Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Les instructions sont très bien expliquées.”
Google Play · 5/5 · 2026-01-15

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 3139760477

Proof data

Record hash (SHA-256): dd77139465a61c5917ef26039b2aeda7ae5d3952985e6e7f1036fc582a3f7d0d
Signature (Ed25519, base64): MM95RFfhPr/zATPtxX7ykwh3uiYACdNUn+WG8PaWYqyzpTV9v9uPTu/PV2AWm9RnKSWtgl2I0ZMkwZfAGH4WDA==
Merkle root: 49133e6803d24035baa1544a5c730db93dbaf832df48f680ca855944337404a2
Merkle path: ["dd780001e50286c3ad0a1e7f8435b60d3c66f99cfb3b1ee00050d15f269d8772","4f91dd924d036a71f428ddf07dd71073e303b684b7aa1affe180f5f483ad840f","ed124276595ee77ef69958d4a497217c58baa360ab978122b91aef0fc8755929","41f97a9cba46d0691ec7cebc02be69afff6537a28ccc4ffd9f7a2351cdcc3305","c00369c5e0000cf89e389ef41868751d296ae17b9d4e77183cfc6d8905de2d60","802a2335f2d4f62ba2e57241c76a94aad7ca6611022d6e5b606f0924b0993e04","9200d1eabafbb98bb8ecb17938ea5f817ae64b041d7183e876b523ad06fbf528","559e3187af3a2da55f760665bdd3f5e823950c08aa055e84685fe0d7c52bcc87","909f26df4c6a4b574eab29d6bed68ba9c92b7708d62b40dee463e85747b2f3ec","154d3e2fc05a2bb620b236530b2670e8269b3b6d7a2af3da4b00e13c81a8a58d","f6c18210c671c9c4e4db47247469f39978c0d6669a942cb1ef0f909cd9621433","7924bec904b85c9f773d214a0a251d8b0a1110aa9f6113d6f6558b4ac58ea7e7","573e30281798543ac2707059ca3c966f21958c0a972fe6cdc3a54117b3829e49","1fef2eea1ba7233240a645d2d99dcdcc4e3841bf30f06929c9f12592e46a0c14"]
Anchored: 2026-10-08
Public log entry: search.sigstore.dev, log index 3139760477 · entry 108e9186e8c5677ac88a…
Expected log hash: d54b6e5e20903e9be29e6a5973227ee9b3dbe61bdc0fa6481a5788472cd5976c The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1791428432986","kind":"published-quote","locale":"fr","page":"brand:schulthess","quote":"Les instructions sont très bien expliquées.","rating":5,"review_date":"2026-01-15","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=ch.schulthess.mobile.android","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (49133e6803d2…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.