Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Downloading is smooth.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
0d96c97ee0b5e2f70953257a00b7aacfc4c42021c364b9ef7cddc999eae0e4d5
Signature (Ed25519, base64)
L+Sr/LEytYf7M3DutQqG5bo/qFuGsrnNVTOGOtdarjBpA/Mv4DVHIwwuhtzyoSKtt+xYscJXUxeBRIplEZ7BAQ==
Merkle root
21e7bb8f2fd2dd8d8171a23c0a79176483db4731970a3fe8e0e328189fa103b6
Merkle path
["0d96d6c193c873e58df0f31acfeed365221d05038063500fac987a5d757975c5","d59e13d3644f5e28676d4d2560f8f661104ec48799505a3467db867898586fff","913bcf690c9f44f9555a33a32517d1b6a1c1d47a6fb1189d00437bd68dac8fbb","d31ccfc39fae443c49df7011c78dbffaddc8641d4f817e648420918afb056b82","059546ef942b7915f144a941bf19f5df272a6df81de74697b4f1017a2e8722c5","509d87df9cc538d506560355404651da0d165ec093768bab0235cf1baf3710ef","42d121c3a969be7f7d0a72833f510cf20183274f2eb4a10315f15b585f99f46e","858793d18e473fd32f875a689dfe418cfe794fa9ad48b69c8d48ee2be830e664","b917f1b611c857ee7e0c0109dec69ffdfdcd1f33ed646210317249220315a7d7","ee130911bee41e9a1f776e4c19395c07e9b05931ce154d7b1e00f330978f8288","88ada35bb78b27ede593e14711da944a3079634fdbb1e8fe2c1d64145e341bbb","a27949797d6acc76608eb2454a12e7fa3b0e23a9ff082297ecb4e8dc4f5f392e","3cea60263bc32cc376b16e1efd7740bffcfc93464b1276fab6e76a09df031faf","26fb1a8f86dacedb6315aaada1d0ce79d7f80a57d9cd232cbd85d2599cf8282f","2b3a1c21e085528ee4dbbc92da4d806c0eacec4cb4b4d9f473a6ecd411dc064f"]
Anchored
2026-08-28
Public log entry
search.sigstore.dev, log index 2622255255 · entry 108e9186e8c5677a7795…
Expected log hash
f2a0e8f2b4dab3949c746be15f65076279656fc5309daaeff038c9a778ee0653 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787896781880","kind":"published-quote","locale":"en","page":"product:infomaniak/swisstransfer/en","quote":"Downloading is smooth.","rating":5,"review_date":"2026-07-17","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.infomaniak.swisstransfer","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (21e7bb8f2fd2…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.