Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Payment is not great because it does not open our banking apps.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
19e69f33a3024f57b27dc10f2efee147cfedaa61417e14ef4cf1d8f291ea4bf0
Signature (Ed25519, base64)
E4jWlV05/Vo8D8xBjUWw7aZXcBdiP9qrdlI6hMWpanofkK4mSnlu2n1BqEEWRlBuIHNj2v65ax8HEBeWE+wGCQ==
Merkle root
23708832e8b82fb19ed546d32769e3b420c1d586f3597c57fbe21b38aa3d2967
Merkle path
["19e45efa47b988bd1ba869226529ff80b651c570a91cbc14504694c688d69647","76d6c6b0dfebad88cf52226481c96cd095b032c626b02f772939bae48236de76","9628daeab30c6b987146e579512246a00894d5ccb8639ce6947fc0d00f5716ba","283e3c8ad2094f050dfd9dfdb56ebd4a41de5dfd174a0ad0dbb953d96f1885d2","af419802b22b51f514df86b826ec9993096508cbd1a22ca5d66cc6e4323dd992","994244212096f31fbb8999b10e5d8b4d91f18ab36cd25dce1a0d9204840ca744","a2916677a1978ff6508df44b89626bfda71f243233b060be7192eae3706ad717","2407b847e0cc5facf892d84007132885d770f09021445ee607983998fb34e75a","7f07f195eaf8ca2d374946190175d413f0a39bfe6ef633035334863ecc35c1f1","30a073c5bb5085b6473383f8ced80a4dfc245a4f6b6540d8d2b526c842e1df4b","31113718bda6325e2f510fa2b8b41ee256d29368f8dc406dcb60eb6902edc5e7","886c6c8b44eb8b5f17f3990b9eca4215e7ecbe3bce4e5df2d7159fca45f4d4f2","19beddbcf75bd4ec490e45017ad80ede4091fd11e1e67f64b06c0e49a1029e54","8f33faaa07ad5ea07efeb917f280edf1402ccf36ac9ce99ebbc19b8a3755ed98","15329b26f5dd0eec881ba05455c1331c6ef72dbe3b2411079c28929287675737"]
Anchored
2026-08-30
Public log entry
search.sigstore.dev, log index 2647607423 · entry 108e9186e8c5677a4592…
Expected log hash
0f6ee04fd6fddd2300fedff496e92d61a9d4696f180bee82b8a815cdce3bb3d6 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1788065315450","kind":"published-quote","locale":"en","page":"theme:pixum/billing/en","quote":"Payment is not great because it does not open our banking apps.","rating":3,"review_date":"2025-12-21","source":"Apple App Store","source_url":"https://apps.apple.com/be/app/id1319898516?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (23708832e8b8…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.