Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Works correctly, no issues.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
0e65b2a16efff66f610ab9b0ae858d40a1a4527185fb097922164adcea79e8b5
Signature (Ed25519, base64)
kQVDtPhE1oxQIjJF36q8JYh3x9PzgYklUz9G7TGrQwP9BNC6K/LQB3dTQqSKWC/dkmjRSuLRk6T3IIVbb08YAQ==
Merkle root
c768716b2cb21aabc39de506951f775443418285e2c5eda072e3b3c2d945945c
Merkle path
["0e6412603e6aee239cd07995e59ad3bbc72b73cbda1041513763e1d6a500f01f","910957bceb26f6e057ad30097efc6bb19edb5fd9d052b0d37a8bb641a6a870e5","4c2535c5bd45a6d56bfce96e74b93138f7813739ce338c3fd1abab1144917fab","4cd0a5bd6f62f5c07b33cc43ebc72da92edc38bab1a091248f61e985b6f6866f","7e89b3237c4fff30435c0a5aaf81e6f9f04faa1cb0d901293fa9d598900c81bd","cf7dd775697175b48a676b9b59f6313eb3a98f0a6a94624daade067fe348ac47","a7c04649fd1f6973ee9bcc7369f93770a1d7b7a8cd5b1b2fc7ef80d3bffd2c84","3eb3f948b4559b346354cdd859a03e6257023ee4e523698066e7d0747ab8007e","cdd33f44be705514b0469098d42e284706c2f7b5ff752a4468bfa2b9309340b5","2a7e564e3d64c1a38d6c09eed05c4a8a4f6db7ddb92369bb03617b7045665b45","10dfc38d92cb808570efd8b4da55b7412af5c5f73b2e89fc3d852f79952a14e1","2040ad8bb83c34fc495eeb8c9f81caf04fd90dd5129397bcf00a3351408f61cc","38e74f19a86a1311a4dbfb6ff75312ce32e1ae47f608a45fe54b6162c0fae8f4","58ccafd37278be2b9508db439c14e85a319c2716b397eaff7c959a5020ac606e","4c61c84fffc3f3248d19b221d821cc3f0e04d1cfb4151bcd103cb5959dfdd5ed"]
Anchored
2026-08-24
Public log entry
search.sigstore.dev, log index 2579644936 · entry 108e9186e8c5677aee79…
Expected log hash
3a9c8e6bb3b2990f2171448c5468a63b9d6f8bed98ee1b72cd7d6f73b4663243 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787545182186","kind":"published-quote","locale":"en","page":"product:infomaniak/ksuite/en","quote":"Works correctly, no issues.","rating":3,"review_date":"2026-05-22","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.infomaniak.mail","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (c768716b2cb2…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.