Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“La meilleure appli et site pour transférer des fichiers.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 3081458408

Proof data

Record hash (SHA-256)

0dabf5cf432e4827f367303fe31d6cf5d1cbf9e37de14265883901ddb14b2fb9

Signature (Ed25519, base64)

1drymf0I23a5dwZQriQa+Px2x60BfxG2T+VlmIkvuQf6uyBWdh6danViU1orDzlU59EcjJixNkbgEYfMtmPQAw==

Merkle root

f2e4180d5a0710e7663a4b79dbb50303bd6f86e3a2b406f14001987f705300d7

Merkle path

["0da4eef0b4ea150b5baa45beba033e31599b493f6d59ac27d5797d5ad9952124","07b35efbc9d40413e53b40c0b1b8952602613f263b5db6b9726e67ea351c9c0e","8821b502d866d456dd5d437b3e19d1dca23ab73b450b0468300190752752a656","adefbf6b228b2f1fbe47156144f7695b75e8a4c1af3f64eb6cd3150096233004","af2b9343c832105649317355076dd5704a906171e39399f50e9411f0245e6e73","15c4d49c2fc17f8c0be2062523a83d4dd6e6f6b8c0a6b5b0a958d8627a9bc7cb","ef5d4ca70ff5d7244bd96f5d215344189a9d414cb490fcf43178957844e9ef42","17adf8f7a6e0385b5821e2a83518b1cffbf5e5e6ea93562828017d6b2bbb3a09","7d27d42ffbd0648a4b7bfdc1592b205fcf0526a92f24be765d6a045b1ea75cf6","15ee4a66e2681cf3e90ad7a411b8c75de867336b2bab6804bdd558f8f255c5b3","308d0ff254d4a1a651fd6aedb2d6ab7d12ee6bdb7edfc00e05236a2df986caab","7450c56eea566b19f3b4ff105a5e4c38e985e0e7c3bd108d77c2b0dd3e6e9817","4c6a8ffb15e2e1add9152cd084d26439d82007efee0940dd95d3a3eac588611e","a6e8e25a2ba90cb0272e9c8b0abe3d0d6e1acdfc88815c674818da4404f1095d","e9f01260bd0385751f2505473f49304ca5856588aee517e499b7a694c94e66cd"]

Anchored

2026-10-05

Public log entry

search.sigstore.dev, log index 3081458408 · entry 108e9186e8c5677a9490…

Expected log hash

083ecc94bbb96677ba7c17fb105e7b1917457374ba5e9cc48c412762603877bd The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1791172602574","kind":"published-quote","locale":"fr","page":"product:infomaniak/site-creator/fr","quote":"La meilleure appli et site pour transférer des fichiers.","rating":5,"review_date":"2026-05-17","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.infomaniak.swisstransfer","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (f2e4180d5a07…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.