Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Don't know how I coped without this!”
Apple App Store · 5/5 · 2026-08-14

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 3240231023

Proof data

Record hash (SHA-256): 5f5823c9f41b14014212d5795dfa8b51a083a2b13b872976e4b2f13ebeee0551
Signature (Ed25519, base64): ZSMrCm29S0eHAWnaUAlfUeO/kpSB8yA1owv3X3Nb9yc+fgMAOITBE4OImPufmednkn/CApUNkNEZGPF0KBWHDw==
Merkle root: 888a38c73939ec95e6f226dbfb3637325026fcafc5a795aa4e227b811d6b2c84
Merkle path: ["5f5c6efe9c712adea4e3bee9d7779c1f567d83d42c376147d3e3812520c8c08d","549b659c4cfb8b810e3ae1c420159d75f985cb61ef961a943b84fab4046b16e6","1e7443a599ff7baa8f5863510cae7be01c4b37254f945bab3c3ec3b754c9e7fb","a4c448e914ae7643f6073ed1bebd4dbac0e40aa1ea3a3adfbcb5ed119f381ccf","eb754a08204ebcc55544e50fd5570ffe5ca7daef9cd798587ed7186afea636ed","eb9dc3b9b690ddb86c16472aa65f93ab40590abac2762328ea1a47e09874e842","1726ba2d91b32dddb809b4026bad18b454000a0eb97c013f577235bf82edcc26","083aff36769f021735614203f2e9f3e1470a4d42a19a9db1127c970a2152040e","0e94dbeaf5cbab14255f84067d8c12e9606b99addf590a5948c5837410c384b5","f752961a9b7470e3d656b68aed588e605636e427ffb4a28f74067ad3d60b3ca1","dccb3ef893f023e5d3a169a433d7e47473e23751a12ff4650c7265b0155f4c73","7679ef7762a2f2264918aefaef827758b32914a11d7fe90e91135a7bccfb5f67","e914982b1091e825c1b1eed272fcd3bb043d32154d866d3ead686c2cb77bc78a","f46648ad2fd9f2769b9fc0ba1c434d2040de67cbd8b7a61df7b7575cd5a9206a"]
Anchored: 2026-10-13
Public log entry: search.sigstore.dev, log index 3240231023 · entry 108e9186e8c5677ac0ab…
Expected log hash: bc440cd3136178aee800fe49b9cf2e319542a645c9abbb8553c6ae1e354ce201 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1791860805798","kind":"published-quote","locale":"en","page":"theme:dashlane/durability/en","quote":"Don't know how I coped without this!","rating":5,"review_date":"2026-08-14","source":"Apple App Store","source_url":"https://apps.apple.com/gb/app/id517914548?see-all=reviews","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (888a38c73939…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.