Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Easy to use”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
15ba9da1ca8891ca5af4c5791f008351f885121c7a50064e3df6f7557636416d
Signature (Ed25519, base64)
mnGRfYgwsQlrb+XeqDoLLL9qbt81CqIjn2/K2IRT0UsOh2VFg/x4XhMgeiFLxCsbdCc1Ia5IKBYCHrZ5GwkICg==
Merkle root
b3122ddd7ae78437c88b5c432d1d272e932d99a36327831f741296c5804e0eec
Merkle path
["15b9a69e5ae80e9fc3b2bcd781899bdad383768b7902556d83a842d3241023c8","4fe8ee5dfc394437253a678782ec3da2e7c291652f8a2733c9f193ffbfdd6f5f","d845707c1c8b19630c1b2e851c6a71befbdd596235f8f8357cb4375e072c21c5","ff731c0ec51977e94b24207342b94788015945f8d4a58d6b6ad54c3da747004e","dc6e17d3e81b21bcc99c72174cc3494097705751c3c9db37ffbd2512f49a1387","c7fe5ff0963edd677e672e0b29ebfa2c338de390314c9171b0b7da15532480c3","3e692e5b0c74eeadd9ed87715b626ddaf4813a9d1b849c67a8432fe3092a0e39","658075a8a9cae3b3d3055c46cedf2b31bb763b5d56e873d3db7d4f351b308827","e1fc3ae1bb76f59eb840733bd6cb0a568d452dcb042a953c8cb568fec2208a26","417b74fb65c84f1bd7ca7b5be8d631e289cb505be498fd3d3342077c1886fc9f","2af72f591887434887ac4f04aef10d065a53ca23b48c80d373c3274b5f82853f","afc410f4c7c2995a0b70eb5b9073e0604c33387ebf2e2381b9760ff10ab70cf7","c22e3ca4e13d6be34d7e2d787b0073655e272c17b975ef51a9080763273d2609","e0f5a3f9535914a67d876a5c4daca45483a20818791753e411dff623a270df15","3414a8c2f9a037e1540995688a310f939676497d9d86d0c2118ec57a53e60c3b"]
Anchored
2026-09-02
Public log entry
search.sigstore.dev, log index 2684135818 · entry 108e9186e8c5677ac65b…
Expected log hash
aa65ff4939d7df1f40b93b48ba8bc57094c1090543a7b0494509e8f24b5559df The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1788334509514","kind":"published-quote","locale":"en","page":"theme:sunrise/ordering/en","quote":"Easy to use","rating":5,"review_date":"2026-03-30","source":"Apple App Store","source_url":"https://apps.apple.com/ch/app/id1231971182?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (b3122ddd7ae7…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.