-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

To ensure the image has not been corrupted in transit or tampered with,
perform these two steps to cryptographically verify its integrity:

1. Verify that this file is signed by the TurnKey GNU/Linux Trixie Images key:

    $ curl https://raw.githubusercontent.com/turnkeylinux/common/19.x/keys/tkl-trixie-images.asc | gpg --import
    $ gpg --list-keys --with-fingerprint --with-subkey-fingerprint release-trixie-images@turnkeylinux.org

   The primary key fingerprint must be:

      DEE9 0D99 70AE 35D5 5B7C  6C2D C6D2 54B7 6A9D 9430

   The signing subkey fingerprint must be:

      21FC E5FF 2EC6 4131 8D9E  A8F7 D9FC 75C2 9D0A 033B

    $ gpg --verify turnkey-mantis-19.0-trixie-amd64.iso.hash

2. Recalculate either image checksum and confirm it matches:

    $ sha256sum turnkey-mantis-19.0-trixie-amd64.iso
      cb5795277b8a2cdf6fcb68366cfb0224ba3d661810af8ef7513565d9a62a11cc  turnkey-mantis-19.0-trixie-amd64.iso

    $ sha512sum turnkey-mantis-19.0-trixie-amd64.iso
      ff64cee6308ca92368f4f8708ccd34f0f273906dd0f158a25f37e74a64164e88437f96b679d9bebf5e8b257830be86274e23adf6ea9cfdb819cddb5ad82aea8c  turnkey-mantis-19.0-trixie-amd64.iso

   Check either checksum automatically:

    $ sha256sum --ignore-missing -c turnkey-mantis-19.0-trixie-amd64.iso.hash
      turnkey-mantis-19.0-trixie-amd64.iso: OK

    $ sha512sum --ignore-missing -c turnkey-mantis-19.0-trixie-amd64.iso.hash
      turnkey-mantis-19.0-trixie-amd64.iso: OK

Key identifiers for audit use:

  Primary key fingerprint: DEE90D9970AE35D55B7C6C2DC6D254B76A9D9430
  Signing subkey fingerprint: 21FCE5FF2EC641318D9EA8F7D9FC75C29D0A033B
-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEIfzl/y7GQTGNnqj32fx1wp0KAzsFAmqYjCMACgkQ2fx1wp0K
Azt2rg//XMJ4qiMkGCqKaNqvv5fVvybhzbmC/u6nAhfDlz6kAHkv5kN9JxpYeOBb
xdRH5eFFU746Zw9lkGzQr1vwcaq3LV6coMbFQaE67fRilSVHC8WNTm8aWAdcESDq
Vg7JBdjDxutTd5rl/ycAG5ke6HNGXS6OHsNCrItnVjn/wx8TJoQcRvKZb8sxIJNB
3Ma0f7CwK+ox8Nkm2jAGJzNpc+/84NK+0qQ2Xv+xgxc/ghyDJP1VuVOot2nun7Xo
QmanLbaoRYlqb/lTK+/d6rsPNOp690CaFZhfwyY/zFpeXVk7wWeQhzD7rXhQicR8
YTEqf0I8n8L2VL8bbu4i4DftDiVZCUQfWdvobAHLjefI/4DXUOJyNNNZY/M3DmR+
YqWnfTKFNyo2lEef6WbqBosTOXpcJSVerFeLylFD+EyEm/liD+5tzpgoFSdwzUHY
A6WsLOEFd1qCk3+KjyM+mRnVFnNphC/vnH2yyjfOpe4XvILsiiCDF4kBa1uUDScI
H6vpVT4VYoMYiQaIUEa6d8VFiiwXHhUN5Hdqrnxf+rMpwRtFalJWjbAVHCbolEPb
QAdLt+/VjTViQVnByavh0dF/72UgKWmwnku8dgN9srZGIhZl1X25fH7MkRayA87I
MZB6HV/rZfHoTNlD+lBEki+INTsdDq9vL2A5Gp1KPg7ZlGZtOYk=
=BQ2Q
-----END PGP SIGNATURE-----