-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

To ensure the image has not been corrupted in transit or tampered with,
perform these two steps to cryptographically verify its integrity:

1. Verify that this file is signed by the TurnKey GNU/Linux Trixie Images key:

    $ curl https://raw.githubusercontent.com/turnkeylinux/common/19.x/keys/tkl-trixie-images.asc | gpg --import
    $ gpg --list-keys --with-fingerprint --with-subkey-fingerprint release-trixie-images@turnkeylinux.org

   The primary key fingerprint must be:

      DEE9 0D99 70AE 35D5 5B7C  6C2D C6D2 54B7 6A9D 9430

   The signing subkey fingerprint must be:

      21FC E5FF 2EC6 4131 8D9E  A8F7 D9FC 75C2 9D0A 033B

    $ gpg --verify turnkey-invoice-ninja-19.0-trixie-amd64.iso.hash

2. Recalculate either image checksum and confirm it matches:

    $ sha256sum turnkey-invoice-ninja-19.0-trixie-amd64.iso
      678a2d3b509741203cbaf269f2a79663d59d06213e6086f35762b96c777a50cb  turnkey-invoice-ninja-19.0-trixie-amd64.iso

    $ sha512sum turnkey-invoice-ninja-19.0-trixie-amd64.iso
      632e3691bff8502336c618016432195c07054a09d19fcfc6c65754d4ab8fcd22273f38c5583f857b846d49d39b38913ad0407abc9163b8fe87a9480f23b340b9  turnkey-invoice-ninja-19.0-trixie-amd64.iso

   Check either checksum automatically:

    $ sha256sum --ignore-missing -c turnkey-invoice-ninja-19.0-trixie-amd64.iso.hash
      turnkey-invoice-ninja-19.0-trixie-amd64.iso: OK

    $ sha512sum --ignore-missing -c turnkey-invoice-ninja-19.0-trixie-amd64.iso.hash
      turnkey-invoice-ninja-19.0-trixie-amd64.iso: OK

Key identifiers for audit use:

  Primary key fingerprint: DEE90D9970AE35D55B7C6C2DC6D254B76A9D9430
  Signing subkey fingerprint: 21FCE5FF2EC641318D9EA8F7D9FC75C29D0A033B
-----BEGIN PGP SIGNATURE-----
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=o/RH
-----END PGP SIGNATURE-----