Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Super easy and fast”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
0715bbffc7db0c72e60021c8c5baede42fdad929aeb30d86006f769425bfd69d
Signature (Ed25519, base64)
cKEp9Cucvo/BSzTvy/pXjaVRRywzA7WhAnNJK0t6S4cRmhS+//cOFKawFp/uIHarlbHcLEV5v03VM3QTvpt4Cg==
Merkle root
7d99f509e7ace975d9131b3c79b0696005344fbfb76691d26003921d8da3f0a8
Merkle path
["0716907d4ce08e9a302488e3e810427bda1599e20ba9be0c8cec4413266d79ca","0f1deca8193cff165cc6f0b2d1de4591cbcfa6a1cfe7a239f71f7e2a430c9574","0af092d2abc82c3c136f3c8e83b79713fea918fb6e044ffd2e1beb0c00a92525","bc4c24924f61835b030d68661b38ea4118109ab8285d3ae8c8cd7f1145076208","9d16b1a49425ca8ab256ac58500f64a3b0820b183e21e6d746c1c25706f632c6","85f70f3d235ed594fe90019979f7e19da73d0035fb99f1d4a6f71c2759f766d9","ff8ba7cd9ae989825cb412b6c35363fc89b3c34d419f8c191f4ffe154f515cdd","45acdd1a6b1056418c96e31fa7275e08e343ab80bd3189f3b6ee671f3bf21e2c","67ee51db3953c3bc6d8458d013a91bf276958d1d4c6f5c0c3171cf0dbe1d0019","80c64db0dc59943e7d1113176e27ce90c19fc5ebdff1023f3f1f4d5519037347","46b50a307397bd2eb347d17ba319dcba4f99b92b421d6c473edabd710b91220b","2dd1d85aa612c9c2dcee8e6a9b8850d0d2d4f889a64425b9d1763b23e8368be1","d2b7e5c12695b255ce635bd70253d91722143b48b301c96d105af7fb07baf59f","b2d461fa5f2c77d97cbab53545a3c371aae019615d29ddbac5455b43209b8b7e","aadc4b0adc99de5691fd30e8e3c95e2c0cd69be4c1b13f7bdc389fe5361fd614"]
Anchored
2026-08-24
Public log entry
search.sigstore.dev, log index 2579313751 · entry 108e9186e8c5677a5f78…
Expected log hash
0bbd23c1386f7dceb3083c4e5ded337a3a2fd7f76cd0c544d38ca853af72ea2a The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787536862564","kind":"published-quote","locale":"en","page":"theme:infomaniak/quality/en","quote":"Super easy and fast","rating":5,"review_date":"2026-08-10","source":"Apple App Store","source_url":"https://apps.apple.com/nl/app/id6737686335?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (7d99f509e7ac…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.