Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Seules les confirmations avec les codes bugs”
Google Play · 5/5 · 2026-08-10

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2514130917

Proof data

Record hash (SHA-256): 2a84cc598d06df0193baad0105252ec44fd334df1dd5e1822d1bbc2c1a129c93
Signature (Ed25519, base64): zDaOc9wmqyPm4hCQUlVlS9HJ1ILFhQdbBKl7gJw57VkA4TrOLzPsPNq1BVFLH1Cn7JFl6QBoi4ezC2SgOzAABA==
Merkle root: 72711ef72b8a7ab084630b9628ceb2defcf0aae546304d44ed173db57929457f
Merkle path: ["2a87b0a86224577ebcd9f6ec09c44ae589f0b7c172bfabe446ae411a3859ddc7","0693bb3c7fc8e743a155ddef7a98d75533fe0c1b6c67534f06d70d82485f0d24","0fa937ed984506d018251c9537ff4b6b8ec2b161a3c217f4f5b4b7ff7670df38","8d246121058b8c5558f1174d4d20ab004a8c88115f99d1c990cbff258e0dfce6","f804e40d91917c673190e5a0b02335f495ff8de565e38d3682021885b3aeb469","fc7efa9365056b082dccdffcfd0674a8c57e9da130f872022fd725a77b952ac2","8178cbb8796051e2b00aa5bfcc08e06e73953f9ac43cf75cdd8415c6918181e0","0cfedb2a87c42144833eb40a32bf717f14a5b1ad0fcdf968c12e066929e3b652","5de58186d5a3b02b43dc3f858e28333247dc818871eb235ad892b0e90fee8618","d05961cf0a31f6344c6315f48d6e7a0f8721211eac2ba2e7b7605942c4728624","790248ad2dcc8bf1e005a4305d751ae310e3284a78d78df2dc1d7daa8cc6f6d1","6a6dfccff9dc241f298e0a52411b762bea9080a6c51d433e9025bb218ea1e106","135f944fcf4a92d6f5a1944e44ad8a4edfeca6c93156b3f0cac35c7e930312a7","768946b507e7dea873e9570265486799703565faf3780e57d953562adfb568fa","6eb04938b6a483bb163369a1d918b32576dde0943755b89bf4c6d18743828ba3"]
Anchored: 2026-08-19
Public log entry: search.sigstore.dev, log index 2514130917 · entry 108e9186e8c5677a3273…
Expected log hash: 65ba51eff926c65ed0ce093a942d84c628d811a59302f32867c6589627e47792 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1787124488047","kind":"published-quote","locale":"fr","page":"brand:infomaniak","quote":"Seules les confirmations avec les codes bugs","rating":5,"review_date":"2026-08-10","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.infomaniak.swisstransfer","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (72711ef72b8a…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.