Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“meilleure application de transfert gratuit”
Google Play · 5/5 · 2025-09-17

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2525010456

Proof data

Record hash (SHA-256): 2c368aac2d35f5b823a4afd0c9c757c1a60cba8d8bea9a5056d9686181c07190
Signature (Ed25519, base64): a225YHCaOSmmDwlGW4L1P8rITgLUrBnaVT4PBCiN9IIwGP/UqtNnezX7QmszaJuQPtzKm0TqyRhBYWX/3qx9BA==
Merkle root: c69b412346f0db8d88aed17dbaf2e4876a3743c1c4d16fb306ba56b5c0573123
Merkle path: ["2c34f41bbaabfca16612fdb097c148df638566b33c1496112c01b5d7d71bdce9","cd55354d924f84fa57e2dfd442a26e0955cc8444dcf8df1da94c8aad9955950a","237457cfdf87476886ef0a58b2ca5b3ae50e17bd8db9c271fbf1205340f2d0e7","d1783dafc821483a53356f215bfcdfa2f97c402e8ef926453210492b9974f244","21b170aefe41e2dcc233f4fe10e346888a52bcd0520ba0317cacbb5503ab3e09","677f441b24bee4a8b93562ea600a0e7bfa89d5651921bfe24f6e8f783da2781a","1fb214edb8730d77102007fb489d3421cd0efeec328628c467b388be26e59f1c","ed15673c63137e00ff9ec8f8609d4bba81d296fc5639ea1a1afaa4d8adc64a79","8800b188da55f82429aa83802a7540215f3342b852844a0b7c72cdf7317c3a07","1f852d5ee9cee0d57a7c836c6643f88af1559348d2e30dbe75d3d612a59e8a32","d19145d4c3611b29441a175c5745d64aabf49ccfcbf6fea148b1e2a73371973b","721459d5ed2b625225b644c6314b3b4b68ccd1ec7d9cbfa0502a712e52e833b9","09997fd9b1ef8c57766815e6c9849e05f2447cb27e8d805273108da18c60273d","62927e8f71080777dd1935c21221e60b742dc0377a31e2f20a0a64cf6c3282e8","3da38b679e2392986aef224a332d14750fb3a22c4e75287765e8f68f575f24f3"]
Anchored: 2026-08-20
Public log entry: search.sigstore.dev, log index 2525010456 · entry 108e9186e8c5677a4287…
Expected log hash: 659be4fcc7663b2dc65a53351e16497fea44ed9ec8aef1f3c48c8e452b350dc6 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1787194832011","kind":"published-quote","locale":"fr","page":"brand:infomaniak","quote":"meilleure application de transfert gratuit","rating":5,"review_date":"2025-09-17","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.infomaniak.swisstransfer","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (c69b412346f0…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.