-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

To ensure the image has not been corrupted in transit or tampered with,
perform these two steps to cryptographically verify its integrity:

1. Verify that this file is signed by the TurnKey GNU/Linux Trixie Images key:

    $ curl https://raw.githubusercontent.com/turnkeylinux/common/19.x/keys/tkl-trixie-images.asc | gpg --import
    $ gpg --list-keys --with-fingerprint --with-subkey-fingerprint release-trixie-images@turnkeylinux.org

   The primary key fingerprint must be:

      DEE9 0D99 70AE 35D5 5B7C  6C2D C6D2 54B7 6A9D 9430

   The signing subkey fingerprint must be:

      21FC E5FF 2EC6 4131 8D9E  A8F7 D9FC 75C2 9D0A 033B

    $ gpg --verify turnkey-mattermost-19.0-trixie-amd64.iso.hash

2. Recalculate either image checksum and confirm it matches:

    $ sha256sum turnkey-mattermost-19.0-trixie-amd64.iso
      e17af35546f7a546fe7678cbd4653bbecacf385c5101b06575f5c12fd29a7e12  turnkey-mattermost-19.0-trixie-amd64.iso

    $ sha512sum turnkey-mattermost-19.0-trixie-amd64.iso
      39a3c4d7ab2f663f3d035abf2d446bfd3de43641cfea0b0bd38bcbfe92ea40a0487efc098baa2006e747aa623378a8be05149078b9a847229963b891e19b9245  turnkey-mattermost-19.0-trixie-amd64.iso

   Check either checksum automatically:

    $ sha256sum --ignore-missing -c turnkey-mattermost-19.0-trixie-amd64.iso.hash
      turnkey-mattermost-19.0-trixie-amd64.iso: OK

    $ sha512sum --ignore-missing -c turnkey-mattermost-19.0-trixie-amd64.iso.hash
      turnkey-mattermost-19.0-trixie-amd64.iso: OK

Key identifiers for audit use:

  Primary key fingerprint: DEE90D9970AE35D55B7C6C2DC6D254B76A9D9430
  Signing subkey fingerprint: 21FCE5FF2EC641318D9EA8F7D9FC75C29D0A033B
-----BEGIN PGP SIGNATURE-----
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=G+nT
-----END PGP SIGNATURE-----