-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

To ensure the image has not been corrupted in transit or tampered with,
perform these two steps to cryptographically verify its integrity:

1. Verify that this file is signed by the TurnKey GNU/Linux Trixie Images key:

    $ curl https://raw.githubusercontent.com/turnkeylinux/common/19.x/keys/tkl-trixie-images.asc | gpg --import
    $ gpg --list-keys --with-fingerprint --with-subkey-fingerprint release-trixie-images@turnkeylinux.org

   The primary key fingerprint must be:

      DEE9 0D99 70AE 35D5 5B7C  6C2D C6D2 54B7 6A9D 9430

   The signing subkey fingerprint must be:

      21FC E5FF 2EC6 4131 8D9E  A8F7 D9FC 75C2 9D0A 033B

    $ gpg --verify turnkey-bookstack-19.0-trixie-amd64.iso.hash

2. Recalculate either image checksum and confirm it matches:

    $ sha256sum turnkey-bookstack-19.0-trixie-amd64.iso
      858d844dd873ad2bb159d28715cec3c1c65789332dddb857c5cd07aed5e5c5b8  turnkey-bookstack-19.0-trixie-amd64.iso

    $ sha512sum turnkey-bookstack-19.0-trixie-amd64.iso
      8dc0eda9d9b01a628da2a56ab67e39b798f02befa749bb2b445ffc293faeec0a4381ace6949d23f906d94030752cf8afcc246f2efd977294236bf05ec64ff515  turnkey-bookstack-19.0-trixie-amd64.iso

   Check either checksum automatically:

    $ sha256sum --ignore-missing -c turnkey-bookstack-19.0-trixie-amd64.iso.hash
      turnkey-bookstack-19.0-trixie-amd64.iso: OK

    $ sha512sum --ignore-missing -c turnkey-bookstack-19.0-trixie-amd64.iso.hash
      turnkey-bookstack-19.0-trixie-amd64.iso: OK

Key identifiers for audit use:

  Primary key fingerprint: DEE90D9970AE35D55B7C6C2DC6D254B76A9D9430
  Signing subkey fingerprint: 21FCE5FF2EC641318D9EA8F7D9FC75C29D0A033B
-----BEGIN PGP SIGNATURE-----
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=8m+J
-----END PGP SIGNATURE-----