Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“You HAVE to have a subscription to listen to any books you've "purchased"”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
646937f75204e240c4a981f2229e60566bf88fc61be79469babbada8606f53a6
Signature (Ed25519, base64)
ScEiE6RvoPQEjJ2qCyCJnxqEItTSbP6G3VE/CZScMSitEvYYZEoKSRBTdQBTLbpc5+sSsiIxo1zhxcXV1WYRCw==
Merkle root
00eb1252356f6576712ea4fb614a5236163b3b1821e2db4cf332fa9ac5a6c4e3
Merkle path
["64760827c1ef17ea6f4c096519ee97f12b1ca962a5481c8f4ce75461e3186c8d","51f8967523ae2f7dc0bdee5c2f8337417ea8e21305a67ea2b1aa42b6fc9042f6","00f8ac10a444e4a51c81bc47b21a615ced94e308e29f6728867ce489d8edc5e8","6ccfe0fcac639c15dcd9127d4d2d471f4b1ce3e3cee5a8a6e11457c7870ccd49","7c4c42581de6af812c234f97e528b15e2197437e03ec369048f7683147ac0260","bf1e5ff23011b4fbb4c04cd467f40c4bc07b1175954ef75dc7cdc5673e729b54","2681f6750688cb1230e1fa4cd90604cc30b3bf7df83b866f2b0805909485f4ad","564b2049f050ba379ba9f0c603b5b28b1c4eb65174ceeb154114a9fc036af2cc","d40816624dbc638c506fe3a1b595ad08be1c68f791b02db8adf26b3683a9380e","e433390c7d1aad4b1d620d71947c11a4f322c1fa91c627b83602bf9ec7dcfdc5","be2dcd8f7ab9ee9e2d3646c5191f0fb06ab5488bf42775fffe0343db9b38bd31","0e10228ae23bc8c393754711640f98777350e061c2936ff191317d3597bfad84","ff1681d6a39d09be2c2e13b7f21da8c4d20785142bba572223fd8a1dde6dcb1b","5dec716281725808bed0364df1f1b242a9cce0f53a1e675331a87d799bcee6c1"]
Anchored
2026-10-11
Public log entry
search.sigstore.dev, log index 3199819547 · entry 108e9186e8c5677a0b40…
Expected log hash
54bf23963e2d2d167d69cc8eefdd91558bbc8835be34c5469b6e0b1af30e4d15 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791691808362","kind":"published-quote","locale":"en","page":"theme:everand/price/en","quote":"You HAVE to have a subscription to listen to any books you've \"purchased\"","rating":1,"review_date":"2026-09-01","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.scribd.app.reader0","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (00eb1252356f…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.