Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Obsolete application”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
1bc339ebc873757b7cc1be6e70da7c8d2903173e637c44dcc164c183c9578edf
Signature (Ed25519, base64)
XgCngk+v9Mj4k0L3XLTtOLjjrtcmSEvKsop8tOe8fooj33jZKF3bfDg/Wb9Go2VwjQRpDaXAr7CH8vNpHbAoDQ==
Merkle root
5397210619679ac63434abd334c13f5aaccbd1dd184ad9d8cac5ebeceaa346bd
Merkle path
["1bc55a9536a1e778b6007845cd88d57590ad115a9e6a8c00c74ea27d15a28582","595b449012ca548186ce86c1e9d01fe5cb12d654e4b78241ee3519c3d08c6e48","01a7f68b90146c81dbe6d677257ab50766ab2b162027fdbfb60e26d295a0b034","f2fc99a3ad3abfc1ad1e0a72401242f59456055a8d3a86d4456c05916cec09be","b5e2497a7b140a9d44763131b5b07c43ab34abf28a4dcf76129cdbaa52b1ebed","64392d70a147ee01de569b74c1b0ff5f55698ac0153101f5162dda288ea09c1f","541281d61592484d74e42341c7f0b99f6e8b65826cac87139576f23f2d793ff3","35f4308432eda77db7c1c7b98acbd108a85b1dfd7a58d91fd9010861978721be","838fc043e5fd7e67e71a7d868d6cd0a3c32e7647a93d3ecabb12a66017fd1f78","b03214f67c356e62858bb2b2ea3d59bcfebae2c468b63fabb8224c25df09e038","c72a57b8d1dd9686713731a21201720f6dd67d27812538987fc03760d1ed1b67","6364e68670997f2580620295dc73fc1bb7219986bdf8202c9b9ef24d8e7f20d7","a46038d90afa57a10c269469667a209623fd066d3f084698343feb099fcfeaea","e892ec98bb605644ecd2848bdd788a136c626ca940d293df8f2f1ab99110b2e3","eb97a4ce74ce5f5fa16f1703481b35cd770316cd3d34167e9b76f4403804f896"]
Anchored
2026-09-25
Public log entry
search.sigstore.dev, log index 2948162176 · entry 108e9186e8c5677a61d4…
Expected log hash
5ff8f25b7934b5d72d363d6805344624efba4d637f2c851f11783b259b9d81be The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1790226990092","kind":"published-quote","locale":"en","page":"theme:schulthess/quality/en","quote":"Obsolete application","rating":1,"review_date":"2026-08-14","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=ch.schulthess.mobile.android","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (539721061967…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.