Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Great value for money”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
6b9f781b3ad6a277d46336afccde7546e885cd3456011caf34aba3a019e94948
Signature (Ed25519, base64)
DVqZyAd4hRchgInTNdMmH+8fecUtYwLAnMG3WzrZNeqNsAEWw96rXhXFrPpehiebtDS8FhcsLlhSNXbUkjm4BQ==
Merkle root
677e672fa444dfe5152ab91687c577772e13723ca441b5c8063508daedacfe44
Merkle path
["6b9c12150cddaaf64011b02eb5f8891d07961c6160f243f4b2af20f6e3c4d5e4","2df0e5fe6c7459a62c8c59b7b240f94bf90da796bb5970a4cce9de6c210c458b","afc03bae9f8ee2e7d8aaef33f86006daf8c9e0fb251883affd4b5ca383cf1a5b","98d62a41bfe90b1ead9eb534635a0fb7eaad2dd9afd2dd4d5b91eab3e4f069ae","52c1411a92020dc02089caf8b3b021e388827b24e8901831864b7a8cc3b1e8e6","d7c44f7a10dbd0c6644e55da2eca2634fdc0c96a76dbbfb8b7a8d023346b6b74","b0231e97e73fa92abee9ea7d714c3a464244fed720943a28e1d2d272dbcda7cf","d9d12242c365ea6a0bbf81f83424b8ffcb718d3c36732d67308546b4382715b4","283d597479df383a526b114c994550f12a7d0f44a75f91e9ca2bf8b119e0e089","e96cc0af49d10bd53111258cd5cb5ea88f0921e1b9c5b4860ab9a3fda7d07c2a","e61cdeb1de9f049214c04fac876c1ef339febc77974506cfef3a94c1d190da51","5999ce9331a3d3c3b42ff68c7d0c3b2938b4aad17e69c094bbaa432c5034da76","ef65dd9ebfc0d3ef62099f320670e0ff1ffa0aefd392ab7dbd6c1c6483d33d7b","3e9df542f4415cfb7321e531014c29668083cb06fd7805d6083ebd6b24fa289f","188420cfe03d9830600dc87f84622c41659cea53d9b8db8954bfc926ce1d4dac"]
Anchored
2026-08-19
Public log entry
search.sigstore.dev, log index 2514013184 · entry 108e9186e8c5677a6b00…
Expected log hash
a596e5a342226b61371cdf76b5c8be8e37a3d00e7ffe8f7b0b550e1a8d1459dd The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787122978040","kind":"published-quote","locale":"en","page":"theme:meteoblue/price/en","quote":"Great value for money","rating":5,"review_date":"2026-05-08","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.meteoblue.droid","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (677e672fa444…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.