-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

To ensure the image has not been corrupted in transit or tampered with,
perform these two steps to cryptographically verify its integrity:

1. Verify that this file is signed by the TurnKey GNU/Linux Trixie Images key:

    $ curl https://raw.githubusercontent.com/turnkeylinux/common/19.x/keys/tkl-trixie-images.asc | gpg --import
    $ gpg --list-keys --with-fingerprint --with-subkey-fingerprint release-trixie-images@turnkeylinux.org

   The primary key fingerprint must be:

      DEE9 0D99 70AE 35D5 5B7C  6C2D C6D2 54B7 6A9D 9430

   The signing subkey fingerprint must be:

      21FC E5FF 2EC6 4131 8D9E  A8F7 D9FC 75C2 9D0A 033B

    $ gpg --verify turnkey-fileserver-19.0-trixie-amd64.iso.hash

2. Recalculate either image checksum and confirm it matches:

    $ sha256sum turnkey-fileserver-19.0-trixie-amd64.iso
      6cc957ff97318a0cb0c672a64320cd69091660deb17f86f5fdcc8bdabdbf9ef8  turnkey-fileserver-19.0-trixie-amd64.iso

    $ sha512sum turnkey-fileserver-19.0-trixie-amd64.iso
      2bdb2323baa6732e07f251b9c18e42571065bc1445c0d841be73a3c54052583426627c39ba658a622e3b68412aed5d0320641641f43ec7e1dc79c914d2136c5c  turnkey-fileserver-19.0-trixie-amd64.iso

   Check either checksum automatically:

    $ sha256sum --ignore-missing -c turnkey-fileserver-19.0-trixie-amd64.iso.hash
      turnkey-fileserver-19.0-trixie-amd64.iso: OK

    $ sha512sum --ignore-missing -c turnkey-fileserver-19.0-trixie-amd64.iso.hash
      turnkey-fileserver-19.0-trixie-amd64.iso: OK

Key identifiers for audit use:

  Primary key fingerprint: DEE90D9970AE35D55B7C6C2DC6D254B76A9D9430
  Signing subkey fingerprint: 21FCE5FF2EC641318D9EA8F7D9FC75C29D0A033B
-----BEGIN PGP SIGNATURE-----
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=n8v0
-----END PGP SIGNATURE-----