Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“If you need a refund, they will simply email you, tell you to talk to Apple”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2594412582

Proof data

Record hash (SHA-256)

347cded8e4e3e3f6e5b3f7c341a2458f4c1b280b8fa43b7b943253dc7e4b7057

Signature (Ed25519, base64)

qLTk1n7fn6TbkxaCxGnb55t/ih6XBbj/ITNPf/DETU9uL14cmvtWtYhYEW9fZTKIZ4dsqmurFqJsJUIuVU1yBg==

Merkle root

d414e521fef9d6d099989fa0d693684c20b42a89a12033fe1adae5ceadc28160

Merkle path

["348103575786f87e53e31d751960563366fd8d4456e82a6000c4474c5657a4be","ffb0ae2ce1fb38fd5ea3c3b1392e3bea6aabf46ed489f8e2c1428e445476f238","ed76ecc45bf646af637707fc8cda953d2bbb303fea636e00c5b78259ea35c612","8b9fcd3471e3c3c45d9d8aaca7d1ada2f53a3feac01619347986b855f8710c67","6323fc6a6b15666d593e5cda610b6fea4447e78134c41119bccadda23ce62261","bb24dca64d8669c9d8c49d108ed44809bb46514129fc96b839240f89746e99aa","ffae55a2f9166387b584293138f52bc02ba54180932a7ed132a3d27af93cfefd","5317e1f0d0c2261141ac794d432a1da254fbe96bf1477f56917470c91fcb517e","2c8968155d18810606d06e0243b1494f0923b6c4e103ae75bc7758a7f636ea51","2140bcf93c71bea18fc050f70c4bc25224c61a674429d408722b550a3ffccc73","e6001f679d2702fe309a20c007dca768bd33ad01ef4c1f6804ae7c301ef39fd7","f7689b85a55e695c70332c7a5482e0e4e39577760ed75019bd20ee8b6170bb32","6c6122ca1d4e612760da6b18990241721e66a9f6d9245bcc3a249d305328ae19","dd85a03194c1b09d93a4be119d3146825d20c9e375d143636eff256904ff3e25","d9bed3bb20fbc734967be09c1cd24ec9d5bb72fd1e4fdf84e6057ce858f8bc78"]

Anchored

2026-08-26

Public log entry

search.sigstore.dev, log index 2594412582 · entry 108e9186e8c5677aea33…

Expected log hash

b1897d255cf944fc063c3044a4546ab02c40327197d891ce843dc1c45c2dff03 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1787713855428","kind":"published-quote","locale":"de","page":"brand:signeasy","quote":"If you need a refund, they will simply email you, tell you to talk to Apple","rating":1,"review_date":"2026-07-29","source":"Apple App Store","source_url":"https://apps.apple.com/us/app/id381786507?see-all=reviews","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (d414e521fef9…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.