-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

To ensure the image has not been corrupted in transit or tampered with,
perform these two steps to cryptographically verify its integrity:

1. Verify that this file is signed by the TurnKey GNU/Linux Trixie Images key:

    $ curl https://raw.githubusercontent.com/turnkeylinux/common/19.x/keys/tkl-trixie-images.asc | gpg --import
    $ gpg --list-keys --with-fingerprint --with-subkey-fingerprint release-trixie-images@turnkeylinux.org

   The primary key fingerprint must be:

      DEE9 0D99 70AE 35D5 5B7C  6C2D C6D2 54B7 6A9D 9430

   The signing subkey fingerprint must be:

      21FC E5FF 2EC6 4131 8D9E  A8F7 D9FC 75C2 9D0A 033B

    $ gpg --verify turnkey-domain-controller-19.0-trixie-amd64.iso.hash

2. Recalculate either image checksum and confirm it matches:

    $ sha256sum turnkey-domain-controller-19.0-trixie-amd64.iso
      5a47c9003f231df806292ee8917c42bc51508120bef29d9ca772995c2636d5a8  turnkey-domain-controller-19.0-trixie-amd64.iso

    $ sha512sum turnkey-domain-controller-19.0-trixie-amd64.iso
      5f67322e731afdc2d0d03f18c66aabc550534e6d8b6715d9ed77db0c0da60156e93dc1153292ee79435c65e0f66d9858880195bfc43db5080d8615a27be1a14b  turnkey-domain-controller-19.0-trixie-amd64.iso

   Check either checksum automatically:

    $ sha256sum --ignore-missing -c turnkey-domain-controller-19.0-trixie-amd64.iso.hash
      turnkey-domain-controller-19.0-trixie-amd64.iso: OK

    $ sha512sum --ignore-missing -c turnkey-domain-controller-19.0-trixie-amd64.iso.hash
      turnkey-domain-controller-19.0-trixie-amd64.iso: OK

Key identifiers for audit use:

  Primary key fingerprint: DEE90D9970AE35D55B7C6C2DC6D254B76A9D9430
  Signing subkey fingerprint: 21FCE5FF2EC641318D9EA8F7D9FC75C29D0A033B
-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEIfzl/y7GQTGNnqj32fx1wp0KAzsFAmqYjAMACgkQ2fx1wp0K
Azuj3hAAj8QZlFUhACaqAX2qTj8jn+NuxkU+OZOb8emp/digLeQSYAnJsoYFu37d
FOmYPbkr60IFIqra8EsD2ENi5mmEUhssC3dQYv/b3IxhBwR6e9jvP5hmZjUy81zy
NuiJk3dtevNC834pAtupwl6r8fxrm/nOdi/9lBwNHxl252rkvDyKWqy0anMyTa0L
THflD7yngWyZmhS+jeYQ2vabPD1wQIDCvu8URkIcrkjFJIWTj4pRSck8WpCyoZjS
NtyzysqBsUFeljYiFycEbHEWkx6n9jWSo1yVgkGnKWBb1OWhYaPiNyEAa4gPOzOU
hfPdkg0QLE1dU4hVQpGSrgxctrQYXTcWmhnq5A5XU+JUSSMUjv9EzS2g+23IrCEn
Z+ZYmPyB6GT/QGm/4FNyiiCexA99Ld5L1+N7IDBDRfIb/mFSgQSq+yaVPVMzl6rm
LtOfA37ry2PxN+DU157+iQyRMIws290wthAUEOBR8UR768Y8PQBNDE8p19XVytBK
GQPEDGxnV1fnoDKP3juPXlhi1HNOTl1G0H3Qwyefi4klF0Gc1NwcOS3U2xVA3gc8
NrHC7TLncadHzd/JXKOiB9JRpeZ1t7QHCMXJow6/7uZ8pEYKjwEPSUkDdY58O5Cq
+tDQySEVz1oC/DxbkmBMSmfuEVIOTZ9UqpR/JXUwXTFYtbL36d0=
=ZpOW
-----END PGP SIGNATURE-----