Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“for me the maps etc the best bit”
Google Play · 4/5 · 2024-12-02

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2525010456

Proof data

Record hash (SHA-256): 96cf31e1cb64250e65bfb81654be8039159a0914899098ee6b58555dc6be8793
Signature (Ed25519, base64): MEjnQ0vbGKjSABb1GAJPnl75rLNICdvjVDqt/63FtUDGMKpCi3wJ5/mrVzyolbUXujBAA5Qs7FKNf5j7lwexDg==
Merkle root: c69b412346f0db8d88aed17dbaf2e4876a3743c1c4d16fb306ba56b5c0573123
Merkle path: ["96ce37194b5cf920b03b211e05b453fee732947a3a4e16b9fcc55ae0724d2526","201609294a9367fd0e19b481dddea96a4e870ab30cc130c2a36cf5c705d51e90","8a80182300055324269f74e2d502d613c7c0421c786f4777a268a4b093382784","64df9aa8686236a8673d1da011988a386ec682c67f2be20e7cce68961555d27b","9e44f7a81fbdaaa8f6bf2a6770ffa0e8a12bfcac70e423d801263422a43e5992","beabc2e80898d8d19256af7a02a1bb30f360711726b2c7d5f8a9376b5c969ffb","4c18deaf65e7ac7383b9b5957595b67069cddb22c43a6189a9160f6385b47260","865f29fb0deb4903bfb4344090093c9261eedf19be4999d7a1e2817457b92c18","4a5323280e4a1cf598760fc525c887747005ce860d2223b96067755da458d8f4","bc1b54970ab728995d0506001fd95962cd4d608276824721cc50e1b9eaaa0053","929645cd09677c554e5b543e683105eb36d7009a4a7d9900d89b6072cea0f90a","36b7770d360bef5ff781248b7c2f4669149b2ee29bbe7068afdb2e4ad881a268","4341c4f2b67c3a260251c46092cd8bbeaf3c104d2225230e74e9d9b745923d73","7374897de84b1f86ca0356b906b6c1bc842b8a45ccf90424df2bccb9b7b03d1b","3da38b679e2392986aef224a332d14750fb3a22c4e75287765e8f68f575f24f3"]
Anchored: 2026-08-20
Public log entry: search.sigstore.dev, log index 2525010456 · entry 108e9186e8c5677a4287…
Expected log hash: 659be4fcc7663b2dc65a53351e16497fea44ed9ec8aef1f3c48c8e452b350dc6 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1787194832011","kind":"published-quote","locale":"en","page":"theme:meteoblue/delivery/en","quote":"for me the maps etc the best bit","rating":4,"review_date":"2024-12-02","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.meteoblue.droid","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (c69b412346f0…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.