Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“I just spent an entire day working on a beautiful photo book for a Christmas gift.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
5f54853a946f4a2643b7fef24831d3ca92a5c8a726aab66fe3437b36b3a10cce
Signature (Ed25519, base64)
5xzTmoVWePJClWiboUujOTH6eVqScgzNjwQ1VWvNekPoEs7IKtYwC1ZFUgoiwVC7TNkuaRmmZoC5F5gLershDQ==
Merkle root
cc9af896bdf0beb88857e1dcc841c404ccd4c59cbcb6932f17077fc8aa87fc23
Merkle path
["5f5964ef1b2b1a6b8161ea06373d5b4531870067d9cf531b63d095165e6e3d47","fce6e6aa22eb1501745f52d9e4c3e5fa4397d80d820399b1e3b13d1c78c7eca3","54f465128aee73d00551209ffa82702af05c739c0d40ca6b28ea94cd4d7864dc","ebf903385643bf043e1e47cc643752688a80f7fa30bd9b314a47c0c6dc76f05f","d2d3272c1a912b455dd293e7948e728e15c069ab63d6369898e588410b4327a2","96607b4382b878438e086829788ece40c0961c31bddab7f45ea0f068e602707e","2f2bbe0c62987405285d214fa876dfee822f007ad10e4228579f1c895b5dd2d1","b3d9987000c691cb70a321688c6cd2482a29be70d9f57798f68dbd3f9ab72087","f891a51e4a046f79fcf2f7477caa4f8d5a901468a89d2026aae391b3b921e05c","498bd58bd56b8e45e3d434453033a611b16b86968fc7c86de6817801533e4670","eda20f447ab5c82ce3264dbf88dd828d9a59dae75690f9cab651e285a1bde01f","a0b87a0bb877d575137947d14d0bd97ce13744bebb954d336cc7d30ab5c1486e","d2a0d95049b010a02dac5bc62f9c8cdbc0aab414d57731175348e6bac7bfc76e","0f351cde6b1d9915cc0e417c0e2f1f0e3b04741e1975a4ad546a8eefeb399e09","7e6c62c2991c7cac05134c9f9e2ab89c75f6106f706f524eb2e9fa9f554216f5"]
Anchored
2026-08-21
Public log entry
search.sigstore.dev, log index 2542751096 · entry 108e9186e8c5677aaab3…
Expected log hash
8251ea19feed4cbe325f48ba93f0e47294878633f5d43178e4a3a023547e795b The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787281943761","kind":"published-quote","locale":"en","page":"product:pixum/fotobuch/en","quote":"I just spent an entire day working on a beautiful photo book for a Christmas gift.","rating":3,"review_date":"2026-01-22","source":"Apple App Store","source_url":"https://apps.apple.com/dk/app/id1319898516?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (cc9af896bdf0…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.