-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

To ensure the image has not been corrupted in transit or tampered with,
perform these two steps to cryptographically verify its integrity:

1. Verify that this file is signed by the TurnKey GNU/Linux Trixie Images key:

    $ curl https://raw.githubusercontent.com/turnkeylinux/common/19.x/keys/tkl-trixie-images.asc | gpg --import
    $ gpg --list-keys --with-fingerprint --with-subkey-fingerprint release-trixie-images@turnkeylinux.org

   The primary key fingerprint must be:

      DEE9 0D99 70AE 35D5 5B7C  6C2D C6D2 54B7 6A9D 9430

   The signing subkey fingerprint must be:

      21FC E5FF 2EC6 4131 8D9E  A8F7 D9FC 75C2 9D0A 033B

    $ gpg --verify turnkey-mumble-19.0-trixie-amd64.iso.hash

2. Recalculate either image checksum and confirm it matches:

    $ sha256sum turnkey-mumble-19.0-trixie-amd64.iso
      3a0ed4e1b781bb650a11f7c24e392086e21f61c838a446438d0017b500d8ec8d  turnkey-mumble-19.0-trixie-amd64.iso

    $ sha512sum turnkey-mumble-19.0-trixie-amd64.iso
      92680c33d60f13edd1c15e3f21e952132cce310035fc133ff01b145cff2a22bf52e93550d6c8394d42245531438266d5d53c494da7d26b4c64897ab0be30657e  turnkey-mumble-19.0-trixie-amd64.iso

   Check either checksum automatically:

    $ sha256sum --ignore-missing -c turnkey-mumble-19.0-trixie-amd64.iso.hash
      turnkey-mumble-19.0-trixie-amd64.iso: OK

    $ sha512sum --ignore-missing -c turnkey-mumble-19.0-trixie-amd64.iso.hash
      turnkey-mumble-19.0-trixie-amd64.iso: OK

Key identifiers for audit use:

  Primary key fingerprint: DEE90D9970AE35D55B7C6C2DC6D254B76A9D9430
  Signing subkey fingerprint: 21FCE5FF2EC641318D9EA8F7D9FC75C29D0A033B
-----BEGIN PGP SIGNATURE-----
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=WnaO
-----END PGP SIGNATURE-----