Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“the initiatives that help charities”
Google Play · 5/5 · 2024-12-18

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 3139760477

Proof data

Record hash (SHA-256): cababe71836b3405dd465f145e2aea95ffd6f0583b9bf29a80c071688bfb69f3
Signature (Ed25519, base64): XKPyeGKgHkxK47wt+2m8t4T3vY2eZkjp4uPkUKoMH3DTW4Djb/oVF5QH6akPkB6JiHFAWBhAed3TKVvwZ4sPAA==
Merkle root: 49133e6803d24035baa1544a5c730db93dbaf832df48f680ca855944337404a2
Merkle path: ["cabaf2bb2250d5f09fbd92962aa0d2f0353c5a1fd4e8755e9d7cbc2324999fed","e9d7c273a4672e4401d6de9ffcbe332de6d5114d0a8c8bc6539c3112301bbc45","edfbf0d93ea9f3894e5a038b470dbd497395dac01104ff8867b9c33daec31e1b","30b0cab13967b0d55d040e6466506c057b1a736c125f300fbc4bb0186424c8ea","f035cfd3b26f9c9ba8ca059db6ce727975be7bb6940fb9665a856af04a099f72","c0aabe6aa7cc7b18d6c3655e12fba654636e172a69bc51a09865003d5a73e8cc","381a6b452048f2ac0578435549baebd29d325e8ad39c835d254f341201160ed2","33331718480f30d18a1ce6b165776c047b4db4d39430650fdf8eec08b38551ce","c52e8d11dfeca4b71f3b6feab428c2da01d597c88fd1d5b652eb405c487c1bb0","a8b8a1bdc1b533712bc6e87294df1082823fa2fb0ca49fd67f042d83371e2f79","484d5d8353e46708d70f22faf61b15eb5ca82faa50b0aececab10f9019e7d936","7924bec904b85c9f773d214a0a251d8b0a1110aa9f6113d6f6558b4ac58ea7e7","573e30281798543ac2707059ca3c966f21958c0a972fe6cdc3a54117b3829e49","1fef2eea1ba7233240a645d2d99dcdcc4e3841bf30f06929c9f12592e46a0c14"]
Anchored: 2026-10-08
Public log entry: search.sigstore.dev, log index 3139760477 · entry 108e9186e8c5677ac88a…
Expected log hash: d54b6e5e20903e9be29e6a5973227ee9b3dbe61bdc0fa6481a5788472cd5976c The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1791428432986","kind":"published-quote","locale":"en","page":"brand:uairango","quote":"the initiatives that help charities","rating":5,"review_date":"2024-12-18","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.uairango","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (49133e6803d2…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.