Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Almost 9fr for shipping at this delivery price!”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
0c0dbac356db9d664480b3ee0edb94a9943ba5a10e3869ebe55df3aea4cb27b0
Signature (Ed25519, base64)
jT7+ZD8v49MrXe4YbR/exRPhE6O9ZKsiIZYAhXwJa0YcLthKOFoYeLEH56n/bmHm3/O6ou+Xk0Q69tsBVux1CQ==
Merkle root
96fbff9333062c6f240ebc674c358d11c91e32417964c7b74e7a085ad09b3148
Merkle path
["0c0cdc318bd371060c152ac7c7d335a321abc29ce161a71971b9983dd34ba501","5bdc11d07e27ca1c4369d39c1ebf67adb25ffb9f2467767c61653cb482e57108","0678ec7e26e3db4dc02ad7b4a30b929545ab9181c4eb4bb06906873ce51733ca","8eb37cd9c7c36a3a8d15a5559b390ce5ffb0faf248a0a0d59ab0771f7e38d8fc","2fa5881686eb63fa70a6e49e0f4c880489169ea2fa6ab62d5e3a82c1884005fe","68ce4f727039267242ffaca9c0dcdd9912a8a7ace19503dce368ef36e4137d12","9d682d40502dc99afbcba339bb911d816672cf4325afa0a8a580d5b30d9518a8","f2c53331c5a17ba920d2d394f450eec2709940acabe795ac070010583e3b13fa","e314a67fefaf76b8f92a8aa56ab130485236bb93e67c8e6e6481f5d474dfbb60","fed43698a22f926c25af35321acc9fff5db3cd87c9d6ff160237b719cc901ebb","7d02d43fb1928e3ccc029c215d21e63b8e4bff729f800aa5a9ed26d015bc3631","94f788ee88a3a5d0527e939fc2fb4326b3a860536a5801cfffd8d3c9817768c3","79a4550b200fde9b3a943415990b5226f73c8c365540528c8ac5ff0f8d838204","392c4ff19a61c37ccb09c095c4cdb0c4164ec867c437a8e3033cfe3fe2edd46f","60ceee9d6856471604c29353be774f78386c382c47f03b784bbb0ee7fd843f1c"]
Anchored
2026-09-02
Public log entry
search.sigstore.dev, log index 2685152720 · entry 108e9186e8c5677adce2…
Expected log hash
b48044e152c7f9f6bdada08baa42518b66cab68608ac945b90bbbe4a8f1ed0a5 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1788347082424","kind":"published-quote","locale":"en","page":"subtheme:ifolor/delivery/delivery-speed/en","quote":"Almost 9fr for shipping at this delivery price!","rating":3,"review_date":"2026-07-02","source":"Apple App Store","source_url":"https://apps.apple.com/ch/app/id480599198?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (96fbff933306…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.