Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“the ads are not too intrusive :)”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
eb68e57884ee6801dbe0b50996519b119884a78f774d90a8c1977b5bfd4d0ab4
Signature (Ed25519, base64)
JfNoe+HSVFMP+fYYkb0gJZq3yT3Mv/5YdzSvy7cmcc0ZYwlg2mWbt/JqGwUme/Chymqcna4BnlSUG7MG53UKAA==
Merkle root
c35385e3159410853b606ace3c93abcb561dc35874bbfae2272c5b0050f06a48
Merkle path
["eb61e9d8ffe9bcda4e78f7ecec2bfb928aca41b67bbe4ccde3d850dbcb7895c9","db6697f9f3a4a7c86922dd70ecc51ef05f2f1d58a5eaeae7d5950a2dc1c2ea28","c52850de1d79d1a6e378360ffb1f278f10ff3d859b0336686997bd666adc5c94","be1c27ecb31d22afaf18e8261959ac72da0bf400e124c23a2d9a96a556ad8e00","3d9381953e7c8da89ca29918a160260e744b23b25570204bf2968bd867083dc5","5cf8b07d70e9df3e849117fa71f99ce3ebb420f6bcd54f9f9e4b986af5be3b46","5829af989e09dcb40efdcbca5fde89bb5dae8d053668e95acde4980dfb7f7fc0","a7bc43845504c7a66beb448b5197f486f81f2f5f8db64b9e2cc080dc44f2b3cb","561ba771a39a0ad0baf3b278e128a14b2987eb4d9709abf85b4a1c7b08b0e947","0c1fa856f4ee20832e2463f2fd680640101895c0fc8b8a135415c841dca42926","04a24d97410edeb9bc5578d3c81dc4ac1ad76170426edb2556bbd64f2393d76b","f6736a9df340369491122dc83cdbe986eab98696122bad100ccfd05288b49a1e","c6a0d5b9a6cd8badcfc7fc966f87c537da74da6d7b76d14d1aef5f5ac379b21c"]
Anchored
2026-08-19
Public log entry
search.sigstore.dev, log index 2514083622 · entry 108e9186e8c5677a81ef…
Expected log hash
eb47f42546fcc705387579993679cd6250c0b995d01bbd10805cb4c8d66efe2c The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787123762743","kind":"published-quote","locale":"en","page":"theme:meteoblue/communication/en","quote":"the ads are not too intrusive :)","rating":5,"review_date":"2026-07-12","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.meteoblue.droid","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (c35385e31594…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.