Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Facile à installer.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2543025731

Proof data

Record hash (SHA-256)

2dc266ada8ebbba69e811faa402b2980b36e8454e19b8862c116d3d768778758

Signature (Ed25519, base64)

iqAAZ1CIif5CoRbrAiqKgcXpMo8yVuYN9gcOenumkdu3+w1Hns/TUaqLm0uxzxSJYO/oZeQEOlFNdyt7BJaXBQ==

Merkle root

172a3e0b3c9f8b02f52318e01ba6beb899404e00e91c15eebc4dea38467e1404

Merkle path

["2dc05476a58b5087d99daaf6c1592548e76e3f0b4cc70d44d6817381e4008ea3","454bf62779ec4af76afdb66673fb94d7dfde211c9827b7834a0fa3f1ca8441a1","42f539ecff52a53cfff6b62be44956af6b63a0ce9502c1b5689fe42eba38335c","17996f989855868fc01e698e2b49b81d5f44c692a8dbefd2a2df205666a1a3f9","a0b3ac5094765dabf20c2fc59063b0c5fe814925b490b8eb7b392f6a5a53a555","8f1bfd220962e98437e86144f8f5043537f3ae53344792fd6ac0b80998211482","dfeb8042f824f2d14f7f637e46be4e19f0380fcd43789a2b2f532a4e7b857370","ebb16fe975032b971d0f49ec70b3a558b3a197ade5a8442ce11677336aca0b27","556dfdd388e4524802bec79ab880daf00dc664e02ab13539669a05c68192643f","4bb3f3840bad82df69ac58860496eb9eed202578385e72fb94a0ca569e0d0717","6c00714d769caf6c32a865a27efd0b604aeebdce40d36d37bfbf277e62b503b5","22df7ea858840ae6ab19a461f259a5dc1cbc4b2b8da70f18525901770d369726","6582b4bd72409a5334905e80c9e3aeb7c43a20c5eb4c139595bd990bb777102a","b2e250a62b44b0b9c303f91afd3aac8852fa6af504d7d68ed736141a3dd71161","7731d0ded4f51d151ea3e84474d1e27a6279e8756420c93cf5fec0abf7f11add"]

Anchored

2026-08-21

Public log entry

search.sigstore.dev, log index 2543025731 · entry 108e9186e8c5677a8971…

Expected log hash

19ecbe4a66d8adbd7c6057dbf6ed9be73485c248dba1e0c595279a908b3e8bea The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1787283443958","kind":"published-quote","locale":"fr","page":"brand:infomaniak","quote":"Facile à installer.","rating":5,"review_date":"2026-08-10","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.infomaniak.swisstransfer","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (172a3e0b3c9f…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.