Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“I bought Bitcoin with the app today at 2:24 PM.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
430a28723387b70942d701c49db87c1eab83f742865cf657f12e432b5811dcb4
Signature (Ed25519, base64)
uep6wG1QkF6dOahpfyTySph8SbhI0PO7kLE72jimtrnfwPFnCXrJ5oHmYOWoDVcGoPaAStdFWb3UEFagzuUFCg==
Merkle root
cc9af896bdf0beb88857e1dcc841c404ccd4c59cbcb6932f17077fc8aa87fc23
Merkle path
["430a6e6d9c454e4020ffa3075467d285fb0a856d8b43dd8b891b56d34a42439b","b5ce20ed8b65bd65153650e936becfaf366fe9ceffc7bf19bf94795d261ed975","dd09360480ba2d17451e687cee3fae77876ba4612df821e8f5075cadbf69063f","9bcf7371994ebfb3d17f50886a6ce722adc08953fe280e696431093a01805eea","c9290424090e6caaed0402add40ff17854ef2b61cf9997cd06394933607bba6d","a7eec0f4c16e0bd02c9bdf77aff03ffed7195379fa3be4f9387a32e3abcdbeee","558a23f7ab6711e14c462e1d30e844874c09de6efa3ebab241990a9f6862fd03","785de52eaa64842e3ccc290b17407bbc98f4dd00d4168092b92789257f202afa","633c72823597fd09ab5726be11f55e26c96364a390f99820c8b91fcafe682304","5c6930bb7ee9533cda3956fa5ee5a1dfd0262ca7fa2f4e1ebaeb5e50f8e8742d","0a936570b82ce4729e73571d06657d4ce4a5b7fedb1fe6b41529a650c398362b","40fa417b4d18b6ccf75b0d8e5897525c82ddc54545fbb4e1fcfb84aa22c7898a","d2a0d95049b010a02dac5bc62f9c8cdbc0aab414d57731175348e6bac7bfc76e","0f351cde6b1d9915cc0e417c0e2f1f0e3b04741e1975a4ad546a8eefeb399e09","7e6c62c2991c7cac05134c9f9e2ab89c75f6106f706f524eb2e9fa9f554216f5"]
Anchored
2026-08-21
Public log entry
search.sigstore.dev, log index 2542751096 · entry 108e9186e8c5677aaab3…
Expected log hash
8251ea19feed4cbe325f48ba93f0e47294878633f5d43178e4a3a023547e795b The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787281943761","kind":"published-quote","locale":"en","page":"theme:relai/billing/en","quote":"I bought Bitcoin with the app today at 2:24 PM.","rating":4,"review_date":"2025-12-30","source":"Apple App Store","source_url":"https://apps.apple.com/de/app/id1513185997?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (cc9af896bdf0…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.