-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

To ensure the image has not been corrupted in transit or tampered with,
perform these two steps to cryptographically verify its integrity:

1. Verify that this file is signed by the TurnKey GNU/Linux Trixie Images key:

    $ curl https://raw.githubusercontent.com/turnkeylinux/common/19.x/keys/tkl-trixie-images.asc | gpg --import
    $ gpg --list-keys --with-fingerprint --with-subkey-fingerprint release-trixie-images@turnkeylinux.org

   The primary key fingerprint must be:

      DEE9 0D99 70AE 35D5 5B7C  6C2D C6D2 54B7 6A9D 9430

   The signing subkey fingerprint must be:

      21FC E5FF 2EC6 4131 8D9E  A8F7 D9FC 75C2 9D0A 033B

    $ gpg --verify turnkey-core-19.0-trixie-amd64.iso.hash

2. Recalculate either image checksum and confirm it matches:

    $ sha256sum turnkey-core-19.0-trixie-amd64.iso
      3d90e71a3ba646c7a3f544e87cb32f36a00fe2d91d2f1606a6f76ff3b04fcd73  turnkey-core-19.0-trixie-amd64.iso

    $ sha512sum turnkey-core-19.0-trixie-amd64.iso
      50b263c4fee4f7920e85a69c040ffdc67b71b09e17f0099fdeee2ffe9f87828a4ec623b699f18cabefcf9aacbdd5e0bddb45c123272aeda361fa1cb6403cac99  turnkey-core-19.0-trixie-amd64.iso

   Check either checksum automatically:

    $ sha256sum --ignore-missing -c turnkey-core-19.0-trixie-amd64.iso.hash
      turnkey-core-19.0-trixie-amd64.iso: OK

    $ sha512sum --ignore-missing -c turnkey-core-19.0-trixie-amd64.iso.hash
      turnkey-core-19.0-trixie-amd64.iso: OK

Key identifiers for audit use:

  Primary key fingerprint: DEE90D9970AE35D55B7C6C2DC6D254B76A9D9430
  Signing subkey fingerprint: 21FCE5FF2EC641318D9EA8F7D9FC75C29D0A033B
-----BEGIN PGP SIGNATURE-----
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=A/+/
-----END PGP SIGNATURE-----