Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Very expensive”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
164fa62466b701249b7cc4d0b657d570c21e0dc8d615000e062c761744af9ec7
Signature (Ed25519, base64)
JTTBZh2+4GmqaD3rUzW+OEyvTVXzU3UEnbNX1Yh2YnBQswLl6Z43BUtbK0f7XXZwarpKgl7ZnhIPxkYLUMDAAA==
Merkle root
c62de506c31e1551783494d165965503c3e555ed9c56fc9a8ea54e7f423e7596
Merkle path
["164c2a24113fab3f05c546dc7baec6ddf88346d2ca458c0817d64a2f193001b4","dd5ca7be538c10ace6453a61f604e4029f8cbe21715352e2cf4d12113ce3e2c7","d7707b65cbe0fac631d7959aef9752dbbaa360a2696f6a9ca2b4eab279260f41","581706be82d2ddf6f68403507f776e62a7141ec082b0a838ced75ec7d46d302b","efe190a2119607446ec9d2a591e1802e0596fe4d92e0d215cf14999e1fea7f53","3188400f8047970bbae7ccc060ba7fad58a45ae2604c93ba950ce18ca26f67c7","3d77c899fe0de0f25cc5ee5b84b3325f4732beeb722f13bc377766bcce3ed1e3","34f1042c67287ad4ed912b322f422e7fc183e644227dca6a54a9237803e7bbb4","c08363c1c9d1cb835eb24d49bacfdd1d15ed061b105c6f894fdcf8c04335a9cd","610d0e626da216f9f8f3219376dedae2f3123010acd30bd0d28f2812e03b4ba7","3beb9e2419791c5f4003f107b8df3f9b8cf220c2cf0d95e0ea1059ea797c67bb","b6589eb019b8ec6f8ea7185a580a7050e41156727907c947ee3b1e0b10499acc","db5340fb2ee7032cf2ca3974766493186bad902d95690478526151b5708df380","4062e3741ff43f0051f244365acefd9f0704d953d0107616d7f339f1c0341e11","4bae54408dd517469b74bba599857056a81c7afc659bba4587745154292d4af2"]
Anchored
2026-08-26
Public log entry
search.sigstore.dev, log index 2593655674 · entry 108e9186e8c5677ab61a…
Expected log hash
40a4bfc261f324e812428cf4f8faff6ae237bc17c25df830e6e4b8788ce99728 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787710495154","kind":"published-quote","locale":"de","page":"theme:sunrise/price/de","quote":"Very expensive","rating":2,"review_date":"2026-06-30","source":"Apple App Store","source_url":"https://apps.apple.com/ch/app/id466738063?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (c62de506c31e…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.