Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Frais bas.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
7f0d870641d4706a8de32abdd293c419f15ddf3ae7d43e21daec5057dc3831b8
Signature (Ed25519, base64)
clL+YyH7olauGcPeV8LfJbjbZaI/ZSXdxbdei5MP4C9o6KWX66qrj0Gr7CSBLvBLB6uYY2dNcbIBWRU/HDMQDQ==
Merkle root
8a6ad893af0f0bb6c448016a777af61f3f4935afd82df0db132e64f813535715
Merkle path
["7f22878e0ec6beb8b7db1685c126c834c531b9db29d8ab3fc5788465663419f5","0a22385e0bc7ef0adf21113840079e8c2eb09f1973f0f83b341ae477bae3f086","fdfc0a7b0c712abb0bffb14efc4639bc5fbd02eceeb012a4495a85720236660e","b75a43b3dd318b673dc6649902082203d1e73cd5befcb0faeaa19274575c0c6c","9df884ceb12469f8ea302ef7273cdadb7e8ed9e587d639973a95c5465031ad00","3ff535982904bc1f0e0358c680f8ca909444b1b6ce0a1148f650c0308f3f7801","2d2b0b476ad8bad47229d2d5ff05ae58be737aa03de19d0c44ed839f88192d06","06fa2810eb91672a55e0b5f5bc6ebee0d70c3df7345a90aefc0aedfe0225aebd","5e264290c058262d7e39274d84b47e0c8ede442cec813689ec59aeec601244a9","e3ca0fb1c13fa26698e8ebf0ea550351cfddf5ae1ec9ef34194f189414b94416","ddfc662d7a710cd09b89d3ff4aa9d006161e2017822e9496291323eb001ce42a","73f1a430980a35bacc0025104e62589b7f6711bf08b3ba132110caa28e1df671","5284fa1b0195183d338070f05d29e0d94229e3402263e30318e4f273240fdf18","95de144e054f717eac0f186a52d131e0ff4674147622cce8cff3d2611e7b6e99","8834edd87c11ce9424175f1744f71345038aee1c5b6f350a6f7bc2a49b63e8e9"]
Anchored
2026-08-19
Public log entry
search.sigstore.dev, log index 2515144749 · entry 108e9186e8c5677a63b7…
Expected log hash
b6b79ad662332330e69c4ef135f6fb13ddc70048f846024d496aaa533f7f7fc0 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787137589246","kind":"published-quote","locale":"fr","page":"theme:findependent/price/fr","quote":"Frais bas.","rating":5,"review_date":"2026-05-09","source":"Apple App Store","source_url":"https://apps.apple.com/ch/app/id1510962836?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (8a6ad893af0f…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.