Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“the only bad thing is that they don't sell figurines”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
6faa059388810bc5f18a9dfef6e6a016322ba7fc7c06bed76ee3479476f31647
Signature (Ed25519, base64)
vHyJ4lpbQC0/aovGnk6Lhv+8Rs/LTN1omSV7rUvaO+or9tkoykOpeN2aq+qzxgHpqnFP/P7gJRwyRvHFokAGCw==
Merkle root
6d3f7b9a732acc39631b9b7a5990b6471bf710c9f84e5623c7b4ff4e1ce78326
Merkle path
["6fa845b23a80ff1976d83b3bf4e2ae8ede7dc4f426f90a2cb7511176e2a57d41","769318c8d07f68960b546b4f82e68194eca11552a0c8b33944efb38b045f8c1c","dc12ae40862f2154bd00be18bcbb1a0e69fbabccfebecf201b34050cf4147036","80d9dbe706010868990d87fa57069c3ec16693c2c71a99d5d98567bfb6372e0a","42c01b9950f118854d7763d55fdc93623c16c4ac9841b89d4d9f20cbbc6d5f59","52dd6ee018be85b57c21c57ee17a31a3c42f4f7b690f85b26aab66ac75f69f29","46d20de005b8ed18063974ba4b2e9c564110a4c8d0cb0c4f43226c5fcbd85745","9d9f42d192fda960d4e9f6cb11d5f32f1e686ccce6771024fe025dd6b5b3f248","ec0f89b5180cccec1362db08920191d71754728d134158835c8f28e157bddb5f","78bb1225eb2c030d939f956f8f4132877c2f72c7398acedd956f9509fc953fa6","94ef25e587448b4297c174c00422e0693fe48799207d7650c57529ba6af2d4b2","f093c8b1412e3d74354ea8b22e9fc3c489e9cca32c72cf25d4490d167d893c7c","43e340826c4a804ec6f5908b8b1b615e9056e8f44741be501b225d60c6223909","d55f41ae09ca42c33bbe39db949f63edb982eb2698def5511ce57c4f872a5c0f","6036173d1fecc6618a44f9a6eac2357cbf937f65066abe2621a2b8d1580705f1"]
Anchored
2026-10-07
Public log entry
search.sigstore.dev, log index 3123541116 · entry 108e9186e8c5677ad86d…
Expected log hash
9205615d16e6f0d1c04ec96882a0dde4bf091f63aaa636cea18cbbe885fd5227 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791346951310","kind":"published-quote","locale":"en","page":"brand:rappi","quote":"the only bad thing is that they don't sell figurines","rating":5,"review_date":"2026-06-22","source":"Apple App Store","source_url":"https://apps.apple.com/ar/app/id984044296?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (6d3f7b9a732a…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.