aaa0ca1c59e2fffb0896520bfab42cd665f7155bd5324013ae19a22f4f790c8","d4cf3fd862731bc6a1728d66b360c0434f801f84e015a828556d2731bd771b26"]
Anchored
2026-08-19
Public log entry
search.sigstore.dev, log index 2514476227 · entry 108e9186e8c5677ab19c…
Expected log hash
9a346357c8991b17bced8f12238c2332c4ac3078c0d9a283ee00f82b3c69be66 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787129084398","kind":"published-quote","locale":"fr","page":"brand:meteomatics","quote":"free and no ads, automatic five stars","rating":5,"review_date":"2026-01-04","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.meteomatics.app","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (a086f9fa8309…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.