Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Génial. La meilleure alternative à WeTransfer.”
Google Play · 5/5 · 2026-07-20

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2514188040

Proof data

Record hash (SHA-256): 4d35986d09d2070c269c1ab6aee9f6489681aff9182842d68bbdb6e54ff3966d
Signature (Ed25519, base64): R736JH4m0TJ9q+guWeP1FsH7U9LcnGEyrvhfUd+FyU3HPtPGy7ENVtdi/HAQt3agrFmHrvW5Cwq0/0goQugYCg==
Merkle root: 6189a42bfe294c4034f316d047a716a5efecb511b8dbe64c4f7f543872c9bcee
Merkle path: ["4d32bbff272fa6a324c48db70ae20e2222d2f009358f9be23fce0e224d8c1a73","306f99d15c3b943eb4a468a9ffadacec293ec18ec73c492072157b834f77ae4c","97f09985824e575fce69806611cf5bb22eaecb99c3efb80c3ebe9e862d863d28","96af19fda722b4bb5e048a5740ce90bd5941b1dc085a2d6cf9eb8a13b70d1b99","c6cbde0faea48e717a6d679049aa54270e12ab57021d098b71aafb427ab291a8","fab996592eb057aceb18bbf26b304eebfe14f6f3ec1b0c7eeae6a0108b1a39a0","31125c6fe88c36e4ba8d41292f8691b06772757c23ac5e1a86908bec4ab25cc5","ba226982f11f2e30efa64d33c2907fd5d981871eb846f85b392502fda62f2b6b","d5c4400d455069a15d6485a45f612e06992f4c1efc79c4abcd6de33d46e92076","088a95612b4afe767b899126ff1bc594d0fb239e8542c1b2a0cf7a4f6fc04b34","74ae457169ff2ad10ce894619c88b86e1f04821dfa1fcb5dd4cf7473e0f63a11","f0126cad3e08b09b369afb9794b28b6cf8e526bcbdc25738f6f73f2a28a820f5","54715b684a7aa1790a643866cf5843a2432dcdea9093898d94c331b19a70418e","f786ac0debae9f349ddff34e280cc8a64ab579a73e0a3d3745d84df0612234b6","e36acd56aebd26af88e4e41e8d5bc2a1389f049dd914bc2c3da8d68ac2fede4b"]
Anchored: 2026-08-19
Public log entry: search.sigstore.dev, log index 2514188040 · entry 108e9186e8c5677ac9bd…
Expected log hash: b0fc1d11450dfeabf778635bd8a8264987fbb7e682331541ce1f5d7507d4e862 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1787125125654","kind":"published-quote","locale":"fr","page":"product:infomaniak/swisstransfer/fr","quote":"Génial. La meilleure alternative à WeTransfer.","rating":5,"review_date":"2026-07-20","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.infomaniak.swisstransfer","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (6189a42bfe29…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.