Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“I still have a good relationship with SUNRISE.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
159fca05218c092ead4638e0c61aaf3ca0b61c0957d88a042bcd01615a3a463d
Signature (Ed25519, base64)
ulwFD2MActtx6iYC8Ppv7pTI5SeCRNc/yWxqqsjT+C26nXPM2ImZP22lOquAIBB63ylm680jO2s0aG8+anb7Bg==
Merkle root
5d9e24aa3407e67ea2f2e26a5653a6d0076935845a1bad3488d2eda2ee88a81d
Merkle path
["15a225056a7277b71d1a0eec1ca54e2278a3943231607955ec2442eff03cf18c","5354e8eb661f8a49d30b06c808c91e7cb198135d970e3d10d4de348c3e24a0d1","f2963b3aeb384b3dcdf7288db097cdf538931a8056f86cd7480b8f121afe1565","42a5f9d8d85717e07d3fec10fd6a8829f242289a2a2a1cac35ab49cc7a018994","f9290c65a6d5ab793ccb1c142f06171afd913b746b0628a0770edaea60384672","2d96441ccfb5370b60312949c0e24149f89d07870b9b4a3a6cb41e31e6365dd2","8df0d0a031019308ac467f7e2e4cc3247bcc304459b951fffed21e447c40a177","740100a0695005864a867e6897d2ee1296af857af56b91fd4fb3d8e1dea9698a","1c97af8cf82e2eb84cf5e919b2b4ba757e7cc6cfeffc70688cdb901994fad41f","de257b14b54bc9f70494cc049143c88914429b46ee097bd1873b3900ef643fa8","f78c065a55e807142d1f2f099be6c006ccd2e6ca1106e8e97ee80728ccb72dcc","c8f76ca8defbf8ccb375fa4489c615b5d155a09a82432439ffbe5296f7a55c87","88cd2e092d86a2cce16a67d96208f41b86bc5e9926af919d175142df77f901fd","d52b5f7abb2d6c19af7e500fdba55bf56c359acecf50179e194e26dc83476c29","0df45e9918aa8c399d7782a38bada433a6ea05fc7a52d0a6a2d9fd2f836d191c"]
Anchored
2026-08-26
Public log entry
search.sigstore.dev, log index 2594955598 · entry 108e9186e8c5677aa8d6…
Expected log hash
98300f71cd632ff600fd4a8df7e6291aeb56582c5916b3a391d1e3bf72ef7104 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787717033238","kind":"published-quote","locale":"en","page":"theme:sunrise/service/en","quote":"I still have a good relationship with SUNRISE.","rating":5,"review_date":"2025-07-25","source":"Apple App Store","source_url":"https://apps.apple.com/ch/app/id466738063?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (5d9e24aa3407…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.