Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“it did not say you have to pay?”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
aa6d1b0d61c89ed2dcf565f37ad2e073bbaf948e2fff32af77db86a762702235
Signature (Ed25519, base64)
tGF0NTPfkQ9Y3L1pnsVVBf3TOG0FILMtgFq58gFCD5/s4dGW1vNqHkXp32Py1QX9ULx9givOKpE+9QNBxVKeBA==
Merkle root
f8b4f722de05d6805a889681c3818dbde0f5141f0c8463f2762c4a9a02d66a2e
Merkle path
["aa6d5dd495e5b2e91c8aa1efaa64ae573337f120928cbe16cccd25b1a356844e","a24dd2a4d365556a1cff8062abcb187ce79dd33f8bc0f5dfb2e89fbb2675ab3f","cc3b66edccd0b0cd96f43e1620c4b056c94f6dc40750dc262e406708b4d96aaa","4289737b446426af97f3cb5de73a821bd79a6f5cdca80bd15c4628e99d199745","0be65bc04a90b00452013f11b38bef35f2de7e3eabf14a51772bb9420384a680","f870934ac976bf89318770b6957ea9357f9fa3fd0c2e05698cdccbe12b446eb0","c7033ea185b01ba94f3fed41993bc8a19afe08ab89f01a11f10a65ed10acf1e7","775768d4a7ea3c638bd35bf90fcf4b7dc0c4c9721238737831c87dde71ddb7be","74be0b7d194dc2c52b64b8529c4e9ddbd6a65c0b02ceddf80a31036c1cd4b448","5986857ded90ea2591d16fa8ed3172e4dfe5bbf981611b4c45fd6f4362d7ebf5","67f529ca9d484e5dbf8aabc568cc18aa536afacde7f8763d425abdc8eb214966","5e15b2c57c98171725b1d5e5501c981c9d548e4b92ac52ba348a7e87503a6b7f","8dea7125fe567e6fbd7152c384a37171427f5ea13e8e7b87140b852c2534de84","d5d0d1ff272e71289363999b30e05e232e422b6802e1ac3145abd5303dfd3ccf","1d6688e1c2658422e04ab99dfb5c8345ecb419dd1f8c6994b4040572f5b4ee4d"]
Anchored
2026-08-20
Public log entry
search.sigstore.dev, log index 2524422814 · entry 108e9186e8c5677a9741…
Expected log hash
e042bf60ab37eb8951abb7a408cc8c7483ec875b9606253deec7a67967130ae2 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787192294432","kind":"published-quote","locale":"de","page":"theme:storytel/communication/de","quote":"it did not say you have to pay?","rating":2,"review_date":"2024-12-21","source":"Apple App Store","source_url":"https://apps.apple.com/us/app/id1608097488?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (f8b4f722de05…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.