Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Their website and app are very pleasant and easy to use.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 3162767972

Proof data

Record hash (SHA-256)

f55d348e04d8dd37159982239ef8e3ba5622b02c7772e96d9714bdd9e3080670

Signature (Ed25519, base64)

IWkn5Rjd0FnKb4KcmLb7diZvr/4V/SkB2KTsWIxTGT5pygKdv6Fc+2uIe3GfJLzRC9KM4c2YV/ML6ZsrYBgWDw==

Merkle root

ea9653d48be6468e8b38c47d968f49528ccd17e229f6df41b5fdcfc232720ce1

Merkle path

["f55b644a730e7bf4a32bb1ffd426913d7d7407cc1f58e90d1a6c61f220acbcb6","c0ea1a6c96207ebba182367d845bc4ff553333172f528781425a8d936fd19ada","a8bce45c163584c9c6c09fc29a57aabe6ef18e6ae6e84c9ce182afde467f6c4a","ea0a08da3425348631a10f41f6f8984d814c5679a1ce86000ab7580266b9b6b4","80e7b7fb3215a4f900bb5e9972e6d40adebc5b2d1baa25f55773dbeaad9d1c5f","b11884fb108ed8eeba69fc223601694f236d08ba23a9366f7c7c4275530cccd9","9511b1d655b9d8585cadcf855de3b991ebf56210167994cc4368fa28ea0f7145","72e39942a2bc473923683254a0ce7e0f183447a1d9a066329a1aec832c5580a3","272a2812f98be210d43957732db9af8bfce79deb027a2c7c5958a23f3b397ce5","086c43ec0bbaf1ae8d0291a36f72e7174f5b62c0e12453ef07399167e96ad0d4","072c3c46b7973ad77666f6a86ced3f6372a600a9cda42b96733d4d199b55da23","22cbcfdda0e2a7bdda12d09aecf78819554a3c0939a30106d23ce04a9798cf6b","da65588f5f904f5c3f0925768069cf4896f91e5c0347f7ecb812bc9db0f7e0c1"]

Anchored

2026-10-09

Public log entry

search.sigstore.dev, log index 3162767972 · entry 108e9186e8c5677a40b3…

Expected log hash

ea8f60b663262eef5ec0ce5a9fbc0ace913092ea47c37bdc70ac392578ea0c35 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1791541525227","kind":"published-quote","locale":"en","page":"brand:atupri","quote":"Their website and app are very pleasant and easy to use.","rating":5,"review_date":"2025-01-18","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=ch.atupri.myatupri","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (ea9653d48be6…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.