Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Bonne qualité des logiciels”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
0defd5acfe538d2b876084183ead61c3688cdded259b1a96d839113c8208d98d
Signature (Ed25519, base64)
qV/aIyDU15sqLAEzTD3bm7z9nJTsr+ROF/1Mq7YGOTHtuj/oQ4emF/cZyQtXHC9JtyrIwJ1FpTad5QVdqFXiAQ==
Merkle root
baa63339ed127dee6c2b1504d3718b71e94c83f7a90a1da737d699c1b2205913
Merkle path
["0de340f2b8be5f8fc4d48f61170c5905fc14405733323e84ed083371d8f66cfc","93d9de98a56e51f33adb2f2e7e587bb9af4fbeb6a3377ed80bc312e90a68b56e","b0d145e26672213e9f768bfb032a419c82dd3b8c4e364cfc4af8934d00f52b2c","5a0b1eea97f17ac47c791b5925218386e47389731f3b2786889de83f0a11167d","e2fd1ec78b0963533119702daf46b91239304220f5bc100083c93fcc1252069a","54d16415a43bff214d10d1c56b2c21ee9b38557739734cfc3fc94f7f4b16ef75","3c00c92a932335491c1ec7c36de3af9be808a8bbfaf86f87dfb76d538c17720f","6b85e1e94ef891521ef40558f7bcba4e45db0ed062bfccd803cf670acb1c0800","a1fe7d5719e833c7bd296fa3bb50ab469c14caa8195df4f44a8c30e0241a61fc","860caab5ef65436eaebb4bc7cb042ea3934cac93a46250e2ab62069098ff4630","866ac435089df85284784301c2051c4557a8d06a36a55e145220828746f98798","e2cf7144d23a312580a4836932a4fbe7f0ce303ac74ff7913d4c72f492af6b2d","eee880a255047d554444ad39a6fcc213a7567298f0f3441531c01029e7a71d12","ac24abf3a1c506aec2b5c0611268046e40bd3e23140aabc047f5c16f008d5dd6","11e6176a525c956e4f3a814b04624b93eb8f47dd129fbee2765869efbc5d4d54"]
Anchored
2026-09-02
Public log entry
search.sigstore.dev, log index 2685255068 · entry 108e9186e8c5677a482a…
Expected log hash
03e66e446ea90df8a21d7d402854ad37d81ce71c2336e953836f61c9bb1e4bf5 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1788348937690","kind":"published-quote","locale":"fr","page":"product:infomaniak/vps-cloud/fr","quote":"Bonne qualité des logiciels","rating":4,"review_date":"2026-07-29","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.infomaniak.drive","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (baa63339ed12…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.