Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“when I do a manual update, it doesn't update 4 of out of 5 times claiming no Internet”
Google Play · 2/5 · 2025-03-09

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2515033577

Proof data

Record hash (SHA-256): ce05899f0333cf4d9442917418f9c9ec19fa25657e0dc15383e8eb93a9a559fd
Signature (Ed25519, base64): UUJ/u4Y1qfCsk7CD1m+d8vn0Ejj4GLHvbpcaD2jmiihKw0xAmxrzDnjDmORxUiS9aQOjIqsY6/AQ+UvaAYa3Bg==
Merkle root: 62390602d5b1801b2c96dd61074fd5810278db65461e368ee19c9bb147d249dc
Merkle path: ["ce039bacf72e096f5b409923f61403cdc8ce903b4565be0b157608f8e03f26d4","4b12300ce9a13331d9595ff5a35e8c997f2e900d0566e8301b13fd12f52a4264","ab04f571fd6a988835e16ffe065f04eda2ceaf46471a2515b43972682f133565","f9f48393453de10417a3a313e2517182f5583b70d60dca72e95719ac21fa794f","503d44d79348a40150557ac2d65b720c34f1a122da48f0abf33d80250c5355e9","3aa43484f4853779cd85404b70aba532a98b3420fb2f4f014054ef951a190252","46bff57b7f480771075e27de217d850d75af69a18b9246edd7c67a863aaa8c7e","d8507c1dc7609134780d00eab20962d4b60701880e3e0abdddc4b1919ad44c85","b53b315cdb48853b3dec438eb865bef72409f0bd5ce812ae54a47ae227d84931","9a9250f3ffb99ac34fe2cf6f81abc39060a6f48d92af0b81c3b85065445c5e1b","f14c4110bf78c43e6c3b438d9a8793ebfc2fa5e56ac7a9879993f22093908793","fb3007124173be350d2ad4c4ed2908b9fe887cf6506b1bc05ada5b1cb3e1b920","6c3913e58f4e7f6cf5872bf813989ccb25d5c0a5f13da1ada3a8c9de623251ba","17e33114dc02b67ed59a752ab775223f702cdee87d0b28082386d0d64e98d9fd"]
Anchored: 2026-08-19
Public log entry: search.sigstore.dev, log index 2515033577 · entry 108e9186e8c5677aaea6…
Expected log hash: 458ac564101d02a2c8a5f98465ce4e920300682f0855e017234ab870c48a16cf The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1787135948936","kind":"published-quote","locale":"en","page":"theme:meteoblue/durability/en","quote":"when I do a manual update, it doesn't update 4 of out of 5 times claiming no Internet","rating":2,"review_date":"2025-03-09","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.meteoblue.droid","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (62390602d5b1…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.