Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“when upgrading to premium it never selects the account with the active subscription”
Google Play · 3/5 · 2025-07-23

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2543547848

Proof data

Record hash (SHA-256): 658b87b43550800415c93de6720cf945fef9a0a14980983c86197df7c630b96d
Signature (Ed25519, base64): LdDCwPTFONW+Q8Sf7oKovkc2B9ItNTH28WenSfFxOTub08bxrLbaad6bBFkkqiWraYlaH3ZmYgBBZYGXg5ENBg==
Merkle root: aacc11945f125ee3fcdef86ba030016c440bcc608f4e51f0ffffdb4cdc5e9321
Merkle path: ["6588834d8c906d8bc399174713088576dd3a0571cd0fd7448975b35ed772fbf8","ca17168539daf9d3a2a875dfa79fd87637fc88a4894c904aef463b31d989eae5","4d143f5dc6a203b9c088a2420e7fa074421ff571e12520155ede29351af269ef","5b3e2f7a94df37d0da1590d0bbe14566318bd83cf48f705d2f9ef775c09fcaa1","7f1c3305cabc4b533e2184acab9cef88c7ac0f58b8ebae24430ffbf3ea9d3723","79c2b155d12458e762d4fbaed273ece0e5b9a69c6078f085d8f2c189929baed4","b66bd018b0af835ff3ba8e5e8a60f34461e48178d07ff3459f04a5c334015db1","d65201294060d7d96204021a9e1d7454b60ffbb082e7c7a0e6963cde5641903c","dab2e89fc4ae2592f48ea1c228714f277c74c2da5c15fb6723b603c29c42a4d5","590b75a206d93de9a03dadcd24e5524db77b67bf901908a5f2523c3b2193a1b6","02a5ea4f3197332385fe41072b523becd1651e68a5ab126f089fa99ed22d0ad9","10417bf8400d993dc5bc51fcb3c27f6a0c34b723944b9a3d537122bb9e0d2970","a67383a47457a5cf1d5e37868e4ed4249ae6b4ada373e7ec00eea3b30391affe","b1c6c1169310bc9b3706487a8b54e13d2c5256c24253b48b4df6440bd230af21","2309962142b16600f7fc4d57273f3042f382acb91be89aac7f00112f61b58f1d"]
Anchored: 2026-08-21
Public log entry: search.sigstore.dev, log index 2543547848 · entry 108e9186e8c5677a921a…
Expected log hash: bb93f13ee7a4a636e28586b842e19662b148eb18166a89b3ae7d189bb8e81689 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1787286345433","kind":"published-quote","locale":"en","page":"theme:meteoblue/ordering/en","quote":"when upgrading to premium it never selects the account with the active subscription","rating":3,"review_date":"2025-07-23","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.meteoblue.droid","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (aacc11945f12…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.