Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Good email client”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2684045120

Proof data

Record hash (SHA-256)

0fb0584394a614af5844ae3be152e7c8b7aa4ce4c9740f8cbf23c8de27d44e82

Signature (Ed25519, base64)

iM3Tc5q56QhYLYfxdjJkPw8omLOEOLoDY3lwBjkx+q7ZCQcyHVX0FLQGa0WRBNToauJS8v6b+8LOPRMmwSItCA==

Merkle root

1e61eced4e661484bfe5b6f5b2703dd6b75b86bad22e189b3c366c9d28063790

Merkle path

["0fae27ae47aaa9bd83cd9388419f4b7ddae0aec8ab002771833398b846b40251","1ee069f042904789996f560b5c1382baab42cd719cb0309aa37d7fdc950f5ff6","6e6c81334540a3e14573cf3df4bc08268adf0a661c9b3106dcd32bf123b4192c","935cf9f29d72575ef63eb4cd02c32138cd467dd841333bbf988b2e4052d88879","e78c4d23af7d086434556f84302fe2eaec0fc5bd36c49ec38d1a550d3992939e","a8007c7a7b35bfaee38f895503416a6d2d306939425a46cb1476faf4d6fbe0db","44165a8a50d70c12f54441a6a30ad5e43a25dd21699c205956b3eeccbfb21e7a","783a0875b930d7e09d3818bd75ba22d2466f5fae29c71c5546d887bad3f47af9","882a75cd4ebfb749afa0a38c2d74b01708ec8d7c3c77feaaabadd71234bbeec6","aac4495b6a38a7f624c5a7d8f7d12fe14cf299ef22a1f8021d8c40a92bd6c81e","d7b06428c9e41540b9e0b7176bdc57ed110e4f3ce6cb70cd55add00aeee07e39","371290f68d43e2599f9d4bca2e3c746a8a26675cce0b2600398e73cd3967be3d","54ee0bc4a4c2b45767c35fcfd5bb7920c8fd190b1fed30964e0a25b96be9cb33","bf1bcad2903dfb9abf4b8f024fe3c81bcae7bbc24b20f79dfeb4175ee7010ee6","c6abe42054f9c95975c60fb1ff77d61160b6c8ce936c4b4f55df686a320e02d9"]

Anchored

2026-09-02

Public log entry

search.sigstore.dev, log index 2684045120 · entry 108e9186e8c5677a1eab…

Expected log hash

991cca42189213cf0723c834ba6ddec4f1bf618d506ffae30f68dbb14dfac402 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1788333005708","kind":"published-quote","locale":"en","page":"product:infomaniak/mail-service/en","quote":"Good email client","rating":4,"review_date":"2026-08-05","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.infomaniak.mail","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (1e61eced4e66…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.