-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

To ensure the image has not been corrupted in transit or tampered with,
perform these two steps to cryptographically verify its integrity:

1. Verify that this file is signed by the TurnKey GNU/Linux Trixie Images key:

    $ curl https://raw.githubusercontent.com/turnkeylinux/common/19.x/keys/tkl-trixie-images.asc | gpg --import
    $ gpg --list-keys --with-fingerprint --with-subkey-fingerprint release-trixie-images@turnkeylinux.org

   The primary key fingerprint must be:

      DEE9 0D99 70AE 35D5 5B7C  6C2D C6D2 54B7 6A9D 9430

   The signing subkey fingerprint must be:

      21FC E5FF 2EC6 4131 8D9E  A8F7 D9FC 75C2 9D0A 033B

    $ gpg --verify turnkey-espocrm-19.0-trixie-amd64.iso.hash

2. Recalculate either image checksum and confirm it matches:

    $ sha256sum turnkey-espocrm-19.0-trixie-amd64.iso
      287e15ab47255b9637bd2db393edf133e8f43cf5266f0c6b0d04064fab75c908  turnkey-espocrm-19.0-trixie-amd64.iso

    $ sha512sum turnkey-espocrm-19.0-trixie-amd64.iso
      1b0e25e1006fb50c5f764b02b0c4c256864ab243011f0a0c410f709918ff72dd2fb59634e08a6ba9e3ca9115680bc91d871d60f15ed22d41bee57d710c774aee  turnkey-espocrm-19.0-trixie-amd64.iso

   Check either checksum automatically:

    $ sha256sum --ignore-missing -c turnkey-espocrm-19.0-trixie-amd64.iso.hash
      turnkey-espocrm-19.0-trixie-amd64.iso: OK

    $ sha512sum --ignore-missing -c turnkey-espocrm-19.0-trixie-amd64.iso.hash
      turnkey-espocrm-19.0-trixie-amd64.iso: OK

Key identifiers for audit use:

  Primary key fingerprint: DEE90D9970AE35D55B7C6C2DC6D254B76A9D9430
  Signing subkey fingerprint: 21FCE5FF2EC641318D9EA8F7D9FC75C29D0A033B
-----BEGIN PGP SIGNATURE-----
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=yzQj
-----END PGP SIGNATURE-----