Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“application très pratique”
Google Play · 5/5 · 2025-07-23

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 3139760477

Proof data

Record hash (SHA-256): f512d3e980e049614efd7c258d8ff648284c5f2e7e26a86a91a9cd7d7557a9ff
Signature (Ed25519, base64): h6vZGl5htnPGaCVcuBwOcyUKCdtFioVgh+Doraz0Zftt+OkCPfWzVPh7iKjyAxd3YkprA0uPfa7j53n039HnAw==
Merkle root: 49133e6803d24035baa1544a5c730db93dbaf832df48f680ca855944337404a2
Merkle path: ["f5117d80bd66c8a517ff4c43c6164519fb2e995b414114cb48786b0ba74fe0f0","3664f0d8eb58b9291d8656fd3699706d958cc1090cf2d2819aa0a9adf596c897","e1abfff2182c84eefa998292284efec6ea0b310056382047cfd57a301d40a990","67263856bb7c4122e8ebf0f2ad36ac1d5502e9c6eb5c4c001c31770b9654130a","59a5cd40954c98c08210d6cd8937896ab4155c7eb9984a390e33166aca1ee521","5f1c0142483ba934a040c8198526e1eb2f40504e3a87609a04ccd99cc56d6463","ffcf9d8f5229814e42a9369ee8aaa510e5289e8e05ed95a9d49b6901adb22d0a","ddb738e18c0d84b8871f194b3457725f7a475196b2895a7d60a8dca9f1818125","61cf59352d5364e8b8c772084fbff83713a196a699b5272dda66a784227eefeb","99a0598d33328e634f8d315b4a0e9518a2a4a5b80bb7ea2def0981933c901e01","fca04f5a5a55ed2372386a1f25fce476adb7984b029685d26c1d54dd62ea4f50","3cc595f5376b7c6152362b2175e27a950acbbbf3965898d4ea5be445e3165082","573e30281798543ac2707059ca3c966f21958c0a972fe6cdc3a54117b3829e49","1fef2eea1ba7233240a645d2d99dcdcc4e3841bf30f06929c9f12592e46a0c14"]
Anchored: 2026-10-08
Public log entry: search.sigstore.dev, log index 3139760477 · entry 108e9186e8c5677ac88a…
Expected log hash: d54b6e5e20903e9be29e6a5973227ee9b3dbe61bdc0fa6481a5788472cd5976c The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1791428432986","kind":"published-quote","locale":"fr","page":"brand:atupri","quote":"application très pratique","rating":5,"review_date":"2025-07-23","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=ch.atupri.myatupri","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (49133e6803d2…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.