Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“now they want money”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
1bcb07108bdc5484dd55f09d14a39f17cfffc6c9e1d526aa2f08eed61cb0a64e
Signature (Ed25519, base64)
FsOHlikEFRXE3NXJykrBvcLQyiqrMgViz5D71a4eExSwZPc8DgCoVkU/45PofdMZ/0C8I8UTmFpx+bcroynIAg==
Merkle root
61203b6d05350adaaef087cbce75d25fa5ac2036c1a66344255fc73a224d39c3
Merkle path
["1bcdba97c9e881cb1d0702f1540381cf039d2c8971d394c42e9eeda7d4a5de1e","766a6b7b2f3462b34401d3bbbb2850f7530cf78878f931d5ac07a1c3eb330861","6fb46285364c0384802d8d262b4538cd7dc4bcb4e05826f81bcceeb30e029788","a538cc2b4d0b7f31fe5e75c417fb27450d6071b49cc54f6d5850b43634cc7e00","2fe85d39065f14a244d2799b171c7497673b12c9875d4522c353ee91b9c9fb3f","1f9af82f11ba3a042f48860c2504a9b3cb31a8202905a953bcdadb5534447464","33d7ea0751d1bdae227df1e58005a3539e37d4eb98a0064b02c9177bbd400a38","2d2d0dae9827a1e20d01e12d51b008454dcf751c8c8c42b4b663196447b3bfcb","7e54977a86b3def2dcd2844dad6d13317c3ea2ea3d8207a41fc44834f4d80f0a","4e46c48403bd2a26293bd671dc6fc39cd17519c698d5c622a517332aa47097ea","31cb76434d3f0fdb2c2a148b7351f22eb9759373ea09c6427b42b9353170b18c","e8dff68eba558556d976e6d2844f7cb78589bf5b3174cef7b0e77c60d4764550","6ecb3415ebcce01953d2d375e9a79672b399b8e76883ef30376a8fec1196fbc5","ec52c14d031b4094aad3b2c7f7a2d0de70de35e711cf6959d5681568f51f3cd7","d35a1781f2fb2fc9cd66aa22e2ed6cd805ebe75af0ac2c167c3e4444a0a6f362"]
Anchored
2026-10-06
Public log entry
search.sigstore.dev, log index 3100032352 · entry 108e9186e8c5677abe62…
Expected log hash
0a0ca7b748f6c99c5a75a761289092bb11c807eeee08be8ec366fad5b0bfd2d5 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791253605372","kind":"published-quote","locale":"en","page":"brand:deezer","quote":"now they want money","rating":1,"review_date":"2026-10-04","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=deezer.android.app","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (61203b6d0535…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.