Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“J'ai dépensé 9 € et je ne peux ni enregistrer ni ajouter de signatures.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2543025731

Proof data

Record hash (SHA-256)

43e377e2b760153d50f918e2b81d57b3c9ac977324997481ea2898272b447e0f

Signature (Ed25519, base64)

DdXXV1t/EgmgJkERx82EQ9TG9YirRpDO6X+5Ud/FV4O3eP211xLEd0nzi0gEcAFR4zWZR5pp2c8psg0GcJ9zCA==

Merkle root

172a3e0b3c9f8b02f52318e01ba6beb899404e00e91c15eebc4dea38467e1404

Merkle path

["43e5dfd911e6b7ad5f432a7c336126d6e16b62c960ddff475eb3b772d6e47941","2b021cc69227647c62b1218dc39aae5ba4ef5cba824295c8b297ed90a343f9a4","a9f1f5fa67e778625cdf49e3a7a6573c6f92db74d981565cd8dc76336d970eee","2aab6f3a12c21c118bd875280b1e97a380ab5ca7e9659bb191bd60ed01c7b7d5","3d40d0be6b929e2933d2f9b71da8be532ec6f9daf010cc6c8e4193d8acbe0a5d","80a51d23ae756bf95b00a7680e3288ebe89b0467738b53db2277715d6b57a2a5","539e360b248f3cbc6e8ccbf63368f75da040649bec99ceab2d1646df743d743c","60de7485d988f40be08bc26cd66e552544e0fff918e02fbdc8e3198663ae8199","8a69f689ec06c71a8ae67e0c867dba32bc6ca37aa63237cf7c9c775638d754e3","6b1c46c47b94061e2d4dafb17759a649bb5bb7160f99af57a2b0dea76f96ff25","3ec4297fcfe3c7d600e917ca9bcf98bbb4307092e314ca5673f766625c575cf3","e477fdbcf6b063496ff2a3252cbfc14714816788e388193432a67f7882370e8d","09afb18deb0eeaca577b5271c183d4b7283e7366611f65ab999ee122c433eef4","b2e250a62b44b0b9c303f91afd3aac8852fa6af504d7d68ed736141a3dd71161","7731d0ded4f51d151ea3e84474d1e27a6279e8756420c93cf5fec0abf7f11add"]

Anchored

2026-08-21

Public log entry

search.sigstore.dev, log index 2543025731 · entry 108e9186e8c5677a8971…

Expected log hash

19ecbe4a66d8adbd7c6057dbf6ed9be73485c248dba1e0c595279a908b3e8bea The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1787283443958","kind":"published-quote","locale":"fr","page":"product:smallpdf/sign-pdf/fr","quote":"J'ai dépensé 9 € et je ne peux ni enregistrer ni ajouter de signatures.","rating":1,"review_date":"2024-09-13","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.smallpdf.app.android","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (172a3e0b3c9f…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.