Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“it’s incredibly easy to use”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
0d514fb7fcf4d2c8c5d0ab579d364b10c9686c0548a49004b14e1d5b8d6aa9d6
Signature (Ed25519, base64)
WsDLTJUeSXjEgiBDRJj/46Y4pjhQJeZMQUT9TzTvC63jw7Gs0UeYz/NdJAW/7e3e2PKqV8znoZavhHJ36NapBw==
Merkle root
11cd275e1b8f31daf4151030cd5fc67eec90cc1b73d6c3abd8966dac0ea44663
Merkle path
["0d59dc96447336916a87e24827af440c41aa7036d08d9443ae919029044d5c1e","3609bd6367d82d8999b3371902dbd2d8b871007b17a6a4486b78dc79587243ca","eb0953ea55d3ab8d1a7bb7f7cbee79f75b0086d0ea31f27edc46094e3f181a47","44ac6139112ee23758a267551b1ecf889fa4b5914686cecd8c6e0c58d14d5d42","1213c2c333314c3f07aa233305d58f5ff6907503940f8f4edb1b47c833d96bdf","5a93a987ac65854b4ec4b2b405a6a38536480cf01ef4cae17a631b73e9f87cd4","269eca523b9ca12beb6dbc1f286b6df2b9019fb07a4e0156349c616d56a4d2a7","61d3081793e42bb31392d6b1f38d60830eb5f721cc04130ac88c1af31bb1cccb","4ba415ad0a79aa7c80aa284c925d5d01fb4c3da2b4944283adfcd96e31442fd7","e50275b50dc551670d74281af5ca62d385d86999d176fd3872b6c78918d9c06a","1195c4bb2d4e7df81076e3dd28f8afbbd0cb78d96d4424f0790cf25fd02134c7","15ef754b0ec11f0bcfb1882f47ccca6fc7a2c7ee673bd9ce3c5a3082d34781db","3012f7a2838d04f2071073f8ac34932376b18c2cc8805b9bec98ec1dc2d08a95","b9f2345d92694d25bd0490f4a3b26a3b973fef20d27569c442482b8bf63cf733","29dd516ceb1cd9fcda9711678cb72a0ee0864d72432066fb0af064f01b46c0cc"]
Anchored
2026-08-30
Public log entry
search.sigstore.dev, log index 2647580424 · entry 108e9186e8c5677a331a…
Expected log hash
29924cde6f1b08ef8102d24e7b21fea7f81e6b89af990cb81e380cc325864e7d The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1788064620038","kind":"published-quote","locale":"en","page":"brand:infomaniak","quote":"it’s incredibly easy to use","rating":5,"review_date":"2026-08-22","source":"Apple App Store","source_url":"https://apps.apple.com/us/app/id6754152858?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (11cd275e1b8f…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.