-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

To ensure the image has not been corrupted in transit or tampered with,
perform these two steps to cryptographically verify its integrity:

1. Verify that this file is signed by the TurnKey GNU/Linux Trixie Images key:

    $ curl https://raw.githubusercontent.com/turnkeylinux/common/19.x/keys/tkl-trixie-images.asc | gpg --import
    $ gpg --list-keys --with-fingerprint --with-subkey-fingerprint release-trixie-images@turnkeylinux.org

   The primary key fingerprint must be:

      DEE9 0D99 70AE 35D5 5B7C  6C2D C6D2 54B7 6A9D 9430

   The signing subkey fingerprint must be:

      21FC E5FF 2EC6 4131 8D9E  A8F7 D9FC 75C2 9D0A 033B

    $ gpg --verify turnkey-mediaserver-19.0-trixie-amd64.iso.hash

2. Recalculate either image checksum and confirm it matches:

    $ sha256sum turnkey-mediaserver-19.0-trixie-amd64.iso
      ee17aa999d17a6b583d07a57172d930a8e4be0f5a61fdb11c3c270cffdd65be7  turnkey-mediaserver-19.0-trixie-amd64.iso

    $ sha512sum turnkey-mediaserver-19.0-trixie-amd64.iso
      ce50f729f0897e9bb6268ad4e54e5a1e5a191b4b0739822dab7197c09e87c92328eb72c4eefe527a17318937fe666acf5fa9809b55f331cb0d9b473129b9f53f  turnkey-mediaserver-19.0-trixie-amd64.iso

   Check either checksum automatically:

    $ sha256sum --ignore-missing -c turnkey-mediaserver-19.0-trixie-amd64.iso.hash
      turnkey-mediaserver-19.0-trixie-amd64.iso: OK

    $ sha512sum --ignore-missing -c turnkey-mediaserver-19.0-trixie-amd64.iso.hash
      turnkey-mediaserver-19.0-trixie-amd64.iso: OK

Key identifiers for audit use:

  Primary key fingerprint: DEE90D9970AE35D55B7C6C2DC6D254B76A9D9430
  Signing subkey fingerprint: 21FCE5FF2EC641318D9EA8F7D9FC75C29D0A033B
-----BEGIN PGP SIGNATURE-----
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=bLSK
-----END PGP SIGNATURE-----