Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Ich möchte von MS zu KSuite wechseln”
Google Play · 3/5 · 2025-03-19

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2683258276

Proof data

Record hash (SHA-256): 16dcd556c77105cb2c9be69d5c55f50fbecf85c5ba53ed08bd6599880d0224f6
Signature (Ed25519, base64): uDA3dMyOd1kOdxEraF6O4TWUrYxzjH1ymWRlNVaBxR0O/sSl5b0oSBm+CkDoFvUGHpQ2n+rPSsZOlYVFvYVLBw==
Merkle root: 1b4480a4fbb367e76fd34ca26880b5c46171f974cf3a94f9b036b42e01723c56
Merkle path: ["16de91495143880579e88e076026d305e51e7a65a59971c254ae4a1392a412b9","ce198bf89bdc7f37ef624418374d45a1bc188846478eed2ed246a96164a85716","cecb74a3f68a1e56800ed7b4a14d38a870b48110ccf1e9520ce3f7d98f33721a","aa1982c0e8c86afd37143e4426171d0f66f532ea7e3164a105e04dab18d0810c","eac4e6550ba0c9ab48b8a63bed5c11e032acc7bd5d4d7673a20948a3b3384f93","a64127ee45fa139a6d0b1f222b9d62233922c5cdf4ec72105f65c82affad0c9f","7f7fa763eb030e29af20f553b928b5802ac4b8c375af5911d3aa09cd0f11fedd","3390c61e776ecdaf8a6260b6fb0b22b5a936a2036778aed51f6e1f89f47e88b9","807d8bfeee03ab5ce5e006c6add572f2d2f92137440a78c42e0a3b800b4a508f","7d27c81528425ab299ba3c5c30e131a93af058f234810d388a6c7e7617f2b8d1","36c0cec0c3d67bc321d3ceb8eec156998bbf6bbe5d3abd4c128f520a8e92744f","aefaa0b7ec0f2da71f8ce69edc75da7d3d20a074772ee38c30dc4afda500ae12","9bb9face21b64dc4548596d6f0fe4cf67321749c83227ee93ed882f3aa170652","e7218144e850bd19a6bceecc50f33cdd16123e2542b211b07ffe285b3602d2d5","26c4d515b1da79ddf02519980ecbc6a7fec0326ec612e5f075735f461991082a"]
Anchored: 2026-09-02
Public log entry: search.sigstore.dev, log index 2683258276 · entry 108e9186e8c5677a44df…
Expected log hash: eeb02f3fc88cc5ba2c672023b294d6863b311c6353fa3c9c8dfe9c0b1e584208 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1788322016973","kind":"published-quote","locale":"de","page":"product:infomaniak/ksuite/de","quote":"Ich möchte von MS zu KSuite wechseln","rating":3,"review_date":"2025-03-19","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.infomaniak.mail","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (1b4480a4fbb3…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.