Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Ein Muss, wenn Sie bei Infomaniak gehostet werden...”
Google Play · 5/5 · 2024-11-06

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2593501033

Proof data

Record hash (SHA-256): 0bcfafb99978c9a6f52d55d2446b1b9aa83bd5e8eb82038812d66653496b0e19
Signature (Ed25519, base64): X1AEYw2Xe2GqvW9CDhf7bw1eTFA1BKg1lE3lCr7v/MHw9pf1qFoqfP3k8rxYALdBC8xC3rb9oh+jbwKnMbQIDQ==
Merkle root: b046f5df2a406d6c32d4f87e14105e0107f6e314c3d6063465b8c6441189c891
Merkle path: ["0bce5f95b03c55f859b817485e73728c06bc5509012b37dc0e0d69bf2b422815","95f25474e1dc1fda591aa78816bfe8846e404ec769a6fdfb0b3bf161b07f252d","5f4a22fed2d4b10e0c2f462b144529c7ef490e67b5343860b78c267aeb96aab6","bada0fba8a692dc689a088e4fad90d7d988916765facbd3ce18de0cec82b6fc2","80f3efb800fdca50d317a6fd846da251e3105c16f7be5635953bd89cb1e4df91","649f148c4e21d729cac98308e7890dd6d449bb0f863a6b65b00d44d89a378814","be2a3a9190a486cbbc11b30f231fb7a3c36ddd0090b17946ecae766899e1b839","b36cd1cd92fb69827a15135b393a679faedec02be90cba0921ad5177649016f2","e4ab923e4dea32795299460f9c1bd6ebe9d97bc659e9f04e65c1b8b5c61e3612","ffe5e8903591031f1496abb82322fadfefd9c6d5be33b4cc325bdb72701d88d5","a25180395f3c5c7b6bbc657c17925654f2501306c2c5a7fabf36328313bb90c4","01f014457410f90e975eb3d5f35c027d99a0857d2dd4e4d65fab61eb21c2e49a","f337a72b5c8d32566231b69df119a20fca7daf15172b90c66e1b6d332dd78858","c35362d8be7493456726dffb35f813b4e10ace25b8e2c3679505eceb5d9a7bb4","4a4ef39d7ab636950ca6d9b7d70c958b0ba84299c7f375e0932c9308990ba8e0"]
Anchored: 2026-08-26
Public log entry: search.sigstore.dev, log index 2593501033 · entry 108e9186e8c5677a6e5c…
Expected log hash: 804ea852a1c1b02b8c86a35cc42390aabed87fd2aa29b8fb9f7f25e79321f581 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1787709693011","kind":"published-quote","locale":"de","page":"brand:infomaniak","quote":"Ein Muss, wenn Sie bei Infomaniak gehostet werden...","rating":5,"review_date":"2024-11-06","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.infomaniak.mail","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (b046f5df2a40…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.