-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

To ensure the image has not been corrupted in transit or tampered with,
perform these two steps to cryptographically verify its integrity:

1. Verify that this file is signed by the TurnKey GNU/Linux Trixie Images key:

    $ curl https://raw.githubusercontent.com/turnkeylinux/common/19.x/keys/tkl-trixie-images.asc | gpg --import
    $ gpg --list-keys --with-fingerprint --with-subkey-fingerprint release-trixie-images@turnkeylinux.org

   The primary key fingerprint must be:

      DEE9 0D99 70AE 35D5 5B7C  6C2D C6D2 54B7 6A9D 9430

   The signing subkey fingerprint must be:

      21FC E5FF 2EC6 4131 8D9E  A8F7 D9FC 75C2 9D0A 033B

    $ gpg --verify turnkey-lamp-19.0-trixie-amd64.iso.hash

2. Recalculate either image checksum and confirm it matches:

    $ sha256sum turnkey-lamp-19.0-trixie-amd64.iso
      23250c723188b024c70df3961ccb147b6b9bdf4d020dac4df07cf0059d91eccd  turnkey-lamp-19.0-trixie-amd64.iso

    $ sha512sum turnkey-lamp-19.0-trixie-amd64.iso
      31835a74890d2f1069afdeb087a98c34955c5d53f47e593fa198e5d1c25a7791f141ed24a4564c24b83661fffc0fa49edde03edb8a69099e9707bd7a512b0d93  turnkey-lamp-19.0-trixie-amd64.iso

   Check either checksum automatically:

    $ sha256sum --ignore-missing -c turnkey-lamp-19.0-trixie-amd64.iso.hash
      turnkey-lamp-19.0-trixie-amd64.iso: OK

    $ sha512sum --ignore-missing -c turnkey-lamp-19.0-trixie-amd64.iso.hash
      turnkey-lamp-19.0-trixie-amd64.iso: OK

Key identifiers for audit use:

  Primary key fingerprint: DEE90D9970AE35D55B7C6C2DC6D254B76A9D9430
  Signing subkey fingerprint: 21FCE5FF2EC641318D9EA8F7D9FC75C29D0A033B
-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEIfzl/y7GQTGNnqj32fx1wp0KAzsFAmqYjB8ACgkQ2fx1wp0K
Azs17w/9EhruUv8F7cumJFUnbCU1N95o6vIwoWkSEXVUZbxSwijnjl9zhE9esuZr
u3gIQmpqGVUgUNsxyjYafT6U/x4+cMJ34e3Sfu+/zU+jW+IVVYCsZyY5kizpt+zR
VEt3DvPiTusyqE8TLvQm5RPHjge3y3TjfYuVdaY32T5NDN91wwCqVoYkPafyZlAa
RsjQ98Uz1qKi0Bfve0Rj1qatqLdxeiiRzEcB0M50AEU8+qm1Xpmpg2GHUUInbtwN
8ZXKXjiiW1PU4KBcS3DfjA5ameAmjXYLOkjJJFBxKSa526J8osx8ya0aGhkjWOdU
ykKS0TRM+YuZhJ6q3l+mW0MIVcsu7FkovWJ6zls6vUoS900EcSKdESDfn67gxp4t
qLPwAs/HF6tRK8/xGq28vGzp0NXTZnsOR6G6ylns/G3wBvjlIBLUrZFNQ2JA4xMM
Y+tjgxJ1KLzvROCihjLgTP+G+k6N7SkwjtbbJg0OpcepuILTH6FzQlXhjEqpZRhi
ixrd0leO54Z1Q9mu0HUsse4lXE5E6Yk4VxLklKYRyMWILdOvIeE6CKydbtFq3ntd
8UkibZ6I9GsiewS4uqT0Pkroe16m9SGU5P9xQcP03ZkDD3y6oGjnHXGc8QXQIC/j
Mp6zHEZU5VytK4mAU8p5a/Zxv4hjLPHHiuu9rhx/Mdw4zw2c2qc=
=gS6/
-----END PGP SIGNATURE-----