-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

To ensure the image has not been corrupted in transit or tampered with,
perform these two steps to cryptographically verify its integrity:

1. Verify that this file is signed by the TurnKey GNU/Linux Trixie Images key:

    $ curl https://raw.githubusercontent.com/turnkeylinux/common/19.x/keys/tkl-trixie-images.asc | gpg --import
    $ gpg --list-keys --with-fingerprint --with-subkey-fingerprint release-trixie-images@turnkeylinux.org

   The primary key fingerprint must be:

      DEE9 0D99 70AE 35D5 5B7C  6C2D C6D2 54B7 6A9D 9430

   The signing subkey fingerprint must be:

      21FC E5FF 2EC6 4131 8D9E  A8F7 D9FC 75C2 9D0A 033B

    $ gpg --verify turnkey-matomo-19.0-trixie-amd64.iso.hash

2. Recalculate either image checksum and confirm it matches:

    $ sha256sum turnkey-matomo-19.0-trixie-amd64.iso
      3a37ddaf1fddac3223544df701df0099a99c61b40725804299e5496c5d415e69  turnkey-matomo-19.0-trixie-amd64.iso

    $ sha512sum turnkey-matomo-19.0-trixie-amd64.iso
      999e9bd1bdb92c12e4a27da13809e118f9a7845c8f12107816178401edb7e160868b9e6bd5839f6f903cd26522efb7221749c648569af8b80256ae88ec2d4a40  turnkey-matomo-19.0-trixie-amd64.iso

   Check either checksum automatically:

    $ sha256sum --ignore-missing -c turnkey-matomo-19.0-trixie-amd64.iso.hash
      turnkey-matomo-19.0-trixie-amd64.iso: OK

    $ sha512sum --ignore-missing -c turnkey-matomo-19.0-trixie-amd64.iso.hash
      turnkey-matomo-19.0-trixie-amd64.iso: OK

Key identifiers for audit use:

  Primary key fingerprint: DEE90D9970AE35D55B7C6C2DC6D254B76A9D9430
  Signing subkey fingerprint: 21FCE5FF2EC641318D9EA8F7D9FC75C29D0A033B
-----BEGIN PGP SIGNATURE-----
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=p2cr
-----END PGP SIGNATURE-----