-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

To ensure the image has not been corrupted in transit or tampered with,
perform these two steps to cryptographically verify its integrity:

1. Verify that this file is signed by the TurnKey GNU/Linux Trixie Images key:

    $ curl https://raw.githubusercontent.com/turnkeylinux/common/19.x/keys/tkl-trixie-images.asc | gpg --import
    $ gpg --list-keys --with-fingerprint --with-subkey-fingerprint release-trixie-images@turnkeylinux.org

   The primary key fingerprint must be:

      DEE9 0D99 70AE 35D5 5B7C  6C2D C6D2 54B7 6A9D 9430

   The signing subkey fingerprint must be:

      21FC E5FF 2EC6 4131 8D9E  A8F7 D9FC 75C2 9D0A 033B

    $ gpg --verify turnkey-canvas-19.0-trixie-amd64.iso.hash

2. Recalculate either image checksum and confirm it matches:

    $ sha256sum turnkey-canvas-19.0-trixie-amd64.iso
      30c3c1b9bee4480c43ca810404ee988e2059f3026bf16bd66e13538bc1c48cd8  turnkey-canvas-19.0-trixie-amd64.iso

    $ sha512sum turnkey-canvas-19.0-trixie-amd64.iso
      025a4377f2fc70e1be54588535638b09e17f1dbf7c2402f67f102e29c0f07aa1874a93a296512d9d197591a42c49ab4d431000d63ec0f0eb25528e41af0f3d9d  turnkey-canvas-19.0-trixie-amd64.iso

   Check either checksum automatically:

    $ sha256sum --ignore-missing -c turnkey-canvas-19.0-trixie-amd64.iso.hash
      turnkey-canvas-19.0-trixie-amd64.iso: OK

    $ sha512sum --ignore-missing -c turnkey-canvas-19.0-trixie-amd64.iso.hash
      turnkey-canvas-19.0-trixie-amd64.iso: OK

Key identifiers for audit use:

  Primary key fingerprint: DEE90D9970AE35D55B7C6C2DC6D254B76A9D9430
  Signing subkey fingerprint: 21FCE5FF2EC641318D9EA8F7D9FC75C29D0A033B
-----BEGIN PGP SIGNATURE-----
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=Jj1J
-----END PGP SIGNATURE-----