Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Bonjour votre application est super.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
3381db0a350c65575cade6d89449d3e0f9547717970aa1766c3d2b142d8acc8f
Signature (Ed25519, base64)
r9ROpj/LZOv+lIuluWXi0e3kwKnd7olCAO8s+lxuMJg3e1v6ODPlT8mszZDa+7T13dk6LHaohobQ8W11X1D0Ag==
Merkle root
bdf558524b6fc08556728f259e0f09161d4626349b700d7f30fb50b05a626ea1
Merkle path
["3380a41c4f5ef219904c1e8f69ff5ff83f877c2a8fdfbe917dd0c6b90843f400","86f591e5167a3adc1c80345bfdec6793c1f450c6b67e4c1112c3715dc6bc691b","dea9a5c95998a678bc6d623ebeb552defbbef151f1af72facc183d8b4450c882","b7fe6b83e932e7a0cd9b2857fb1e01190678be03f3e334fc1341558d7c3543dc","0d34d419ffcefc2eadd333dfb4ddcb66dfba8433bc71b0ec000614d57bb6eb55","f8ad25d13d947db9dc806d0c48f002897fa664bd9883960df8c0567f002aa739","e8ca13e48ecdfeda2b388d7ce8b6ea336c892335b94765a9335529de5ebeb10f","167751df6084c1639127c303e897dbcf61f6cfae933833540133b6776c4e9bfd","dda91695ad91924e849e432142c6dfd439e9de89b8d1c810ab93586e32a90d88","d58e335ad24b951c611b8a5bf1bb5a894bc6f5ab48c6fa05986e600cc7d8e443","c6155e15a35d304d6efcb224607507a3e7637379ddb707823add2d036f6555f3","cbb9cd12a3ede85fbdf3d80695065b7e4292fd33cd192c1a7dca53ae306114e3","b8659168923893f97a37be27d160a4242b9c5bd182ed4c6b5e12ae0a7948587f","272c20c9aa4ca1732f6bbe1fe35bf6daba5432c22350d19d21e0e6203fa6e857","7c1f9829e354481f51c5a693ce64e17eb8bee61cee659bdf8b794fb330eb29d9"]
Anchored
2026-08-20
Public log entry
search.sigstore.dev, log index 2525257308 · entry 108e9186e8c5677ae552…
Expected log hash
c7cb1a1a9418331323cc64d3f101e644ce5e79412d6e55a22a9342e33025b7dc The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787195935480","kind":"published-quote","locale":"fr","page":"theme:meteomatics/quality/fr","quote":"Bonjour votre application est super.","rating":4,"review_date":"2026-07-17","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.meteomatics.app","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (bdf558524b6f…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.