Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“leur site internet et app sont très agréables et faciles à utiliser”
Google Play · 5/5 · 2025-01-18

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 3139760477

Proof data

Record hash (SHA-256): f619ba64d1d09a31d1db93e0c76d7c48e22339bf01dce7c77149c38175ddb4a3
Signature (Ed25519, base64): wCJcQxGQlKlFbxRm9olJfnnFcwUzLKeCdGxSHQjH0qP+nL88oj11PGdNzHQvF378gYWDiXQUIyYGEWag+k7BAg==
Merkle root: 49133e6803d24035baa1544a5c730db93dbaf832df48f680ca855944337404a2
Merkle path: ["f6166ccf6d7a893558fb4c6e2b64516c9a1fb40e60a4fb78e1d0aa55e4783441","c6c65f3a5a4b840bc3f75a5745bc110c9e314108919872700b6ce7a293d0d528","ca26c37985acfe16781e63966f32de9a56ae52578e9776631b56276cc7e61a20","0fd391537f3ac23951e25b7b098ee1b5393467f5d415e62bdf465f4ac020b7a4","aa40693d721b448e09d6733759a719f5879aa2592b8ab76db1f420e7258ebfd3","65982b75ecced7a82e30c62a2450f8ea38507ffae471c187cc41ffb8e59095e4","bfb42b22901a15ef2612f37ddd8d3c92e83e753b303c1af5ce6fbbc1c2ebb9e7","737fedf9a708c0a2f9a3d11bad99499e4512bc0ae262d42bce7ffa69bb7a5232","f261057fb2a91585359d5e26d6124634c9a854b4119bce949e2eaeb9b4fe7a07","d4063335f410af47d1320dc0aed4785c70d401d1d6647ad6a76fed70f21c03f8","fca04f5a5a55ed2372386a1f25fce476adb7984b029685d26c1d54dd62ea4f50","3cc595f5376b7c6152362b2175e27a950acbbbf3965898d4ea5be445e3165082","573e30281798543ac2707059ca3c966f21958c0a972fe6cdc3a54117b3829e49","1fef2eea1ba7233240a645d2d99dcdcc4e3841bf30f06929c9f12592e46a0c14"]
Anchored: 2026-10-08
Public log entry: search.sigstore.dev, log index 3139760477 · entry 108e9186e8c5677ac88a…
Expected log hash: d54b6e5e20903e9be29e6a5973227ee9b3dbe61bdc0fa6481a5788472cd5976c The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1791428432986","kind":"published-quote","locale":"fr","page":"brand:atupri","quote":"leur site internet et app sont très agréables et faciles à utiliser","rating":5,"review_date":"2025-01-18","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=ch.atupri.myatupri","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (49133e6803d2…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.