Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Worst service ever!”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
142461f4fc2154609fde133ba90e6d77f1fa5e2c2513e8c6efaf2b8c7b7b9ddd
Signature (Ed25519, base64)
Mx1vsdIjtVNTCRqpeLkI3GPgUs/krUCAdf07Z9RuB9L7tcvDVcrUYE2BuX484u/eyu4LsScIe49asNsc+XpKCQ==
Merkle root
4e4bd1a263431190e24045d88fbbb7ed5f9030935faef80dec659ae2f039ec76
Merkle path
["142111dbbc696d03df31bff9cc127865c2e347211388c1dd0cd5c738fedff745","301989d5d3370a243b0dbb9fcb3a637aa63d9655cf2f58a2e7a6046f776151a7","3e7e2913e92c691acfb54fe8dd47c0664398b64f3ecd6d16b73d89e211410b19","240c097b89f8944e3b82b98b9b9e1f7a2828a354cd70a14c3f60d9221c73e1dc","19dce3a4968b4a8de12bd1845e105c336a9dbf3c19ae54b8a50fc7c9c193e3aa","dcf844422f480606e8f4006b3c2444d5f573e3eecf6832a123edfe49faeb2ced","2029c1e5ce3dfc43c19ac902cb2357168a0a5222d91112974e66926d33e325e4","e97b1c2c71d1e77eb5d0e043d32236582d625e8365a03dfea4e9172d8631237d","ab0f1b3aff70fbaf5173a3ed0ba5f384bba952de3116443588ba1738058130a7","caab752a8852d103b2cfb7c95bda1deb4bec8e25cf5c9b716d78f9780fa8ee22","a9dc85b0feea577e1e56f3301b6416e5ffdd1261a7a85a262ac1f4cb6b735558","2ba87cf098c6c2404b2a7976747e04faae5f4c59da8677168f10303f3103cbb8","0dca924cc5d490cd09e6cf28d263a70ef1171963dfece74286d6f33a3bb659d3","5b404d681bffee559c59320e4c89c61c29c9a49c6b4ba6d76cd832716684aa58","9aec3ad04e3d8c78958d9259e35fb1f1ff0ef798a114433bf3a500e8a57b1e41"]
Anchored
2026-08-31
Public log entry
search.sigstore.dev, log index 2657305914 · entry 108e9186e8c5677a8c0a…
Expected log hash
706e8c400fa8ee9f8b3984ef9db59f211ad2980d864551783fb16e1211d62156 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1788144640122","kind":"published-quote","locale":"en","page":"theme:sunrise/service/en","quote":"Worst service ever!","rating":1,"review_date":"2026-08-13","source":"Apple App Store","source_url":"https://apps.apple.com/ch/app/id466738063?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (4e4bd1a26343…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.