Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Unendlich viel besser als WeTransfer”
Google Play · 5/5 · 2026-06-21

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2515345787

Proof data

Record hash (SHA-256): 1b427994d23e40d7cdbe0206cba92687da6ad76da7bb73eccfacca706edf1032
Signature (Ed25519, base64): /WcUSLKe3pBxvcksfH6GlflibnxPcDpS/QzwiJgP91KfUOLKQQgz1+kvkTWRR2dGNvsnlfYH2liDak4wXgyDCg==
Merkle root: e61c2598d4d03770603e24740bcc427581e87bcbeea2e56dc34fd81a9f496465
Merkle path: ["1b47db68558596948695b94bd73fda59cde027f2935ae6db4275f06e51845afb","ae7bf57f50c897e55f13835119b5b6db9e1dca63c6616aa2ffaaaa74f3a393bb","846d4a2d8029932854a2325849efb75cd1e7d4da6d597044d283927e0bcfa6a6","678789e7e003e73f4a2e99e1e4f6751a007549a4c1e4c2071929a0cd005a3a23","9f858fbe689203e2e4f1f49671c138d29f8a93b2854c4b5a052a232f7d19f999","61939cf6e71f972df7d13f90202e9ade72857cf3573f5de51da06e219cc40a34","610c1e20fccd042d14d2fbbcfa9949b6f9e2f37064f568900789e4bb789cb03b","e3fd981fb1c345d074da5d99f49ab9eabe7b07760764a3e01974d14e41e691ae","41e4b36f0477f2d656ade02688ad7473bcf1aa36c9b9ec7fb3090d8e80a625bc","2bf9611cb8ab81235e8cdb156522e3edd2b186de8d5501fe296a87198b17ecfc","22006f3afb3e6ab30145872cdb2d64c0011818e7937c73dd9e6043ad2127eeda","92cc85abf4b56ac883fb58d5810f99b2ad76ece17fe5fc4a26c1b04750085412","40969aa912cd897f062ef7b007bf23221003273332528476c6c56656ab8df18f","c34fa5ec75d6e3462dddbe081b828d412a3a575b53cbb348f7047f6afbe95056","11a62e67a9d98d919358ca5b8855f911ccdc865f14b203213de31adc67657443"]
Anchored: 2026-08-19
Public log entry: search.sigstore.dev, log index 2515345787 · entry 108e9186e8c5677a749c…
Expected log hash: d9a90b5e7311041bf4315991ca7f2fbceee461daa2ae70a8b8b95323461a31cd The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1787140356347","kind":"published-quote","locale":"de","page":"product:infomaniak/site-creator/de","quote":"Unendlich viel besser als WeTransfer","rating":5,"review_date":"2026-06-21","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.infomaniak.swisstransfer","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (e61c2598d4d0…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.