Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Très cher.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
09060fc1ffaec3ad31c7b2b6a29aac1a8ccef0706d0ebcfac52aab57979fc7d3
Signature (Ed25519, base64)
tDgtvJfby/5zlwrOESifL5n5MFbZqFirnEkUuPd+srH/rq1E6q7QtFsi0R7t4ZgaQYQMcom65rxj7dq7VDURBg==
Merkle root
9ddf6b9053b6e5e7a2f15ee7f3bfc8dfb72c48a1917ae5b7e553033e3ded6523
Merkle path
["09071783cc68cf47fd69c555c8a85067d964cf791bad2c9c81a5aa0a9c7160c0","ca47e8a4d5b06d843fffb23ae4f4e2bc74a4a36d5aaa8929fb847dfb7b17546d","056b77a11a3f3bf805904a43e281f7ec3667eb6327b108dd80bcd959d839911d","97504b94acace841d26ebdfc153ae6623b106d52dce7440bb704d941c6eb94bf","284a52405dea6386c38bb23862681dc85f850ea3698cd6bf77e050006b8076c3","cdd4c49c5a51bdae115be432199fd062e4fc157e6e414770b47890db605d15ac","c1d91f5847f124d8b7fe1fed0cdfe3dc5c89976b55bf8b789b2fbfa22bb2c3f0","12a00f6d04ae532175e539b3f965afe1293e439388d21544999f3578d1beb239","4fab6ffd794ceab59a863f7cbb1f73d1f709efd495c4f6b1172c24d0f97c2bab","62bb60a9913631c1b9d34dd951571334fe9f161a482cafd2a776c54cfa0d0ee3","038819857fb4bb0d6571d3d98bc6a7629b4e9068d5be86efc4eee63acee35906","dcfa3f0fc39e185ac4a0c3ac51da16fea53e6a2f4d1d1050a83d0659142cb3f6","48fbcfcef32592ba72653616c6b287b5138e378088c17384b9af4bf9ec9a216f","a4308f946a16111c9d609738b93b2f2ae813ce88e33e490f89cf33e3a52e64d3","50c4eca268fbb41f8c6bc36d8a5d1b6cc09733d96f0fb33e6cb584096c56f695"]
Anchored
2026-08-19
Public log entry
search.sigstore.dev, log index 2514967984 · entry 108e9186e8c5677a902c…
Expected log hash
be0cb34bbab326d10b25013c37c9294b14554a6c6e9fac3dc68c06dc2c3c60e7 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787135269737","kind":"published-quote","locale":"fr","page":"brand:smallpdf","quote":"Très cher.","rating":1,"review_date":"2025-01-31","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.smallpdf.app.android","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (9ddf6b9053b6…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.