Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Application facile à utiliser,”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
04e8d5392299c3ff802de8019c98a756f07ec3511a64171edbf740a39e5ea5c3
Signature (Ed25519, base64)
yMIUNZ7MULsYhyEoHQMl8CoqdO2xXinIvD+J9Xz9/48ZuZ1R7/ZHLXKmn6XtAAgjqEruZwNCGPoed4C4inO0Bg==
Merkle root
f2dea3193623a59d18b4d230cf1484689c024b05d34648a4bedfef78c47360d2
Merkle path
["04e8d821eab58b0d5d51a070edc780a792d1d5c25b95cb2b471ee82d17f0d0bf","c28dcb5fa32eaa10f93e84ee05e735349c3fea3ebda01a6c29cfc6ef104bc05e","fed813bb8edc1c8afee866e11e490d9c86cc2a50946de9a12578ce59b771a736","96dccfeda04a0e22740584c14deeeb013569235ffc06602fe3a336208fcbecc9","0f371582027c0ed2bec679e539040679336f29d8c9e07081b66636bae403764a","09a4a02f9629150b8e5e1119360770efbc11c0e10c014cee4ff313a8d169c38c","2a6bf8cb98fde7aba3777a2943638e05f6308d16f484be7324590a25178f5913","01feda1ecff82921245bd142f32c5174d449cdf09be2aa7900dffc92d3997d10","4bf1f53c81d5ae69a6549115b1b99c26071b7d20b488d00254b26bca7ba802af","339d6bc18dae6a179315d72a6e3b89537448bb1c3d755c52997f711de0e76b59","a784e4c17c7f10f199fd326ebef48c726097111074dd9b5cfa4778f2f23d2e21","5158ec91e504c8c30795d08c4d021440e70160b6a0deb587c5682e7249258bff","665774a1192b73721b453ccc4135f39652e90d0c548e0465aa1a009bf210f3d7","c3040d35b4a41a3d91fd7f6d8e1e6868620c896bd0ae8d09b1351d70693bef08","658fda4333b0a975ae51c0ef52c37c157029d897878579fb5ff3ac48198b1bf3"]
Anchored
2026-10-09
Public log entry
search.sigstore.dev, log index 3163461995 · entry 108e9186e8c5677acea0…
Expected log hash
1e385e1035f15f3dbe860bb8f3e4e850b8c2ce2b31edb58c97be626995a4adf2 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791544610158","kind":"published-quote","locale":"fr","page":"brand:findependent","quote":"Application facile à utiliser,","rating":5,"review_date":"2024-12-28","source":"Apple App Store","source_url":"https://apps.apple.com/ch/app/id1510962836?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (f2dea3193623…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.