Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“now they want money”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
32b5ae9ba0bde2845ac6c18ddbf42263707330b55bc1f1d41151c59109a3d467
Signature (Ed25519, base64)
s6VFoA5XpnmoA+ofxnhBkS1mBlYkfNbn0kUH5bAHVxWDUtULG1fntGY60SwHPfSO4ZvLQPRPmI/m5fgNaILiDQ==
Merkle root
3b3dd30c58213ddb8f8368232793fe0b07c54689d13df1c0c41d21cb861abb8a
Merkle path
["32b5bb7aa923122e3dbc62ad10de870249f77feba24c57cf0f7be7e6776154fb","bf15ff42f118099faeaed9e84be109517b4889177ec7f327750def79be4cc3cf","fe58b47daaaad31be01194d8cacf347ecb99b5fe43c807ec80d924d3a7a85c17","0eaaa4360d19abaecb7bb3633c6f4ba0fec14c3b4d1d49a9e84150d6a8bf34f0","822b8c3a243232b393c9cb2ab6f7a7ee40703a8d20348987c296d82953eb3d0a","f3835d915199d74d97d7450c54007e3d3b871aafb78c91c6fb0a72f149ff7aea","5223d80ceddd18cd1f40a768dd6cac4de4bbf4b5b0aef4384cb876d791945283","5b2c6fa9ae0dfe35b4b39a1812a50c9f3f88abc77f5fe77774fc769558289e04","baeff3b6fe4e547f35fc30fbed9d50edd91e516cb70b83568cd07e3662ce05f6","ea5aacb57be18f1277e7826bd30fade083b85993e8996da4e951d4ac22a48b8d","0fa6e021915e97907e67ff8cccabe7f02eb996e2f5ce8c49da1849e9e8cf38b1","9df75d1e12ce5c8bdbd4218add9892c1f31a98f8ece31caa5ca241494f67328c","53e54f6e28d11aec6b3ece11bf25b4e2d7d06305313f09cece266aba7083c19e","769d32038885a12490c9901edf3eea3853f0bdf37913089eb73e34b2c0d79ce7","90aac0c0379b3865ec4b002eb3695dc461bd0aa66de2ac6c660b6e443865b70a"]
Anchored
2026-10-06
Public log entry
search.sigstore.dev, log index 3101352376 · entry 108e9186e8c5677ae91e…
Expected log hash
0a3f75a20ca5e11e6fd9d7b6a5afa175a84aab197fa1914018652863a1a64cee The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791258637050","kind":"published-quote","locale":"en","page":"brand:deezer","quote":"now they want money","rating":1,"review_date":"2026-10-04","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=deezer.android.app","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (3b3dd30c5821…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.