-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

To ensure the image has not been corrupted in transit or tampered with,
perform these two steps to cryptographically verify its integrity:

1. Verify that this file is signed by the TurnKey GNU/Linux Trixie Images key:

    $ curl https://raw.githubusercontent.com/turnkeylinux/common/19.x/keys/tkl-trixie-images.asc | gpg --import
    $ gpg --list-keys --with-fingerprint --with-subkey-fingerprint release-trixie-images@turnkeylinux.org

   The primary key fingerprint must be:

      DEE9 0D99 70AE 35D5 5B7C  6C2D C6D2 54B7 6A9D 9430

   The signing subkey fingerprint must be:

      21FC E5FF 2EC6 4131 8D9E  A8F7 D9FC 75C2 9D0A 033B

    $ gpg --verify turnkey-bugzilla-19.0-trixie-amd64.iso.hash

2. Recalculate either image checksum and confirm it matches:

    $ sha256sum turnkey-bugzilla-19.0-trixie-amd64.iso
      3261bf003ec294a04c28b33460d662a7adf5cc80b8e494a0119fc4106f481d24  turnkey-bugzilla-19.0-trixie-amd64.iso

    $ sha512sum turnkey-bugzilla-19.0-trixie-amd64.iso
      13f61e86e9d4b45c804f1cab786787ab99e115f0a722de448527776bfea1e28f8ace5b3bcb3eea1e3633ded2d1329fbf99cf894ead70d542add72a99a2ebc830  turnkey-bugzilla-19.0-trixie-amd64.iso

   Check either checksum automatically:

    $ sha256sum --ignore-missing -c turnkey-bugzilla-19.0-trixie-amd64.iso.hash
      turnkey-bugzilla-19.0-trixie-amd64.iso: OK

    $ sha512sum --ignore-missing -c turnkey-bugzilla-19.0-trixie-amd64.iso.hash
      turnkey-bugzilla-19.0-trixie-amd64.iso: OK

Key identifiers for audit use:

  Primary key fingerprint: DEE90D9970AE35D55B7C6C2DC6D254B76A9D9430
  Signing subkey fingerprint: 21FCE5FF2EC641318D9EA8F7D9FC75C29D0A033B
-----BEGIN PGP SIGNATURE-----
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=u6aD
-----END PGP SIGNATURE-----