Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Malheureusement il ne s'agit que d'une sauvegarde, pas d'une véritable synchronisation”
Google Play · 2/5 · 2026-02-04

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2514851395

Proof data

Record hash (SHA-256): 47f84099ab90f4bb96c70d0dea0104642e63eeac4b7d8a6c5f2d4f4b64804338
Signature (Ed25519, base64): jNiNzUJ2fd6GG2LE7/WuWDcOTQFldZyTRscfe9derbBP39reuDNuI9cC389+rMGoImfa+tKSPKt7cq2ZOknuAA==
Merkle root: b6da35820db152d3d2c0cee337545e3489f0422a146fcc8c60737b1d3a3ef55c
Merkle path: ["47fa69ea26468883c6b04b7e47db16c183a77916e9414a0fe063b0213c9422b1","108f856d6ef70a0e2306c1fe9a0bc8242daaad71839a858db6979555f72088e1","a56ea4993a546a38c9696c7720946531e6a0cedcf514ab372eeba4b34ac8eb30","fdf79734b5d42c83670768e56760671e2d7eb233f81c92f93d06fd28ce1e64fc","7b98da7930a9e5d973d54ce1f019d6aa019925ce3a720c39b69ce14bfc33ab1b","1dce5666778bc4fe4cbc37acb0ad769a95fa83087ab2e5cb7d70c29b45d384b5","643fc184ad4b855428b1fd669ecd6886ebfb643ca3984f3caa8b1d8a59ec23d7","2cb0ccdf620a732732a75029c55ce9d86cf54246135fe0cb78591d3203d53265","9cf1d9db2defb41ef50e1d5d20bf716860548d1fe62e2e54b1302126ba2c487c","8eac201734e25dfa91871febc92c6c7a0731891b06ea5a53387ba48c44101609","9c05482c182ad0e5a1bdc91cec6243e52c25ea3e684a9ae7d07b22e381f0169f","06ebcf4f421280990aa40be72bace95a1c58897501e8472347512cbf61f3441a","1c4a3fbf336b1dbbe624a981829b71610e2551e155c099783fe5f318fcf85e8a","0e90fbed1cd619e0c2620a1f61162a7af0ed873785a7985f4469ef4721ad000f","c54d917d90cf6041da53ed8de4347323c6a7de99e787dde7349330851a57a3d5"]
Anchored: 2026-08-19
Public log entry: search.sigstore.dev, log index 2514851395 · entry 108e9186e8c5677a4f62…
Expected log hash: 687a04ce8b1c63a953fd353f279012a3ef08c4ad12d885582b1b6ee85d05b900 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1787134378129","kind":"published-quote","locale":"fr","page":"product:infomaniak/swiss-backup/fr","quote":"Malheureusement il ne s'agit que d'une sauvegarde, pas d'une véritable synchronisation","rating":2,"review_date":"2026-02-04","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.infomaniak.drive","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (b6da35820db1…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.