-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

To ensure the image has not been corrupted in transit or tampered with,
perform these two steps to cryptographically verify its integrity:

1. Verify that this file is signed by the TurnKey GNU/Linux Trixie Images key:

    $ curl https://raw.githubusercontent.com/turnkeylinux/common/19.x/keys/tkl-trixie-images.asc | gpg --import
    $ gpg --list-keys --with-fingerprint --with-subkey-fingerprint release-trixie-images@turnkeylinux.org

   The primary key fingerprint must be:

      DEE9 0D99 70AE 35D5 5B7C  6C2D C6D2 54B7 6A9D 9430

   The signing subkey fingerprint must be:

      21FC E5FF 2EC6 4131 8D9E  A8F7 D9FC 75C2 9D0A 033B

    $ gpg --verify turnkey-e107-19.0-trixie-amd64.iso.hash

2. Recalculate either image checksum and confirm it matches:

    $ sha256sum turnkey-e107-19.0-trixie-amd64.iso
      6aa1704477a70379407889f830044d17932e57bef9f8d3e81818ea07b30dce6f  turnkey-e107-19.0-trixie-amd64.iso

    $ sha512sum turnkey-e107-19.0-trixie-amd64.iso
      96d6d74f8a2514bf298c4966b2494dfefb508c63e949a0b46645cbe5b9862e358b7d3a51bbcafd70f0d59c006406cc2620928126ef3bf19c1e9aa9f30026d9bc  turnkey-e107-19.0-trixie-amd64.iso

   Check either checksum automatically:

    $ sha256sum --ignore-missing -c turnkey-e107-19.0-trixie-amd64.iso.hash
      turnkey-e107-19.0-trixie-amd64.iso: OK

    $ sha512sum --ignore-missing -c turnkey-e107-19.0-trixie-amd64.iso.hash
      turnkey-e107-19.0-trixie-amd64.iso: OK

Key identifiers for audit use:

  Primary key fingerprint: DEE90D9970AE35D55B7C6C2DC6D254B76A9D9430
  Signing subkey fingerprint: 21FCE5FF2EC641318D9EA8F7D9FC75C29D0A033B
-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEIfzl/y7GQTGNnqj32fx1wp0KAzsFAmqYjAcACgkQ2fx1wp0K
Azs4jg/+N2zCUX1cJTXo+zlWdSYVPmIzdpyfN+D8HQmPjt1ZwVUKYwmFFCGoqWmZ
ePRM2gjJMNniVAStkCrdMsVaDzYenpGWNRWFCw3m2IxlEotepDqqUT4d6s/YrDlT
rawSW4J+upv879oNZrcc95fr+lv85/8M0Ryc0+jqvhYhjxXV1eRMvlPwIy5zE3qi
b8ACycIC8GIzxKoe9CPkTdx4+BUkuiC08YDMksMRzTfEXJquJWatwap2hVdIgYrs
ae/APbtwWISE0MV5KFAAacLGC47QazUHUe+7OPQ4Zwnu55dW9PW9oPcSOfYG+k8Q
dV74UMrE5a9W3a4/wsaTxrkdRRUEVfXeOtHtU2YnboIJOOrLYrvvSYtnW0ELCMHJ
ptnKxW5yc2vQVQDk4pjf92e9rIEnlj/z2/olrdUCjcT5pU9NmqWfIQNzEdFAqjNA
9HUAebPcPLs6UDLORajEQue9pieNN/RUtlRV1Kgi9d5SK4g99wdFA/KI2tBs86oN
NJc6FqAcBlW0655mvis7qbsPWp1zNlArM92Wn7HaHTgwqLdWlEIq3qopoIVjfIZS
XRraqgaQQnx8O0jfFjX7KzD7xgbUft8nW/rap1IGdJgmpTfI6QoReBdek1poRzJa
S/+Nc1KNC9tY3Uw1fJ87J6tG/d8WSjGGLT4bElJKM495+I9AJFk=
=zVtP
-----END PGP SIGNATURE-----