Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“I have paid for the yearly subscription.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
6e73ae04d7c1d5e4b1e8a7a5fccdf3c319e8325d595ea8e66df83913afc1b975
Signature (Ed25519, base64)
4hFPN/c7vhcG0N4VL+dLDg6bYPANBnISrmL+MOkSqC4nN6Yeo6ETSU5aMZZzWKQRIdj/9CvB0BWPG1TY1aHpCg==
Merkle root
1dd7fec10002d9304505761bfad9c0f048c94d1d6a0775b6fc4291f712d4106b
Merkle path
["6e74dbfcfc4cd4dcf3a7e93cf4f9a5302dcd3895a57b0acbe304d60fc5ff0f7f","eb828893bed1291524bdb40068483a13ecbb0e407108fbc795673661a51b6267","a951dd3f989838645f06d2b6a8755cbb303a5210bb6508e4d205cb0ffacef3fe","d51f092bcf85c80478408fb7f056b2c36fa5c380e1f376bd697bd60b65ffa5e9","08d1cb5133a3150e31b0685d7d608ad73ed4216da289610e3f31e64789490403","3ef08f842ad1259a86359d26a505f0fccc93f96293ec9e4ba19e251b7e0e3bc9","09812b74e9d0f92d72e71d62433154eca497cb7e7fad566789f04de2f7551701","1c5f77d5531a836fb39a4f713eb337c639e2e3ad65fe4603f0f67d65622ffba3","c30b46f3cf16b6e9f9fa55df73d22109a8cb6d52f16f473a8a3869fd2968ff2c","50e908e20a4f17eedb5b2538498eb535272f62a8bcf8c5e92de1917b999d029a","77c0128bafbee3d1aedbf84b73b75519a5f01009255b74ad251d3fa3a8d03e94","387150d47bb0c4bfe3e5c0a94c3f02bfd44b2d16e9be4ef7e2284565f7c3de2c","4ae35980c39d5fe55d029f85be00593c03277b5745fae784d4668ab06a3da5e0","446b814589c9564f51a341535d393ad23c1a9958834addb7d5c07c1be092092a","54bbc2d7930ffae8e416e662d825fe408002ca5c9c581c2388ff0eb5a37134ae"]
Anchored
2026-08-19
Public log entry
search.sigstore.dev, log index 2514297706 · entry 108e9186e8c5677ab801…
Expected log hash
861cb9c1424d2f408888a591a8305206c340f8249f4a4581b32f940ce8815405 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787126020727","kind":"published-quote","locale":"en","page":"theme:meteoblue/service/en","quote":"I have paid for the yearly subscription.","rating":5,"review_date":"2024-10-30","source":"Apple App Store","source_url":"https://apps.apple.com/ca/app/id994459137?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (1dd7fec10002…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.