Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“sometimes I get it after having read the email, which is weird”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
047813d8253d807abbd2fa1e49b8e19479d7e3f16aebf8a14f7a872e5afaa963
Signature (Ed25519, base64)
PyNjMRQplg4dqH8WGK86DHSmd0qoLfkgfRpHcYg5LAcy/cMHqEqOvPZkvYy5PQtUpU0HB5N+F/3HHUtag98aDw==
Merkle root
d019a962265fd99700bb41421c12bf721bc431ce9725f4e9d547011775ab56ec
Merkle path
["0476e50617dd90a6716b4ecf7d79d58df90dcc37034bd6365ad08349439656d6","72f6770351051e2a329319fde00d6e09de2cc43cd8c7efa300eaf1c05ffbb309","7ffacce8203e07faba28ddfa53b6658b060b0cab493078cb9c645e4ee0544ffe","eac18a54291609844d84f53bd9a2d6b094143599badde47b40383cb0498c5bbd","b257e61d5c9ae94a212190b1f002bc630542b608d31b6680127f417138f172d6","01042ff1665c64ef852fc5285dcf714d3dd6f3677eb9afd1f829c4913f3c114d","d35dbfc9d0ea84774e72627625021f2e42c556d3ab6c866f84ca96710cf68d98","de4f6f8a106ed30252586ccf531948e183754c60a9e069b476898b1665e2bd57","a32f3bd7a08be680c3312068637c224c694688e97f0bd02b49264c6a651c75a9","919b2fa3eb600beca12650d8fbb3dafd6e0c6ae76b22e7496470406aa3b78637","4cc034251d442e8c2f32660ba00b05d7f7b553c1726d84f939c0940a5d928aec","a3af7151d6a244480abe5bc8ada397c9af55b3431df57672865c450809772fd0","8d7f9bb84a33c413af9063341c8f5160bc8725a67ef59bd2d044580fb9f3155b","65b176b4a433b701cea4a24b83deb2fa9ed09be9f26f9fdaada87e8434a57f00","a28f44db157d986c9333d9e3edce8ce71060ce7f7d8f4bff70f57fc26d48546f"]
Anchored
2026-08-31
Public log entry
search.sigstore.dev, log index 2657725656 · entry 108e9186e8c5677adf65…
Expected log hash
b4666dc064e94c6d0ca3a2e9a0c5f9ff5cb70ce3ce9e0a74343a10c712c15a62 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1788147462663","kind":"published-quote","locale":"en","page":"brand:infomaniak","quote":"sometimes I get it after having read the email, which is weird","rating":4,"review_date":"2026-08-05","source":"Apple App Store","source_url":"https://apps.apple.com/nl/app/id1622596573?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (d019a962265f…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.