-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 To ensure the image has not been corrupted in transit or tampered with, perform these two steps to cryptographically verify its integrity: 1. Verify that this file is signed by the TurnKey GNU/Linux Trixie Images key: $ curl https://raw.githubusercontent.com/turnkeylinux/common/19.x/keys/tkl-trixie-images.asc | gpg --import $ gpg --list-keys --with-fingerprint --with-subkey-fingerprint release-trixie-images@turnkeylinux.org The primary key fingerprint must be: DEE9 0D99 70AE 35D5 5B7C 6C2D C6D2 54B7 6A9D 9430 The signing subkey fingerprint must be: 21FC E5FF 2EC6 4131 8D9E A8F7 D9FC 75C2 9D0A 033B $ gpg --verify turnkey-cakephp-19.0-trixie-amd64.iso.hash 2. Recalculate either image checksum and confirm it matches: $ sha256sum turnkey-cakephp-19.0-trixie-amd64.iso 7541d67fb17d415d868b3aaf560dde910383cf3a6d0ed7f0a93a77a01b062e7b turnkey-cakephp-19.0-trixie-amd64.iso $ sha512sum turnkey-cakephp-19.0-trixie-amd64.iso 74e3a4baf7da7971c609a180b28bd4a8ea66c7bd220c764ee957feb0c2e6ae8cd213918b3f28fa417a67e3f0e2e4a26a1b2b49b7ec584c0b8cdba19d65a5bae2 turnkey-cakephp-19.0-trixie-amd64.iso Check either checksum automatically: $ sha256sum --ignore-missing -c turnkey-cakephp-19.0-trixie-amd64.iso.hash turnkey-cakephp-19.0-trixie-amd64.iso: OK $ sha512sum --ignore-missing -c turnkey-cakephp-19.0-trixie-amd64.iso.hash turnkey-cakephp-19.0-trixie-amd64.iso: OK Key identifiers for audit use: Primary key fingerprint: DEE90D9970AE35D55B7C6C2DC6D254B76A9D9430 Signing subkey fingerprint: 21FCE5FF2EC641318D9EA8F7D9FC75C29D0A033B -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEIfzl/y7GQTGNnqj32fx1wp0KAzsFAmqYi/oACgkQ2fx1wp0K AztVmA//bztAZMj4VG1lcAW4EmNtsQ9eXGmm2oC6j/NcbKqkDDPDnOKrYNkgwZTq uYLWek0D7Zz592QO0PaV8H5tTqsvcRkuMJjbl1/NWjw6n0zMtHbr9Zu9+i1GeMSK HcsbNSncjY4R39sJHjB4Z1nwmibWFljBAyBwgoG9UM3zh2RIiMBmHUGOgfUxkJ+5 inE/ymWfWdVqvPyKzlJs2zM1+18MIsntqfGve0J4hSV2G3+ha8l/erNT3gZ8qR2U M0kpCnTQFb15UOlZ6PiHGGnNQieEdSJyX/V/IcUmNVa/znQQkCq2BAmOGuH6eGzz sG0HbcrVPLAmQeur+ddHY5UIJnuMU8Uc0rOvhOaWlBrONWdfS4eFnenVxjhTZAj/ 8j2JWAkWXthcF4hkxyr+Q+XMbSBIAey2QTsRVOR9Xe8PGKUG/bQAPhefDMfQ8HTs ZH0ygO+gDkgFdtD4EDHmE1+8qWFuvxE7Y9jbL9+DMdfzOzLYw78334O7tQ2bj7Bk rcPShmdOKMVB653wA0ZHByjFT6LPCsNBdwtgC+etcd0Gm8+qHMrsWT9NBYz77az0 XxlnNlePjn+TJ5KizR0DmCV9KwNHGK9XUwYwg9IHSBtPg2u14NeN76e6M+uSgRjR dCylJfUmShDjzDrav5OeI4CN/opI3YG2ZAkmrDcod2d/QLEK34U= =/my0 -----END PGP SIGNATURE-----