Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“make the charts in the app clickable”
Apple App Store · 5/5 · 2026-07-07

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2514130917

Proof data

Record hash (SHA-256): 0bfbe4da6f8a91fe5e9e6341720ff09ceb8a52f77783ae740b3e183a587c987b
Signature (Ed25519, base64): kOgEVFMBcFI055W+FBKzZHyeUAKLtOieT0pb1ij/tY2pfuDaWNVnoH+nOEQYckCCkWXQJGbXqa/vnsFuwy2nBQ==
Merkle root: 72711ef72b8a7ab084630b9628ceb2defcf0aae546304d44ed173db57929457f
Merkle path: ["0bfac51cd202e7e4fe98b8f759e473a74213867217f90478bc5fbc6b26a8013f","11fc1a078c8126737bc82333d457e70f0015d1c9911cec16473eab019c978865","3fa3fe2f605b7affcd8c50cb4602b2898568ccbd25209e671b936b4945d40358","df86ad2d5687ea6adb224c6b5f7072bdf370a249d471de3ae756372b44424c9f","a3f40f513a599f150c29aed7ee80ba43475ba62f81c58a40e25ad56dc7fb769a","51ffe3a67f15dbd83f0f85c9ec1253b663849ad99dded17e040bcbd6ed20de27","0720abc7eecb30243dc298e5454f6fec0c53593059502da9beb5285fe45283c6","c7705a240117f70ff75c15ef97847a7e0a806da25cc41821bb2ec59c9d048a69","b794ebe6ccfbe4670e954ce7cb40c34b182ef3c42ecbaa91e8397a566165e02c","41d93ec6bea3e2ed508aabd7188735f8791ee3884498dcc84efae6a8a85617f0","8d50227300aba901b02912a7ab4c50ac2b372ca5d571f0e88fddfd66fc13b079","dfea71f700e183bb3cd9a8a3044acd27e534141e08568964ea4e93e0793b4654","135f944fcf4a92d6f5a1944e44ad8a4edfeca6c93156b3f0cac35c7e930312a7","768946b507e7dea873e9570265486799703565faf3780e57d953562adfb568fa","6eb04938b6a483bb163369a1d918b32576dde0943755b89bf4c6d18743828ba3"]
Anchored: 2026-08-19
Public log entry: search.sigstore.dev, log index 2514130917 · entry 108e9186e8c5677a3273…
Expected log hash: 65ba51eff926c65ed0ce093a942d84c628d811a59302f32867c6589627e47792 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1787124488047","kind":"published-quote","locale":"en","page":"theme:meteomatics/ordering/en","quote":"make the charts in the app clickable","rating":5,"review_date":"2026-07-07","source":"Apple App Store","source_url":"https://apps.apple.com/de/app/id6449551642?see-all=reviews","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (72711ef72b8a…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.