Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Great that you can send so many files at once”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2681187280

Proof data

Record hash (SHA-256)

07fcb2b90751036ebf897aca6fd00f669001c3741a4334021ad8f3549228652e

Signature (Ed25519, base64)

NRfpLP7cHXo3V+hFnEJRvurDe8Lnkm+7o1v8gD6T+VJQF5SjbzdMAupb5plmm4dFE8A2a0SQTPwctz5AcXEcBQ==

Merkle root

33c00cd8782e83e7660b36f31023b9067dd316746fb34a5456c153a308339c6d

Merkle path

["07fd3440a758136b2bb3941ce0f85b45e0a4318359aca13bb6972424a4d6cb65","7115b244648f4459f3c2930314296853b915ce697a189895347b8a15d37f932f","1e1086119671addc284c52f37418ed676b6755f15ae7cbcec0155e892a3f0678","db5cd57e386b2de21dc369e8a7f08a1993f9f372d5bc0b9696a9d5ec9b485e1b","672b47c640f5862740002e7c80105922552f2850cda2b83e7f2f3b7ee5e297a8","f21227151d8c57d0dcb1b5ba785370d865106111789666ddb5b15e52b3c87557","c278447e0ee843c4565cb72aec288a3f631f5c4f844f9d33870108a5490768c0","e01f2305d1463f7ec5469adccacdfe7044915d17180fe0aa73029ab04eb227e5","bcfa85b16f0adc3da1d252e9bcdbef73703020558806d0b744780f39957ee880","ed9e55249e713e4f442cd99046ee766fd79bf9b2cea365f93d27c483e489a462","6173bceafd9a437f490bc53ff07057f7262f30ec8a6e9e32ca4baf1bc979563c","d3aa483f4e4b46fe7fc7e840fc99c1ee942dfde16579987c10dca7fe286b8a16","d18f27a41b03a07d2014714c62631a673cf276797806c236330f5fe764feb6bc","c4aec0fb70f7ab82582654e3e3f71a251f73979eaf3fcf5c39210c14e09f34e5","1c612a54ea4200be62bfda791ae9c32645368a1c77880f74595307b48a6cb39a"]

Anchored

2026-09-01

Public log entry

search.sigstore.dev, log index 2681187280 · entry 108e9186e8c5677a68da…

Expected log hash

6c4c4fe04f66541fe16d28c86bc42894dbce07874d32b961c3ed57a7667195e3 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1788300906973","kind":"published-quote","locale":"en","page":"theme:infomaniak/ordering/en","quote":"Great that you can send so many files at once","rating":4,"review_date":"2026-07-28","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.infomaniak.swisstransfer","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (33c00cd8782e…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.