-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

To ensure the image has not been corrupted in transit or tampered with,
perform these two steps to cryptographically verify its integrity:

1. Verify that this file is signed by the TurnKey GNU/Linux Trixie Images key:

    $ curl https://raw.githubusercontent.com/turnkeylinux/common/19.x/keys/tkl-trixie-images.asc | gpg --import
    $ gpg --list-keys --with-fingerprint --with-subkey-fingerprint release-trixie-images@turnkeylinux.org

   The primary key fingerprint must be:

      DEE9 0D99 70AE 35D5 5B7C  6C2D C6D2 54B7 6A9D 9430

   The signing subkey fingerprint must be:

      21FC E5FF 2EC6 4131 8D9E  A8F7 D9FC 75C2 9D0A 033B

    $ gpg --verify turnkey-lapp-19.0-trixie-amd64.iso.hash

2. Recalculate either image checksum and confirm it matches:

    $ sha256sum turnkey-lapp-19.0-trixie-amd64.iso
      7317fe6a75288871c844f6218416d4f360e0104d974678740f44ddb60c1d9f5d  turnkey-lapp-19.0-trixie-amd64.iso

    $ sha512sum turnkey-lapp-19.0-trixie-amd64.iso
      a80a93a0cce1856e38a2fcd232197450cbd9e9f6ecf2ae5f08adc053cf882072a7e73d6201d9474d556bf2152e85877508b0e6a14b6fb1c9793c2b6553d0d823  turnkey-lapp-19.0-trixie-amd64.iso

   Check either checksum automatically:

    $ sha256sum --ignore-missing -c turnkey-lapp-19.0-trixie-amd64.iso.hash
      turnkey-lapp-19.0-trixie-amd64.iso: OK

    $ sha512sum --ignore-missing -c turnkey-lapp-19.0-trixie-amd64.iso.hash
      turnkey-lapp-19.0-trixie-amd64.iso: OK

Key identifiers for audit use:

  Primary key fingerprint: DEE90D9970AE35D55B7C6C2DC6D254B76A9D9430
  Signing subkey fingerprint: 21FCE5FF2EC641318D9EA8F7D9FC75C29D0A033B
-----BEGIN PGP SIGNATURE-----
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=PQ7v
-----END PGP SIGNATURE-----