Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“fonctionne parfaitement”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 3081733041

Proof data

Record hash (SHA-256)

06b679d5c1466b4b5ac0c01b7e22e2ca235a9f01a23f4fe9f5d5c8889c66dc1a

Signature (Ed25519, base64)

1YeKADEzKzXvBd/J6kWYfI4VrfJhZqswJnvD8D5c5c8Tr1zuym6iwUBgbUgRZKgdAx0Ir6anJX9gercjUovQCA==

Merkle root

c5671f9a997da9b293a79ebe58b20e4534ae608121169f15a5adc358d42ed147

Merkle path

["06b567805f9f4fbc06c9307a0eadad4c23b71b8bdebf5393b12e62ca5ab1cc65","77cf599de4973bd4544a0f82c356aacd47cf7f03ca38ce0ef9712a3420efa04e","aba53d9c457db034dcfeb37e52a7963eb9b9cc9a6a5f137ea817bc10be24d413","97fa2c35a880dd12b2d5cf9533d1e7ada2f8195c8df61f2f7c7cba146dd38c0f","f557885a96e8060a546344866913c6064af933a5260b36bf99b81e75316d8c9b","0fbe54b178d70f6ddd04113f311578a66dec270ccc6b089a215ffeebae326951","60095e689af4ae8f45ed280003ae120a087dfcb1dc886a032aede844f1e9a1a3","04e8c3c8449e770b8201f5a052781e39e60d855fc24755ee4ea5b001db38ee1b","292098fac1c47a66d15e6fc1b70c23a4b2d48a24b4141c046f37c2c436790ca7","4df7ed288738dd9928be73226debaf4fe10bce2c2e3574f85ab59f0f3da85ef9","3851546574aa9b603695d228b7fcfe41d1a2649175d5eb1216fb429d8134bb38","54f4cb83202898d278318562f48341c91965b584d95a59785bfadff94a5e0312","19d97dbc081f307bd75244cef45421a8b1c07dc408fbaf8bed5376beef01dcd3","ea0f272f47ae04446ca8efff4a132a738536c4448017d0d61c5eeeb962e76e8d","064efe6476d8e8bd839601b3c80763b02793c41f87cba57580faab7c00dda24f"]

Anchored

2026-10-05

Public log entry

search.sigstore.dev, log index 3081733041 · entry 108e9186e8c5677a0bbb…

Expected log hash

88ab7ac46d4614551fa6e665889f054d7592b15d91016a45621b5c46a7ae8e2f The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1791174108170","kind":"published-quote","locale":"fr","page":"theme:infomaniak/quality/fr","quote":"fonctionne parfaitement","rating":5,"review_date":"2026-08-11","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.infomaniak.drive","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (c5671f9a997d…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.