-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

To ensure the image has not been corrupted in transit or tampered with,
perform these two steps to cryptographically verify its integrity:

1. Verify that this file is signed by the TurnKey GNU/Linux Trixie Images key:

    $ curl https://raw.githubusercontent.com/turnkeylinux/common/19.x/keys/tkl-trixie-images.asc | gpg --import
    $ gpg --list-keys --with-fingerprint --with-subkey-fingerprint release-trixie-images@turnkeylinux.org

   The primary key fingerprint must be:

      DEE9 0D99 70AE 35D5 5B7C  6C2D C6D2 54B7 6A9D 9430

   The signing subkey fingerprint must be:

      21FC E5FF 2EC6 4131 8D9E  A8F7 D9FC 75C2 9D0A 033B

    $ gpg --verify turnkey-lighttpd-php-fastcgi-19.0-trixie-amd64.iso.hash

2. Recalculate either image checksum and confirm it matches:

    $ sha256sum turnkey-lighttpd-php-fastcgi-19.0-trixie-amd64.iso
      f9329df611044718ff40f57c962a9de059589b366f8a27ca9c3b5a9e0183188f  turnkey-lighttpd-php-fastcgi-19.0-trixie-amd64.iso

    $ sha512sum turnkey-lighttpd-php-fastcgi-19.0-trixie-amd64.iso
      17661a0271e2e07a0fc33ebe237fd3b1102f2a76a982a91a7244b39f73261cff529bde02337d8613bc152c4e4195f2cc30290d83eea8d538731c465d8048a781  turnkey-lighttpd-php-fastcgi-19.0-trixie-amd64.iso

   Check either checksum automatically:

    $ sha256sum --ignore-missing -c turnkey-lighttpd-php-fastcgi-19.0-trixie-amd64.iso.hash
      turnkey-lighttpd-php-fastcgi-19.0-trixie-amd64.iso: OK

    $ sha512sum --ignore-missing -c turnkey-lighttpd-php-fastcgi-19.0-trixie-amd64.iso.hash
      turnkey-lighttpd-php-fastcgi-19.0-trixie-amd64.iso: OK

Key identifiers for audit use:

  Primary key fingerprint: DEE90D9970AE35D55B7C6C2DC6D254B76A9D9430
  Signing subkey fingerprint: 21FCE5FF2EC641318D9EA8F7D9FC75C29D0A033B
-----BEGIN PGP SIGNATURE-----
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=1ksI
-----END PGP SIGNATURE-----