Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“I couldn't get back the remaining money I never used.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
d371321891febd44da97fcc4be9befc90bd65dc7b590c68e360790b10cab7791
Signature (Ed25519, base64)
HDR8xoPo135O0HkPz8wxdn3TRbl9LWsDt7FLuDuTId6u3CDlrT+NfBuegc+Nurh5hLlYDRqpb29cE/mDriSzCQ==
Merkle root
5397210619679ac63434abd334c13f5aaccbd1dd184ad9d8cac5ebeceaa346bd
Merkle path
["d36fa58385f2d55fd6832705aded5472c2ea0f6be5d2a51fa575836c33ad04ed","ff3b21cebab9bb58ac5e14d25b05ecdeb715e41d054fae8452fe729a3bce1d79","045055688c5158b62b8a8a5e798fc2ba66c5303924ea7697ad943390c269b49b","b098f81b8a91dfb7b1ab8d69861ebd4c965cd66ece5b38acd6b2b1bcf143dc93","505f9aa1c6384dbdd94a00061462bbc4bbb688645245302d0173dbcd667ee19f","3745936bc65879bf20672e8c55b7e7e8385314924f7486651098d11042b655d0","2dd7f6b33bf064cd34d14c6c62b836b72f80e1344e8d50dd1ef4751ba969d2f2","deb5f8f630470ffe89c28b325a71e644495e0f2fc2096e57431024b7ae530dc8","c77385e3a5cd809e9e995a3ff29cc93abc07609dc0abeb6a513c8d378d88c6e9","8cc10392dea6fdc84f06a565a855bb3808374cd32f5d905be2f6691dd37f84ba","e608046c9c03d2d0b6ba3982ccabd707eb41cb602007bcc540a3878ee51db3e0","f0bbf34c1dde9d32919100878d63d35b3f578b04c286b3c7e9b27a0d61c8d8bb","06275dc2003d93dff6ae62dae412a16841a241c39c4d4453231315397101e1bd","aaa7b399bae700ce8013bce7d22a5956b227f2e0adcc638da32f9fc5e72da67e","77ebbc5a767f49a9f64068a716a8c843de0ea8d44adc624726bf46e2e415a41e"]
Anchored
2026-09-25
Public log entry
search.sigstore.dev, log index 2948162176 · entry 108e9186e8c5677a61d4…
Expected log hash
5ff8f25b7934b5d72d363d6805344624efba4d637f2c851f11783b259b9d81be The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1790226990092","kind":"published-quote","locale":"en","page":"brand:schulthess","quote":"I couldn't get back the remaining money I never used.","rating":1,"review_date":"2026-03-23","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=ch.schulthess.mobile.android","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (539721061967…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.