Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“The overall experience feels smooth and easy to use”
Google Play · 5/5 · 2026-08-31

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 3100032352

Proof data

Record hash (SHA-256): 3ad7302c87204e78b9731504bbfa8e1a2bac776ea29061141e7a3b98f3d8ea2e
Signature (Ed25519, base64): A0MWPtsTRnzErje6mPCG0wO6gFX4vOzpZKROTEIc8F24mLoqlV83clGtORofPNT8OdI4L/zAiwiVo81R8XnKAw==
Merkle root: 61203b6d05350adaaef087cbce75d25fa5ac2036c1a66344255fc73a224d39c3
Merkle path: ["3ad773a437b33dbf98f176713cc1317f5a8072bc1ac37851535e49e648480aa6","07f7e1c398ae8fb6c8e1e1bc8c2bd8552ee9968f30037c3a4303a4f84ac86ab9","d58dc98828d39a15c465bce178ef630eb6350cfbb2d2e1b7cf66886844d9fb06","ce2a8ae627a021e520f095b648a83329de37f3cb6de9d7165602f735e0741609","18e9739ceb31b0a33b7521b6ba8227735bd37cc71c4b8e276889949d6981207c","4b8f3cfb1c4d9084d92f3cd39bde8973f4e27eb17a4c91e6a0198033b2b12e14","36ffdf53adc4a4926668af82ca2ffbcfaebe43c8a7a24c34cf250efeb134b763","664788af2cdfe844767c593d97b42ea5bb53b9fc4e0948a26287f777f4ce15fb","755a438fc48362dba9ff0d364d001914f773616c20e64e64ec596db14c2be08a","340b5eb81ce1272d0fb509a0c4fd39c2f49f9ca2281489923e34b2c23ce4f60e","35ee954a429fc5b105a23d476e835de7e8770d55d54a21734f19763c0e44d2ed","8a1d4ba118b0a94f539559452081e2937b8784186f7c10849f7322a52b00909b","2ed3454e6d564ecbb4c0efa28239a4d4a7d885e6eec851515c37fb2e266b4648","ec52c14d031b4094aad3b2c7f7a2d0de70de35e711cf6959d5681568f51f3cd7","d35a1781f2fb2fc9cd66aa22e2ed6cd805ebe75af0ac2c167c3e4444a0a6f362"]
Anchored: 2026-10-06
Public log entry: search.sigstore.dev, log index 3100032352 · entry 108e9186e8c5677abe62…
Expected log hash: 0a0ca7b748f6c99c5a75a761289092bb11c807eeee08be8ec366fad5b0bfd2d5 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1791253605372","kind":"published-quote","locale":"de","page":"brand:signnow","quote":"The overall experience feels smooth and easy to use","rating":5,"review_date":"2026-08-31","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.signnow.android","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (61203b6d0535…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.