Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“I removed my card details and still got money removed from a plan I cancelled”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
824c5947d39ab146a9983877e8a6b2bed26368c2a610cd553e1716981901b69e
Signature (Ed25519, base64)
U1c17NX3yj5cNukI4I1k7XhP3hWZGq9A+/Pq3p8Kg6G1s4+/DSUuu545GqgkeOGklY7D7usQu3H173CVyFBQBg==
Merkle root
aacc11945f125ee3fcdef86ba030016c440bcc608f4e51f0ffffdb4cdc5e9321
Merkle path
["8246fda2a3a96dbfa54f9c32b28701b01a2d0126b2fd5de80288744a3d467374","9d95aabb4f355df34f6716933ee29531100f29b0b0230db7abae1cbb1f72f32f","03a27f3f1540e6decc575cf9fc3a8f4da8c4a147ecad23bc3e12ddb755d06ced","86a0dd8ba1e65eddc56a24f6b3edc8b1312cdc53b7ccec659f69a06556d6fa89","e9d5dbd98d0784f7fe6fc1d26c67ab6acfdba7c041b9cfae474de49c37267d5f","9147806246b63734a497308461e6415ed85c46c2f427b0ba33c5962756b61ffd","26cf9d4ffe04560f28bc280a1b5556e35beb7b63b1fb555ef42f11a3251484cd","78e80e91532d948e37bdd5302b4c9757dbf5ff162d0cf6286a54a6777191302c","6faf2b98d2d7e7135aa4f43166e9d96141b598a34009cb69bd7f6dab52fe1a7b","05bef60a4d4595d601a025907a0dbb73b1a2ea1dc8966d774c01b384cd932e29","fc041ead71fef0bc2893a883948f6402e11845d57fe93ba55b119a3d669e91ef","c071ca25835d116da514aeefaae49356981ea0f894ebd59dd1dcea31dffc4f8e","a67383a47457a5cf1d5e37868e4ed4249ae6b4ada373e7ec00eea3b30391affe","b1c6c1169310bc9b3706487a8b54e13d2c5256c24253b48b4df6440bd230af21","2309962142b16600f7fc4d57273f3042f382acb91be89aac7f00112f61b58f1d"]
Anchored
2026-08-21
Public log entry
search.sigstore.dev, log index 2543547848 · entry 108e9186e8c5677a921a…
Expected log hash
bb93f13ee7a4a636e28586b842e19662b148eb18166a89b3ae7d189bb8e81689 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787286345433","kind":"published-quote","locale":"de","page":"theme:acrobat/billing/de","quote":"I removed my card details and still got money removed from a plan I cancelled","rating":1,"review_date":"2026-04-24","source":"Apple App Store","source_url":"https://apps.apple.com/nz/app/id469337564?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (aacc11945f12…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.