Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“I cannot understand how this app can be rated as good.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
2f38f1f941d2e603035682b1b46ee3bc17d53b5d553b0dfa3f2fd6bafd70672e
Signature (Ed25519, base64)
FRyIRSv8CHHvlkIbaiqLgw/m3NkFDZMchBUaJfGxrNg5oSoE8Zu0iyGo0edF7iHq+05gh3DK0H6bHlvb5KFABg==
Merkle root
0fdf8a945cf322eba60395065bdb38bb3eeb32c52e065b6c93c48bb56aa3bb91
Merkle path
["2f34ab2a79461cd678eee6a0c1c662886b018302c6228cda9f2595adc93e2f61","00bc43adb6791d7556ca1c6548acb5beb0aeced3a3cf03a8146a0ae537702a2d","d99f111e372ae5a166f490439c32d14d02e8c30aacfd8a19018a76e6e8ba11b0","21e1f11ba5cbce23a02d4a0fadfd32f3a323ac3c85a359e5e3552a161d2a9e9a","ed76f73b2540e6662fdc9b0703ccd2a9aa548b0520bac5687a0358cfd54f62eb","de1b875ec5824146fb06978024a139e0d38e3871aa9cc5b37f895f70ff3442bc","df7d76a7a4a083cab9e36fc2310e759a65c3def6ff15fec1d32afb4fb9278fe3","946ac43bcdbdab0837f80a50117c2e34ce77d309d1f9db24d816f5cdba70865c","5f8292ece34ce7bf793cab6a75b78b87fb68b503c0140ecc48c2ee2e829ae6e4","3dfda6eefb4ac831955867cfb2ed1e51cd05547c7f9a8ed2e97ad47b137dcf09","a8752d1d2ad3dbebde3a87a74dcdce857dcba4a9cf51b30acf458fdcf13dbf40","f53de120e1726fe9db2d4486352b37fd1aff512fbb85358f81e6249de2ae3d7b","193dd7819b5cc0893cd3620ab02042348a20821938045af5a341e160ec2e8bda","d97c31a576cd351fb66ddffaddfc87228fbf93ecf06301d5b8aec9b37e0fda68","31e60baa9fb8f672f686fd126d7dc82498bbfeaa38bc676e67691bf1c2c7c210"]
Anchored
2026-08-21
Public log entry
search.sigstore.dev, log index 2541942774 · entry 108e9186e8c5677ae0bd…
Expected log hash
4825ba618d3c3368179be13912e101812df871de37f30b1ec256ca6d987713ec The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787277864570","kind":"published-quote","locale":"en","page":"product:cewe/karten/en","quote":"I cannot understand how this app can be rated as good.","rating":1,"review_date":"2026-06-30","source":"Apple App Store","source_url":"https://apps.apple.com/de/app/id583713833?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (0fdf8a945cf3…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.