Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Les fichiers se synchronisent facilement”
Google Play · 5/5 · 2026-07-26

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2524810465

Proof data

Record hash (SHA-256): 31fc07dd34d9733cbc5bc4131f056a8c93f2511cb4c64783581afb13b1a338d6
Signature (Ed25519, base64): DVvzIulSLuoMM+s5iBlCGTN9c3oAY0wNYs2MnvNPp/9J6pSgPBZtU4oxTvW7e1eYqyyC4RLq1hTrGN3ty4h7Cw==
Merkle root: 3e1c67438f658ba7fd015e6979c1bfd82d90efb0848cecbd4d902d6b2ed171d3
Merkle path: ["32031d5fe111abf6a10f0c87653462ac255db4a3cabd63b1f92abd88838cdbae","be369dedcebaf0a0319d6014813584860f50887db67d5e274c5e9a721ccc5210","afdc417812985095720c1ac3e286ee1bd22bd7144ed382e72419983787763a8a","ce6f0e1fc890caaaf5220d4cf7872d46d7209c2c65a6e5f3b72ecbc630ac3a52","656ff888aaaff144a07033069d55768f2fd457280e3910a59792ec602441ad9e","edfafd0b682f9e25956266accc51e24fe639de277fee28c379790c357ed8f342","4dc3bb76484a3ae5f54c0c9017db7d1ec0055e56b261a560209a4682c7c805f4","087ed0dea8890e25991fa15abab68a0acd18a693bdad5e97ff25ad2aa4f476b0","e880c950760ad058ce084082c9b7f4c44935b2a8ec173f7917a4f656da6474a8","f48a0f76170c62654cac63ebbd11475b8edc51606489c72e17c60249a9531844","bdae66ff4a3fe1d79c042d5afa32d95c13e3b46cabc770eb69125cf93e8a719f","32a89cb659daeca401eb2f8787a55894fe50ab0398c530a5ab8c55ca4d41890a","dbfcb3d5021da50b8b4634be051dbf46681ebd2b647e213f1973335aec3749d8","0790a9ec23117ba3e0ba9a310290906a4f1d2b0055d4607b106ab21651087c1d","db72b82118c1e08b77018004fa72584377d6eccdc4c75ec19bef6a78273f75c9"]
Anchored: 2026-08-20
Public log entry: search.sigstore.dev, log index 2524810465 · entry 108e9186e8c5677af074…
Expected log hash: 129b219cb6155ac24569a579c61e8fc9cc2d89305732944b8849d5e719dfd073 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1787193927339","kind":"published-quote","locale":"fr","page":"product:infomaniak/public-cloud-iaas/fr","quote":"Les fichiers se synchronisent facilement","rating":5,"review_date":"2026-07-26","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.infomaniak.drive","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (3e1c67438f65…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.