-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

To ensure the image has not been corrupted in transit or tampered with,
perform these two steps to cryptographically verify its integrity:

1. Verify that this file is signed by the TurnKey GNU/Linux Trixie Images key:

    $ curl https://raw.githubusercontent.com/turnkeylinux/common/19.x/keys/tkl-trixie-images.asc | gpg --import
    $ gpg --list-keys --with-fingerprint --with-subkey-fingerprint release-trixie-images@turnkeylinux.org

   The primary key fingerprint must be:

      DEE9 0D99 70AE 35D5 5B7C  6C2D C6D2 54B7 6A9D 9430

   The signing subkey fingerprint must be:

      21FC E5FF 2EC6 4131 8D9E  A8F7 D9FC 75C2 9D0A 033B

    $ gpg --verify turnkey-ibexa-19.0-trixie-amd64.iso.hash

2. Recalculate either image checksum and confirm it matches:

    $ sha256sum turnkey-ibexa-19.0-trixie-amd64.iso
      c4430b190ad2634d2646d105ae2713857777de6760285382dda52e863839ffa5  turnkey-ibexa-19.0-trixie-amd64.iso

    $ sha512sum turnkey-ibexa-19.0-trixie-amd64.iso
      39af2111ca71ac6d8f81f9a3b62d9f6f2a05f0bfb50317fd9f9b8ff3d8ce67e3d6e07c0434569d46de2250efcecd5671aebfac088815bf04941e0d1431780420  turnkey-ibexa-19.0-trixie-amd64.iso

   Check either checksum automatically:

    $ sha256sum --ignore-missing -c turnkey-ibexa-19.0-trixie-amd64.iso.hash
      turnkey-ibexa-19.0-trixie-amd64.iso: OK

    $ sha512sum --ignore-missing -c turnkey-ibexa-19.0-trixie-amd64.iso.hash
      turnkey-ibexa-19.0-trixie-amd64.iso: OK

Key identifiers for audit use:

  Primary key fingerprint: DEE90D9970AE35D55B7C6C2DC6D254B76A9D9430
  Signing subkey fingerprint: 21FCE5FF2EC641318D9EA8F7D9FC75C29D0A033B
-----BEGIN PGP SIGNATURE-----
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=DaRe
-----END PGP SIGNATURE-----