Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“C'est très mauvais, sans préciser quel est le problème.”
Apple App Store · 2/5 · 2026-08-08

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2542879916

Proof data

Record hash (SHA-256): e876946ab002a4f7f2cf7ed9859f1c8e9327f8a24eca698e4dc9057969adbec0
Signature (Ed25519, base64): MJvin8qZof3+BDUtB0CmJFwWhZve80tNTKAyvN10BGMKeRzuYTKzucShcxvgAr2ZzleihKfwVHB8hgA4pM2YBw==
Merkle root: 681242bb8cfa94d3b60cc06de1bbe3e5e124dc1675276b11df0aaabc9faee58c
Merkle path: ["e8727ec741101f141b545fdfa81a919eb5251b73d55f19b1fd24a772c960c74c","3020e55534508728a148411f1232be9ccf2f34b7f0914f26b51bb79ea3789889","1c932880af9c0e86faa761efe94ecb0925270e24392cbc66bb1cd450c62fa081","eddfe7f5a0081427547aedbd7483f5eb51fc85d4b8e1701973cb82944f33f9e9","5f25ed29e2097a267f2afb139fa0c7e94b7909dcce1043480f8c6af526afbe14","d5f8abd02557a5523829de0cbcc0039976a962133a1f0a54f504fae39eb8133f","ce4b0241b2e753a16a81f665827e6c81c9ee9c388753c80c8b2061ee4df09a88","5201a40a682125d2e1f65ae8baff484235c37ad3a6f1fecf0cc7abe23b387c6c","defc05669a5920a340619ed6365a0f74a90506067311d29befe5f04ce907c87f","666b77b2e50eabfb622b3172836c5c671ec4beb53a3fdd7ad02e5f05a4113e59","dfac6d0698b6f64461c4c2f8bc28b0afaa0e89d511c9c28959610b8727935a56","1e694cb0875411a8524fef759f6d5c3b7af94da4bdc91e98423a7530d2b8d3c2","2e86d3fb14a64b45a2a5c3c87d2506bd32ec38d911482848308828159d2d2c9b","0931601ab88b17ced10d210b73b69d45855330e2f7d04827af69758de2cb8cd3"]
Anchored: 2026-08-21
Public log entry: search.sigstore.dev, log index 2542879916 · entry 108e9186e8c5677a2329…
Expected log hash: 8337812f20bf1207a3c96eed87ab975d7e92ac1421dcded24507b32e456b788f The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1787282728402","kind":"published-quote","locale":"fr","page":"brand:pixum","quote":"C'est très mauvais, sans préciser quel est le problème.","rating":2,"review_date":"2026-08-08","source":"Apple App Store","source_url":"https://apps.apple.com/de/app/id1319898516?see-all=reviews","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (681242bb8cfa…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.