Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Very good feeling.”
Google Play · 5/5 · 2024-12-01

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2656945634

Proof data

Record hash (SHA-256): 3a2f2431a3c1dcbb30c7209ed915c521d191d91da52c222ebf4283009228a71f
Signature (Ed25519, base64): rkYG3RU3VjwXbvOv/VsrBDblDteCKkmRAFGDuqhrIWcZHWy1ltVohFXEUQ5dh+WtMQ4d19wFA5VGRESxCmaEAQ==
Merkle root: aca24c2e1601b5dc9b1de981d06ce87bed5d41ddbec5f662f2e9122f8356acee
Merkle path: ["3a2e9fea9a259f1ccf203b9fd3fea99547c1bff31a52a5a774c87705289c80d3","a7c8ea352e47c36badf36f3a785ad482b03a035a9f63e48ea4ac4a0bed3c9af8","21f82145517c2b4f18ea06590dbc6be94206c39dabec3482bc1f2dbec076589b","0b6c9e827d96a86c59888c622fe730993abdf0930f74c819b2413e98732e883e","321eff61d47d965c3e589885b39653b93d701da776fc926f90eb4290c94eaac6","90b61b11ceccb36995a7da54d3450ef773951ca2c2f5edac0fd5d3a34ddb588a","001cfc9d186a0d936d055940739d2e98f51257bd2e6c8af3756a6ef986609189","8d1eeac80dd799125dddcd1172bf3d6abd898368df0aeb84f7f16957d03dbb32","f7ebed29a08955c822df2c989f31185b8f5913d11553ecf59bcf12310db7504a","b11211a7785a77e03b7b9e616223a03285ca04881067ea92044a0b0a62b5085d","a17ce780ce8b3202ecca40d574d62ac3f190c53df572b3a2889440eb7e59b977","036cf03b1db2c520f8f22e85421e998cdfbd5409cbefe0af172e9abc2b4823d4","736cd20d2da58f7e6d53e7d950f8c030216b45544a44983e303433fd2f2d7547","0e83767fcbdd35a48bae255d39cf62414f789337f2dcd7cabfb48132d2f08768","1a3b232790d06ca4fb8d5411790822aec44d7b1a2760faf9da0d58899fb5e5ea"]
Anchored: 2026-08-31
Public log entry: search.sigstore.dev, log index 2656945634 · entry 108e9186e8c5677a6226…
Expected log hash: d8cd67f34eaf3c783d457778db7013b72c2283a4f271c4135e4b5609ebb2de25 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1788141623173","kind":"published-quote","locale":"en","page":"brand:frontify","quote":"Very good feeling.","rating":5,"review_date":"2024-12-01","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.frontify.app","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (aca24c2e1601…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.