Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“I particularly liked the fast payout.”
Google Play · 5/5 · 2026-09-14

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2948162176

Proof data

Record hash (SHA-256): ed3b7953d14c5144e990ed0813083d945caf95a9e664acfd97b2920104f9abd5
Signature (Ed25519, base64): 7ZalImt5pCfnZbnnJkpFEVj8OfTtMk8Fm0rGOyPNwjsJdjWOgc7/O4xpndHg6v7R5jDhVCPb3b9AP+P9FHmFDQ==
Merkle root: 5397210619679ac63434abd334c13f5aaccbd1dd184ad9d8cac5ebeceaa346bd
Merkle path: ["ed3cf40c45fc9e07b4ab9858e8faeb5b03eb0b3030c016f4d08c06cae35283f7","cf407a9103fa51535fd06b4da515c1de0b03160698849e029f5cfbeff49bf3a4","6e090b4be2245c7953cd97c6987705d66a053dd4884ea667028d317aa050390b","33a776dba067140c1140a7078664df43fbf444e7c0d162825fcb989164afa724","286a93d0c298cfa96f7349ecac0e8512ce76c3da9504012bcdec4f57e33c2b20","18ac510915b3e7281834fa5771a994ef40184ee3e4dfea00cbf9bb8572ea74e1","7b8db463eaacfbd0105fd1527493fcbf2206fd15eee486725f518c361257868a","befe5d63cdbd2dbea50164635508208e760746c00d96b1156237b9f376938eb8","5fe3f1881a6ff0eaaaabcbf6d98204c7ef287673f36bb5094129ea0b57304100","f8234ba771f3db3a4cfe5e767cf54133ad7b47b59b4c56bda854a13ec08fec4c","2a8f0b0b95bd86a288df50f77dcfad4982fa6950e7aa200590b1675cbbee4129","dba69485f1d01b1a1a0b025a8d16147fd90f9473b16d200f26c0a34e7aba2d46","82803ae7220a028dcdfe85032be69ef5f73bd7602fcbe12652ec0c9b240ad883","aaa7b399bae700ce8013bce7d22a5956b227f2e0adcc638da32f9fc5e72da67e","77ebbc5a767f49a9f64068a716a8c843de0ea8d44adc624726bf46e2e415a41e"]
Anchored: 2026-09-25
Public log entry: search.sigstore.dev, log index 2948162176 · entry 108e9186e8c5677a61d4…
Expected log hash: 5ff8f25b7934b5d72d363d6805344624efba4d637f2c851f11783b259b9d81be The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1790226990092","kind":"published-quote","locale":"en","page":"theme:zasta/delivery/en","quote":"I particularly liked the fast payout.","rating":5,"review_date":"2026-09-14","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=de.zasta.app","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (539721061967…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.