-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

To ensure the image has not been corrupted in transit or tampered with,
perform these two steps to cryptographically verify its integrity:

1. Verify that this file is signed by the TurnKey GNU/Linux Trixie Images key:

    $ curl https://raw.githubusercontent.com/turnkeylinux/common/19.x/keys/tkl-trixie-images.asc | gpg --import
    $ gpg --list-keys --with-fingerprint --with-subkey-fingerprint release-trixie-images@turnkeylinux.org

   The primary key fingerprint must be:

      DEE9 0D99 70AE 35D5 5B7C  6C2D C6D2 54B7 6A9D 9430

   The signing subkey fingerprint must be:

      21FC E5FF 2EC6 4131 8D9E  A8F7 D9FC 75C2 9D0A 033B

    $ gpg --verify turnkey-gitea-19.0-trixie-amd64.iso.hash

2. Recalculate either image checksum and confirm it matches:

    $ sha256sum turnkey-gitea-19.0-trixie-amd64.iso
      8caf77b738943498c67e82f431138757cd125de5fab04a860130808d6b41428c  turnkey-gitea-19.0-trixie-amd64.iso

    $ sha512sum turnkey-gitea-19.0-trixie-amd64.iso
      a4afd047e9a070e52fb57a70db21d1a3bcbd6a99adf3ca2dffe144d667ed6ae706788d77881e9e003fc4d36e42feddd6ca823b39082b3ff06f5d380ca0be9bc4  turnkey-gitea-19.0-trixie-amd64.iso

   Check either checksum automatically:

    $ sha256sum --ignore-missing -c turnkey-gitea-19.0-trixie-amd64.iso.hash
      turnkey-gitea-19.0-trixie-amd64.iso: OK

    $ sha512sum --ignore-missing -c turnkey-gitea-19.0-trixie-amd64.iso.hash
      turnkey-gitea-19.0-trixie-amd64.iso: OK

Key identifiers for audit use:

  Primary key fingerprint: DEE90D9970AE35D55B7C6C2DC6D254B76A9D9430
  Signing subkey fingerprint: 21FCE5FF2EC641318D9EA8F7D9FC75C29D0A033B
-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEIfzl/y7GQTGNnqj32fx1wp0KAzsFAmqYjBcACgkQ2fx1wp0K
AzuF5Q//SGT2B5mnoNbP6HumnBnKROTiqeglHG3cCUkhTtg585QfPOOIxTMlsMwS
Ywh7wZIJlvECRw1H6zhdVBGWXi9M2cvw26gf7U/CChNy7zI6WJUfsEw/sSR4HJ2n
B3WiODD93C19fBPqmXm30nr/Y/X/q0XWEXmDdBbHkHqI4ZgDTKpNdafCuZ1h9hKv
OoBwRnpxI54nq3YcWDI+9hHFd8J9YwNvlbyPJn+ZU7Z1Rd+l4djox0Pu/49xs8kq
sVz5YrHMk13MuDfy4Oz4pdv+1CtOk9bxmmbNoDtvD3amT9FoNkDD+bkeGfCdBn8z
mfGCtoy3IDOhxwUijfwwOOWYVaDsJ4rcKyVQKy+PD9zUNoFQbctTjnVjnwb6Elk0
FrILtjeaozfP/WcZGTCS0axNKcctiZcGhix1NdjAAJolv9hMOwAM9WXAq8T829Rs
5jz49iotyJlHAtPL+HqmkOUoe6x9gh2exnRQmGymi6//G3H5MNj6WazV7ZGRKq/k
8Jy8yhye2Qua5LKSR11FC/54udmTOkWEkvGvcUjD4npk6fjcSB/qSKysjOJpWVb6
EWmOhcBfdZjgUi1hoDwZimjZVW3A6ERha69IOjCdDoWZUvm7NyMTjC7ib6i5yTSR
FQXWm1Gpw7x5qhlJsFD//57Qb0Ys2uYczIutIO1LXlqPW6ZUGLw=
=BjjL
-----END PGP SIGNATURE-----