Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“you can subscribe but can’t unsubscribe in app”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
627a1da7e90ec2007c1f00d91254368cd1e352ba45f5cdaf22c7bb798a6f35be
Signature (Ed25519, base64)
Sq6BUlqElZ3UbMT90KuDkPIq8IiKdJnqRsL5mPr6GOHP7lWJj5NUiAXUtmZNqP1rDf+9x7nBPFqM1Z0M+KJUAA==
Merkle root
cee60bb6c0816d1bc69326ea12cf0c5c00cbea13afa283147bf24b52e30f839c
Merkle path
["6277c2343a68d5566274a510a65b401e1bc2e6eb9ef1c39745a63383c4e0291a","133ee4b74248e18f10a8c74090bf81b2d2f5c24e0e6bec7549213cc87c26868e","3e2976c2a843d28719c2ddafed17a11e09dc41ebf72bbe0b019269af1eb982d1","de535f9dbe7ce1d94f322ad84ba85b48617bcff31b6390287976517f2a15ad74","d47f6617268e1cd3b32f1e0a8f8fb90e54a6a19b1a3e21b71647f0d42f5058e1","8b23eb77a0de55d70c1727f10ba65a5a431b8d9c4eecd58e08c52c4dc32d06c5","d1eb73b42451ce200c56a2fd66866969c13c88cb474ad5f5b4f1bce1d14a6f35","f3563a92756cd11fed8bd87e7835f985329ee892649443a89dfae9689676fc9d","271fdb929477e1cfd032b75cd82e7117a8da67a45b3771e3c4a712d1ccde657a","ae46da41d8232b2c1bbcc7e17eda525fea0cbfb3ba77565d7b147d941dc0de24","6ec978fdbb28b7fcbe2a8155aa39f9d781d78a1c71cfd42d2e9fff81bbf76f17","711d07ca65c839c1022a6fcaea6225dbd1f069a43536a742a3e430e1be07dede","78c0401d7b513e155708f2181665b03a093a6cddbc8233872a0fe76421b285c1","806b2b46dda360b28a8a38da683f56d42f23ab9c4a7b2fa07453f271a33f5ff0","57e3801fc0af4bd2492130e334ef2d0425fdcd10c95109df38ad0d371e279fbf"]
Anchored
2026-08-21
Public log entry
search.sigstore.dev, log index 2543857133 · entry 108e9186e8c5677a5231…
Expected log hash
d8e1ac8b740526c2915424d7f7c6bce881a4ef05d0a3a3dbd88e4c760e36623e The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787288037224","kind":"published-quote","locale":"de","page":"theme:storytel/ordering/de","quote":"you can subscribe but can’t unsubscribe in app","rating":1,"review_date":"2026-05-11","source":"Apple App Store","source_url":"https://apps.apple.com/pl/app/id348177651?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (cee60bb6c081…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.