Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“La carte postale est arrivée sans enveloppe”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
42bdb51402c1a649912798726b7452f3553b91a75c55af1b43626c054aa4fa69
Signature (Ed25519, base64)
2gbaw8RIfUEZ+gmZciFyJtuQden8x7/ovDp5U4DgjMG8hPGvv0h/BJXNIT50n8xCjMzjODRXbq8jgNyIfC8hDA==
Merkle root
c921242d78a65e026e3281000ec5ef04ef930758058c4fed3f79f3b5ef992cde
Merkle path
["42c023b8cadd5d3a70a5e405a5e1666da2489d7598e57303e773dc8c48d8bb2d","f63ba469f41a1107d4f00c59c079ad3881a055ea6ef0367ac3e6f4bcd8f5c387","ec861dfb628ecb2f0b4c47050963476897a715abbfc92cf2c08d30eaf1b13ebf","e20c88856f7b9997e8d2289b9e3f035e83b541f785c5cd39e753bde7207f0c12","8b1de4adda0826fb0bac5d73baa7ffe9404fd87d92f48d91f8a52a6680071cf6","e7e315a95eea23ab35070d02d8bd985415d45d67387092add76847e00bcbbc79","f695eaf6f91e6a3c3836dcefee20dbc31db9d3344fa10cb249ebf0287753170f","0a342c838603bb2aa1d0e48c7a410cebd8281bd1ed0fa46b2834c863b75b725b","cb4984cf134dbbbb2520c520da41936b99c454aa0529b8b5ff870d0e2101f98e","9864c635939dbb65f160d41ac2a28e1c898615118500d784fa4257db0269f1f8","5bee4181db969ed3a5bbf24fdc2b31e496c7c61b8bc5c88ec540a73c2fc385c2","fe73ce509a77325b5ffa3ce5d771087bfb0281b53fe18b6fd059050b1823b872","affd4e3e6ec270a4ab2ae23163aa1a6ec143fc7cb3b6399ad8156d5289cce2ce","a3747175efd8cc3d769be29f15252da2dfd09eccbeeae76e08b0112f75ae1173","522d5a6bf348351e5632579ca190fcb390464957ba4b4698b399695ee13b67d6"]
Anchored
2026-08-21
Public log entry
search.sigstore.dev, log index 2543700701 · entry 108e9186e8c5677ac7e1…
Expected log hash
c1abaf0323b08bce2cedebaf1993162920ee741ace8973292e7ffdd13aca356b The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787287374804","kind":"published-quote","locale":"fr","page":"theme:cewe/packaging/fr","quote":"La carte postale est arrivée sans enveloppe","rating":2,"review_date":"2026-07-25","source":"Trusted Shops","source_url":"https://www.trustedshops.de/bewertung/info_XE3D21EA81A56276ACEED1C9AFB85F941.html","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (c921242d78a6…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.