Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Le téléchargement prend une éternité.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
04538399f2da943fd85858853f44212dc9393b74dcedb9512d2310b1ddc58381
Signature (Ed25519, base64)
kCGP2eSNB/wpM6taE1V0otV2R07yPk8frPZCpvbwVIdUJcDSyORxQ0tGJRhqz4oT6DAtDbRbky8A06SZUtrZDg==
Merkle root
4900b1080bdcd3b4c9234f01647614e7004e0a1ae01ead44968e31abeab33265
Merkle path
["044b98303c6f2cd1ae6cbd76fde4b650e9bc97c68bb86ce91c37b8f2a1bc6e54","4616d7b311b081471be2e4e1cd4068df20fcedbfa80fc08cbf27ec941b9ca3ab","5b5f2ca76c465e075a5642f0d8ba42ea65e8241ea2e0b15923f7eda227cbcea5","a5b0f49b2ea81c3b44d73346e3ef3fbcfb277ae64f142c7072fe77bb62c05b69","f4007b003262c21599f61a3d711ccf94340f80eca9c76090e66c7109fa6c9388","00b9557b9cc59d7bae1455bfd8d3bd0b4f43c38df9fd2e756b8219374500bd2b","217edf82df30216ae4781f7519388ba0f1b02c91a42840d3c72b2a3e32ba9e9a","a2c0ea7313cfeb0473bfa3ea785e576a6a983b5a356b2d502e4b9285d53885e4","93f38bccfbc35903f8a5db822e7cceaf1c6d39e49c23a2a4efe22d25717b2854","1243a3e70d03030a37c17aad9a1eb5ca4bf79fe7970971d33460f567a94dbc5b","5eea0c065cc9023d7325f7537d5b56f514ab1dc88622b30c5c8dec5113ed99f8","4f4d0831440aadf9cdde8508ea8672cceb008a30da8e04261a55c46ea8a8ea6b","acc667d852c71a0e84a086ab20f7bbad3d8ae083a1e44cd20501ad641f662bdf","0a4842003c61f69c5923b6aafd56426e7fe934e483f7d15b620c07fa61f89152"]
Anchored
2026-10-13
Public log entry
search.sigstore.dev, log index 3241341297 · entry 108e9186e8c5677a0e53…
Expected log hash
39342fbb95f8cce5be4111719e5450984494edcdff99b8bd9a5c0d2303b67943 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791866192176","kind":"published-quote","locale":"fr","page":"brand:cewe","quote":"Le téléchargement prend une éternité.","rating":1,"review_date":"2026-07-29","source":"Apple App Store","source_url":"https://apps.apple.com/de/app/id923535970?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (4900b1080bdc…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.