Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Easy to use”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
6ace71452380c341e78b9cf7d80d68ca6fc891e516470da6a661442cbe48dae9
Signature (Ed25519, base64)
ysMZUVwXF5wkgcqvlB2suZVJA8KKaVQ5/kTU7HuJEBgRAc2Mi1GUoMzTL8JrqLyZJ5j0bwS+FdLUCAcqDFN0CA==
Merkle root
cc9af896bdf0beb88857e1dcc841c404ccd4c59cbcb6932f17077fc8aa87fc23
Merkle path
["6acd1b614a17ff9299061f0882db2b5fbfa4254fcd98f8f2b5dac67f8ebc0cb3","fd47c582d4bba83bd46afdc2802cf0e0643a49db50eafb6a879d119edf08f60f","06a02b1c422b873e53dfe09b08f775b2d7be7ec04d725ad0bba5200e0c1404b7","99af2e1eab482a05d179b6ae39216d360702f7d813d86c6bcb1fba09ced8c683","3f2cdac4fdf40c9198ea4b8aaf028fb165b0f53206722f5a669032480339a2f8","403980400f649aebb8bd6cf983b6752e0fe62f205fce83d8c9a3c29c294fbc54","d0d6e61f913b22a222e64c54777d6c204801b563218826823705db4543d01b4c","f505717c2b589c35bbae659d1e24911d62b43ab02000095a576ecaca75acea89","f3252d935beab3921e850013e4f43a9c892a4cd6b6363f0f7529131511827606","32c23699fc9f4bde522c7b3ae0bea5dc5d88a5e46dc72c27458444d2313f1e8a","30644cd4d4baf1494f3006f280381dd84f4043211b5ec1d3eadec81cade21db8","d29846d305ca93ba91cb7154854585f35334e65b72562e64a3ca2a46c183180d","58b1aaf4ff68687e7006533ee52afa6414f635ffd828ae73a306f5f050aad891","c7065531c3e7c4c7309e4efe4674330d1f0c5150d728171b8966a352ede62d5a","7e6c62c2991c7cac05134c9f9e2ab89c75f6106f706f524eb2e9fa9f554216f5"]
Anchored
2026-08-21
Public log entry
search.sigstore.dev, log index 2542751096 · entry 108e9186e8c5677aaab3…
Expected log hash
8251ea19feed4cbe325f48ba93f0e47294878633f5d43178e4a3a023547e795b The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787281943761","kind":"published-quote","locale":"en","page":"theme:sunrise/ordering/en","quote":"Easy to use","rating":5,"review_date":"2026-03-30","source":"Apple App Store","source_url":"https://apps.apple.com/ch/app/id1231971182?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (cc9af896bdf0…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.