-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

To ensure the image has not been corrupted in transit or tampered with,
perform these two steps to cryptographically verify its integrity:

1. Verify that this file is signed by the TurnKey GNU/Linux Trixie Images key:

    $ curl https://raw.githubusercontent.com/turnkeylinux/common/19.x/keys/tkl-trixie-images.asc | gpg --import
    $ gpg --list-keys --with-fingerprint --with-subkey-fingerprint release-trixie-images@turnkeylinux.org

   The primary key fingerprint must be:

      DEE9 0D99 70AE 35D5 5B7C  6C2D C6D2 54B7 6A9D 9430

   The signing subkey fingerprint must be:

      21FC E5FF 2EC6 4131 8D9E  A8F7 D9FC 75C2 9D0A 033B

    $ gpg --verify turnkey-jenkins-19.0-trixie-amd64.iso.hash

2. Recalculate either image checksum and confirm it matches:

    $ sha256sum turnkey-jenkins-19.0-trixie-amd64.iso
      f7fbafd41a2cd397bef98502ec2917c8e4bb81307124d268cd46fa4881c01c0f  turnkey-jenkins-19.0-trixie-amd64.iso

    $ sha512sum turnkey-jenkins-19.0-trixie-amd64.iso
      c0ce368f7b9c8f2bdd46aa0de74239b612e653b5a8a42f3a70f4334d1988994e8d5500ce80402846c81a80e4e87a902d5962a0c0a6e815b4f623e8cc5e44f69c  turnkey-jenkins-19.0-trixie-amd64.iso

   Check either checksum automatically:

    $ sha256sum --ignore-missing -c turnkey-jenkins-19.0-trixie-amd64.iso.hash
      turnkey-jenkins-19.0-trixie-amd64.iso: OK

    $ sha512sum --ignore-missing -c turnkey-jenkins-19.0-trixie-amd64.iso.hash
      turnkey-jenkins-19.0-trixie-amd64.iso: OK

Key identifiers for audit use:

  Primary key fingerprint: DEE90D9970AE35D55B7C6C2DC6D254B76A9D9430
  Signing subkey fingerprint: 21FCE5FF2EC641318D9EA8F7D9FC75C29D0A033B
-----BEGIN PGP SIGNATURE-----
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=l3Xu
-----END PGP SIGNATURE-----