Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Très cher.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
05f0045c7f84add2d80fd7bef23c06b7aef5f3479c358dfbda46cf8da878cf97
Signature (Ed25519, base64)
HB6+UZIWhLfNA73CcZX2iXu/yLyMtrds6e9LB1WY9hP0J2cCR12xXZVKn6I0NQh3QQ2Sqsu/iUH5uTMdsNCjCA==
Merkle root
6eb5f0de999e332d4ff1f5a17c7cbc64ff4572acff20a9a333a7379bc9cd8f77
Merkle path
["05f146ad4f44057585c3bd7c92c80b27f46e58ebdff064e513655a89dd9c2e80","4f94a99614673da54b505637ec6b6a51c50c5a60a204fe1b7c645cac23cd1871","cd48078be5554768f5d249bcef2624754c922aed7bd085f3ef8976e6195c0253","6276be603e79beccd87060c2c79a23b1444547ecec25262e59257d85a487d79d","be6bcbb8e82ad89d3d822d4341ddd9e0c62d4dee144568a508283b1820c99424","576e88debb8da377f3860b1ccf7efdc4a352d804cfd81a123a475913caf52495","210d7ffaf0a1560757ba80c7b13e9a75339d7d6e332f6b1024c276389a927f28","dc750d37b3504ccafc665960f467d714424d22b5d8c2bd2073e6863a64a9b4e8","ed7c50f681b994c7841c8a74827d796851dc69474c3eec1b002e7829ebde4d8c","d64ecc437a4a54c6eefb2342cf15a665ae87c40dfbd2e9c54a89ce59199f077c","459c90cc02e827d77bfaed57f24d6ba9fa7961034624dc169138e20281eec11d","9337e940b7f8709548c4fe6a97db0e6d1456cbc8d635ace7649844bd1ab52675","84fafb1938dc12085d21bc69181bbfe988045a5a52e2d14f590f330785efc31d","3636da53ddee26549db9323e33a1dcd5168c1910fb5b849a7eaca6270f850dfb","f4ae9615440dda9b622f189073164d60d1c018e361cea2376abc66c14ec3a790"]
Anchored
2026-08-25
Public log entry
search.sigstore.dev, log index 2582664613 · entry 108e9186e8c5677a71d5…
Expected log hash
8093bd44cdbad53d6d80012df9deb710fa18f2cfeb1b8cd0e55864446ecfd9f2 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787630263994","kind":"published-quote","locale":"fr","page":"brand:smallpdf","quote":"Très cher.","rating":1,"review_date":"2025-01-31","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.smallpdf.app.android","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (6eb5f0de999e…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.