Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“factures répétées”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
0981f11aabcdf0d63221edf2df6e8f5e6166d192cacf29f8f218fb836bda041c
Signature (Ed25519, base64)
p1kO+kL2pkbsR8lIv3ZIkxaSJBYZy9t18ggwyEKPOEIpXvX0xw56fKPVps2TMthdFSbeoo+U/i01ope38aqfAw==
Merkle root
d414e521fef9d6d099989fa0d693684c20b42a89a12033fe1adae5ceadc28160
Merkle path
["0984f57f5f3ff726914e3eea1236b514e2a75300668940502129f5927374a4a7","c69dcacbc4960ca35fbc6c7f110e0b8c770a4d3acc2ac6b3dd746ff67755decf","5338986bbdf7639f2c3b95a0246ae11420ea5e63a4f920a384135a3f8bae66e4","4667add7afa2673df45e4e1ed5051b94589bc49541864a9063ddf708fe74b362","622e636466fe8a1092a0a1d6104f385df3d0ecf4ef9d5f860f05438733f3b8d4","109b1b9a3598328a9a915d426fefe4b36c1133f7c3391b250fcc0277aca25173","f721ce8910f20fa34eff1f0221123993767eb96b2a654f950eac0fd6d308eec9","23ad77f0ba2f5af6875dbcc56ab7f3eeac68fd0547ed3b76bf63ce50b8a14ba2","796e2c89b95ad6e634637d8fa001ddbefd2916459df4921acc032faece01d770","389245764703bb8694756924d2296cd6e1198bc1dc374c17fb3186520e511500","713e2470ca565502037bfa6fe266ee97cdbfa1a52a7fbcbd3e73fa59f3ecf10d","8fae7514a4924bfe0cf5e60743f69291a922a54a6ba19c537fba85dd4397db12","f77efd58ae82cd437163ba9ab021e9fb524c058feb0d1f3bc5d429c056be2720","dd85a03194c1b09d93a4be119d3146825d20c9e375d143636eff256904ff3e25","d9bed3bb20fbc734967be09c1cd24ec9d5bb72fd1e4fdf84e6057ce858f8bc78"]
Anchored
2026-08-26
Public log entry
search.sigstore.dev, log index 2594412582 · entry 108e9186e8c5677aea33…
Expected log hash
b1897d255cf944fc063c3044a4546ab02c40327197d891ce843dc1c45c2dff03 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787713855428","kind":"published-quote","locale":"fr","page":"theme:sevdesk/billing/fr","quote":"factures répétées","rating":4,"review_date":"2026-04-08","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=de.sevdesk.sevdeskgo","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (d414e521fef9…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.