-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

To ensure the image has not been corrupted in transit or tampered with,
perform these two steps to cryptographically verify its integrity:

1. Verify that this file is signed by the TurnKey GNU/Linux Trixie Images key:

    $ curl https://raw.githubusercontent.com/turnkeylinux/common/19.x/keys/tkl-trixie-images.asc | gpg --import
    $ gpg --list-keys --with-fingerprint --with-subkey-fingerprint release-trixie-images@turnkeylinux.org

   The primary key fingerprint must be:

      DEE9 0D99 70AE 35D5 5B7C  6C2D C6D2 54B7 6A9D 9430

   The signing subkey fingerprint must be:

      21FC E5FF 2EC6 4131 8D9E  A8F7 D9FC 75C2 9D0A 033B

    $ gpg --verify turnkey-concrete-cms-19.0-trixie-amd64.iso.hash

2. Recalculate either image checksum and confirm it matches:

    $ sha256sum turnkey-concrete-cms-19.0-trixie-amd64.iso
      6733b0218bd1ebe5df20bf3cceafd002af875a56f855db01f6492e68a145aced  turnkey-concrete-cms-19.0-trixie-amd64.iso

    $ sha512sum turnkey-concrete-cms-19.0-trixie-amd64.iso
      f1cfa8697542dea37124768d07566eff0b485409d1854d17671c49ef8a54d4ea1386e1b477d516256328055778287e44958ebe837226953a8f8c7fe908add6a6  turnkey-concrete-cms-19.0-trixie-amd64.iso

   Check either checksum automatically:

    $ sha256sum --ignore-missing -c turnkey-concrete-cms-19.0-trixie-amd64.iso.hash
      turnkey-concrete-cms-19.0-trixie-amd64.iso: OK

    $ sha512sum --ignore-missing -c turnkey-concrete-cms-19.0-trixie-amd64.iso.hash
      turnkey-concrete-cms-19.0-trixie-amd64.iso: OK

Key identifiers for audit use:

  Primary key fingerprint: DEE90D9970AE35D55B7C6C2DC6D254B76A9D9430
  Signing subkey fingerprint: 21FCE5FF2EC641318D9EA8F7D9FC75C29D0A033B
-----BEGIN PGP SIGNATURE-----
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=TDfi
-----END PGP SIGNATURE-----