Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Use the money you have on the Play Store to resubscribe.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 3140838741

Proof data

Record hash (SHA-256)

a6084d28c2678944706cadbbac85ec52190951e9f044d4d03211ef8ca5988bcb

Signature (Ed25519, base64)

HuOkdOiVYEQKgSFKIVTcxWpwCcY2iER3v0CB8zDv4AHok9Q+YwODpSmrHEGvE048+LwoZlEh2efi72KQRZr2AA==

Merkle root

68ee5f8618d9ce1aa33f2cb5b6f3145b5f909a3c35a03ccc3d10e979b2f81082

Merkle path

["a60ada493b1ec1f70477837bf2b35b4ce520e372c73e12806bf3189fd6195348","404953e88f445326c25d62edf5d10028d737b96d3f99f583c18c7be6b125e55f","88d7bbad75417fa0547e60a25025f938d6fa2968a67ebf27110eb605f286ef76","75c76e00bd4712bf713f7def93c18bc27435c01f59d80d69156c7ec152b3d0f1","679596d43ccb469521e962601735de4997c3801f571291c7b3ffa6d1f6f7cb74","f2ab1a3727231d5ce3519337bee8e072f33c28d2d93fa30ef2adec4a90d01795","216d872fcb613463ac444bc52be768fad98614a3c2e3d86999b53bc7f8e5701f","61318b8affdf919f73924b9abc9749b1e73c28a62615bc92c30b3a144f12f65d","a93156169c9025981f20f99b9a81bbb02462a1c3b3492540d4a2015d48ed2a69","d3cc621448b7423a12768ea4f6c3a2b84e4f57ecb8822cad5f71c97fa8b8fbea","44bc71785ae9a7465454a9b35ade93ddc4b02f1f42cfba699a5d98c19daf323c","d308ed26aa33e6583b9c3bffee658c14c60f68a86ba341920aec69f22e129000","6a51893e356f5237142345fbb4d247bc07582fec6fdaa61c2c3de34a1617528a","d4477c34f5adddf1a37719c473b5e22e5d24c5bd237b4d0a607b953cc77a4964","418554fa0ebde54d6cdcc03145c7126505ed96d3734e8e7ae56dc0dfd8ca0a2e"]

Anchored

2026-10-08

Public log entry

search.sigstore.dev, log index 3140838741 · entry 108e9186e8c5677a4791…

Expected log hash

ca4949400cf2d29b49789563ea2e672fc73762380548d6fd65398e40c0d98728 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1791433229105","kind":"published-quote","locale":"en","page":"brand:deezer","quote":"Use the money you have on the Play Store to resubscribe.","rating":4,"review_date":"2026-06-29","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=deezer.android.app","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (68ee5f8618d9…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.