-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

To ensure the image has not been corrupted in transit or tampered with,
perform these two steps to cryptographically verify its integrity:

1. Verify that this file is signed by the TurnKey GNU/Linux Trixie Images key:

    $ curl https://raw.githubusercontent.com/turnkeylinux/common/19.x/keys/tkl-trixie-images.asc | gpg --import
    $ gpg --list-keys --with-fingerprint --with-subkey-fingerprint release-trixie-images@turnkeylinux.org

   The primary key fingerprint must be:

      DEE9 0D99 70AE 35D5 5B7C  6C2D C6D2 54B7 6A9D 9430

   The signing subkey fingerprint must be:

      21FC E5FF 2EC6 4131 8D9E  A8F7 D9FC 75C2 9D0A 033B

    $ gpg --verify turnkey-foswiki-19.0-trixie-amd64.iso.hash

2. Recalculate either image checksum and confirm it matches:

    $ sha256sum turnkey-foswiki-19.0-trixie-amd64.iso
      93d53da207dc116742e7c3fbfd297e092650b060dd7dd17b8307e155f4b591ff  turnkey-foswiki-19.0-trixie-amd64.iso

    $ sha512sum turnkey-foswiki-19.0-trixie-amd64.iso
      1806da3d5d3bc314f9cbea6657808e6dbfa7391793b4928307bf1388cb6abe92e2d5cd857b14fd754e305f00617f04c2eb3e79eb1371f976ce02677ee51e5290  turnkey-foswiki-19.0-trixie-amd64.iso

   Check either checksum automatically:

    $ sha256sum --ignore-missing -c turnkey-foswiki-19.0-trixie-amd64.iso.hash
      turnkey-foswiki-19.0-trixie-amd64.iso: OK

    $ sha512sum --ignore-missing -c turnkey-foswiki-19.0-trixie-amd64.iso.hash
      turnkey-foswiki-19.0-trixie-amd64.iso: OK

Key identifiers for audit use:

  Primary key fingerprint: DEE90D9970AE35D55B7C6C2DC6D254B76A9D9430
  Signing subkey fingerprint: 21FCE5FF2EC641318D9EA8F7D9FC75C29D0A033B
-----BEGIN PGP SIGNATURE-----
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=od8M
-----END PGP SIGNATURE-----