Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Makes reading in phone easy.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
23d39590e0ed198b0f3a26b2d92589760f71a073652d8c0e97705ac38d268b2d
Signature (Ed25519, base64)
d1CbZem19OXGJ3mS4vc1dJ4+c2ZtrMapA6J/TsV03ORtzW72aUp+vop3gETgclisUhNEBVmbIu5KNlfK760tBA==
Merkle root
776280ee3d7c9fb97c17efec70636489b157ec8896f1d74156e65fd2784f427d
Merkle path
["23d3fde5a278b07e2ef9c418aa6a14b1a1e91c1bd86112c9834bbe9fe7aa56a7","1420b480607929f42936a79b48fc37a285e5a6710c12ce4c51c7dcdb16217d8c","84d73690aaed05d5ce7b346cdc6cb15d2cc3a063374356c1e40832083df164b9","68e100b461830c593579c62edb2c7c0a561411eb79f658b31ac876dd490405dc","7c917a3c4a1f3e2feec42723b9d2fb19afe4c26092bc5638384a4d470d0ab3ac","fe1331cbf5bc2c1b0d238213d903ffe9c496622b271cc37291681ba57ffcfca5","2e3b34ba5dc4dbb6a6bcb286e8968b1ed7006da507e16e6cd79d9aa452a622e8","2b46ae625da4dfe4309a58108bb511bcc04970eae6ab586dd39be6c90716036d","eb5501e44075ff38d559bc3294bf4e4556760ff027ad1ffaf96c18b906dab884","1a6cc76fd3f1b194bf0b919d3c7fa1000b3a49bcb1195a8fcb91a5502248bb97","e5c104db150a8ae882ba09827f6aa11807d80bffe8834a6ea17c7038c06072ee","60907ccd13ed229e256d84ebbf64f28d49e53e330a41a12ee0e572a7bda13a44","d52ff57f3784c85afec760a4269c3d85d62725d932c884d3ad6b0915e7e87160","ed7d474ba5c549457ed31ec3935ff263facb949960d2ea6afb4e636fe877616f","e23829f40d0756976d56a16d11d0fb78fd0d4616f1a21fc6a093fb08e70e5613"]
Anchored
2026-08-24
Public log entry
search.sigstore.dev, log index 2579623934 · entry 108e9186e8c5677ac501…
Expected log hash
8e297dda0356012bc344d5c642295d48723652381c3471953a3655745b453c4c The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787543470065","kind":"published-quote","locale":"de","page":"theme:acrobat/fit/de","quote":"Makes reading in phone easy.","rating":5,"review_date":"2026-08-05","source":"Apple App Store","source_url":"https://apps.apple.com/in/app/id469337564?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (776280ee3d7c…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.