Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“What I particularly like is the support to help understand the various symbols used.”
Google Play · 5/5 · 2026-08-15

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2514130917

Proof data

Record hash (SHA-256): f5581c30adbbe49e3a783fd933327b8b2fc1e01452a4a34920b9d27630b9ad49
Signature (Ed25519, base64): 8dNAMclPa3pqYzU8ABjnCY9qKkNwCeADTK9gkZafGpjmCxkxpXedBKotAHfwoKxw2+tofk02buJQQlYv+LAeDg==
Merkle root: 72711ef72b8a7ab084630b9628ceb2defcf0aae546304d44ed173db57929457f
Merkle path: ["f557f8c85548018c8a7692a5dc60aeb8cfaee8ade3a83dc084f2bd57576afccc","b3405e2e663661d6c78d070f07f3016160452a981ac7b921423d62ca012d3b8c","98b6e4e43ee56126f9a4bcb3214d1103b680034de3ae5807d0e5428c39e2b5ee","32f51e3cbb90d2785db0cfe48d354b125bf1a3690436b325088d1c8c07c1ac5a","d10d6160a371ed121f0160a5614aed6c85b11163c48e2736759370732dddf022","47755266fb7dff71c9dc18c48deec709a02a4ed429dc9742d03c960bdda39e66","50664dc5fc46640ac1067a434d62df4eb72af677c924c02c0b7c1642ca0daa34","a02215b28afc7fce85da9470ec91cea69928009b6bc4a85fad64efa35a4d522f","1a3f45194505c6e22ce74122b7c9fa8d4c508046f964927ebcee59691e6c7832","0262e92d41da1ef47d34ceb479ec0e6bce3619a0e413e4134d0fb2b080555a70","5ba311f83520d0d82cb73e21f336def9ce063e21a31df858c4a54248d105d32b","eafe311a71a1838ff3b1485f258dcf82b745ff01c6ced274f8d1b0da75f41fe6","03f0d2dafec654000c7e5c6011a64b6127ea86884de5baaa1829908da41e288a"]
Anchored: 2026-08-19
Public log entry: search.sigstore.dev, log index 2514130917 · entry 108e9186e8c5677a3273…
Expected log hash: 65ba51eff926c65ed0ce093a942d84c628d811a59302f32867c6589627e47792 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1787124488047","kind":"published-quote","locale":"en","page":"brand:meteoblue","quote":"What I particularly like is the support to help understand the various symbols used.","rating":5,"review_date":"2026-08-15","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.meteoblue.droid","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (72711ef72b8a…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.