Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“the new ones doesn't update automatically”
Google Play · 2/5 · 2025-03-09

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2542879916

Proof data

Record hash (SHA-256): cc9b9f93a58e5c3947947d122996e2f861c77ddadcda2b16869cf5c2e1caa665
Signature (Ed25519, base64): obHYQo/gGHyyEC8JmqObUMPn10ptGg4o13HrY7GRkfhfIZqMUf4uSm70MDITlis5ZVwKCCxY285k92KeJh4WCw==
Merkle root: 681242bb8cfa94d3b60cc06de1bbe3e5e124dc1675276b11df0aaabc9faee58c
Merkle path: ["cc9a682f4a67b0169bbee2f1b8175a6e583cba891ababf458b04bd5d8054a599","6f7151bf0620ac89a793cabd8c9515c922775719bf2730d12356423e99e202e1","9472a8228545116e6226f53ecab38c934cc25a392f76c8722b1686410849d141","75c7565b42bda54707e0b0241ba2997c8fcf2055b4aa10a95c43d78be50f49ac","43e97b948706e3d45ebee5c4fca4179808757322172bb887a659b0c6ccc4e577","44d86d58d794a124757bff4e56ad797a6215fcd8a93750709db1f644b0b091ea","6371412e5850d457dc0228d6ceaab995c44ee1cda9bf0699b3c3955372ad6686","71ca0539152f6713e739b3b4f2b38fd16f94466a3c24c4a497db6f34b9047e49","047095696c3a3f1a2fd5730a31064fb1af93bf80dfc2863e352fce88bfe3b56d","cfd98773877f6e75676403697929696422964e83069be94dff557adb5a3de4f6","33a03c44df93dd5d2a7ca1ef665c73d80f34f88bbc1062e69db5bf8d3344c21f","e12ef97b7c4f78055152f1538ae110e41d234c19d45ae218cd437a12b79c3d72","2e86d3fb14a64b45a2a5c3c87d2506bd32ec38d911482848308828159d2d2c9b","0931601ab88b17ced10d210b73b69d45855330e2f7d04827af69758de2cb8cd3"]
Anchored: 2026-08-21
Public log entry: search.sigstore.dev, log index 2542879916 · entry 108e9186e8c5677a2329…
Expected log hash: 8337812f20bf1207a3c96eed87ab975d7e92ac1421dcded24507b32e456b788f The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1787282728402","kind":"published-quote","locale":"en","page":"theme:meteoblue/durability/en","quote":"the new ones doesn't update automatically","rating":2,"review_date":"2025-03-09","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.meteoblue.droid","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (681242bb8cfa…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.