Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“j'ai l'impression qu'il est fait pour moi”
Google Play · 5/5 · 2026-04-02

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2621591821

Proof data

Record hash (SHA-256): 5600610b4133a99e53b3ea6af278d5ad991deb25e0ffd8bd9c651b1613b154aa
Signature (Ed25519, base64): VVCRTc4WAL0ZYARID8A/9dGSNdQYzHmeAVyOp2DnXbp7edSv1Zh4+hLDt3PmLa65+JnjShUsBIIzYVVzTnlvDQ==
Merkle root: 80ef8d8174e5c9e41c4b3e86fd7f016ae3808fd6df1be7f458d6b538ad4a1573
Merkle path: ["55fe1d0dbb460bb7a70221669242a5ae2193afcb6aff5cc2eb794b625d76ebfb","9a57cabe0807dca2d20bd6a4b62c46cec8c1730f0d439332fbe7802aef0a479f","783deb8e2cbe4a15b4a837ad43c41e481731fb94ba5b62d894206c5707cee3b7","664d0e60541d1f7bbafe603e18933108eecbea34af30e41ce5cb3fc06e62212d","967b65512e16f7935cc884327efeb2ad27898c9f88d2557f6aea16dd16c887ac","eeec745d544607a1c40bfee92ceace513c82c45485fd0c5d5e9a645cb7e5198e","dbd3e81139103466f523eba3028bff79cb55da2d28820a8363df1e352a941b68","295478cd89ad3ea48b77bf3b3e4d1c7c1fe6bc816daf7728acf2cd1568e56e1f","4300e33b2819ee14fc31d03d2e5befec64164060b048fe1473c65135ce2469cc","b9a79bb491ef2d4d406a048d0c4771cdd7ddb2a2c1b7f585ec3f280e5de8232f","6f2c28d6eddcd9662d0295841b07f067399dccaa34e6204eae572ff9a5649ba8","ea6824e74207fd755b38795cc668a97db50fd003715550cd6f3d5bc4d8c509f9","25653b5d37d47e652724b2c58205b99288fb1e24f7af82cf1405ea42969cdf44","6e65afb9564f3cc8ff91301d96b8fc4fbac4c77bfb9c9dbe43ce13006661d50d","8d9e2142445a56a1b8facbbfea379c6a3fe5da494546393de95f71ea2d5e97f9"]
Anchored: 2026-08-28
Public log entry: search.sigstore.dev, log index 2621591821 · entry 108e9186e8c5677aaebc…
Expected log hash: 1103461f2f136c93d3dd608a948686a2f30160cf05200779542dada269979b94 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1787890464756","kind":"published-quote","locale":"fr","page":"theme:acrobat/fit/fr","quote":"j'ai l'impression qu'il est fait pour moi","rating":5,"review_date":"2026-04-02","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.adobe.reader","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (80ef8d8174e5…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.