Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Ein Muss, wenn Sie bei Infomaniak gehostet werden...”
Google Play · 5/5 · 2024-11-06

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2671265667

Proof data

Record hash (SHA-256): 04a188fa25d81912ef84b1c464405b303240172cdce41d3ca15843edbbdec8d6
Signature (Ed25519, base64): qp2YM9JkiOWhzajzczDmf5+vJO7bDxlKhckT9lz9TkEzWAqH9XncBTCIuiVGILjPC/dN7tc2eyWpTQMvA4FSAw==
Merkle root: 4814209eff208716b4535c2b0fd0b03895bdf3189545e82450cb75591e4887da
Merkle path: ["04982e21f780652b745d5374c33a88a4728a933767c0d966d7a0ade1e6e8f76b","7e0fa275164ce7e7e3decb655fa62409c250aa39e31ad0d50c322f108cd30cf3","8c6071a556ae8a48740d1b5c27f56718f6f72cd3808ef79a929e8d574906299f","4d6c5f8b387bc366c40c47aea374abaab632601f8308d99e46b87d6fc2a846f8","8143e553999d218c3154a75d37f4f8667a99e6198d795818c01c7579992451e1","dcb6b50787289425ee569c33ceb04463684588ac2719974985a3dee4b4e21fff","ce47f1922cb44523bcdcb2ca2f93c1e9bf7576af2c47e77ca070577b62c8820a","cce89b0bbc41134718cc79c9f5e09b5804070f8be9b1568cc46270148b55086a","e222e50efa472fa514c693c8ae2e40c919159237d524695726057c14a2468b17","3193668e0b644ae932911e01445ce319f34e6983973f423e84925f36dc4c2c5e","694748f02b5ff0a65ec47736488587ed6fe852f21476c65c3f4e981efe9c2352","58fc450d8d3ac4da8ac9fcfc859184c101d266d6f35f27c84cc4966e3f248dc4","5ca41ffa95430097818b993a1ba310362a9e5fa81d44bfdc04fd6a5a86897658","4222d4cb0e3cb98443733ef8f53c14d869249278d4ea410003cf03e3a343c09c","12d9d8014c44524a8d93c0e0f1440a3071b98d9de55311024d7d505c5879a63c"]
Anchored: 2026-09-01
Public log entry: search.sigstore.dev, log index 2671265667 · entry 108e9186e8c5677af0ff…
Expected log hash: 0d4aa038b3cd3d7cc8a3744c8157ddb93929116887b29b6be030d34102a7e419 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1788234112368","kind":"published-quote","locale":"de","page":"brand:infomaniak","quote":"Ein Muss, wenn Sie bei Infomaniak gehostet werden...","rating":5,"review_date":"2024-11-06","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.infomaniak.mail","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (4814209eff20…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.