-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

To ensure the image has not been corrupted in transit or tampered with,
perform these two steps to cryptographically verify its integrity:

1. Verify that this file is signed by the TurnKey GNU/Linux Trixie Images key:

    $ curl https://raw.githubusercontent.com/turnkeylinux/common/19.x/keys/tkl-trixie-images.asc | gpg --import
    $ gpg --list-keys --with-fingerprint --with-subkey-fingerprint release-trixie-images@turnkeylinux.org

   The primary key fingerprint must be:

      DEE9 0D99 70AE 35D5 5B7C  6C2D C6D2 54B7 6A9D 9430

   The signing subkey fingerprint must be:

      21FC E5FF 2EC6 4131 8D9E  A8F7 D9FC 75C2 9D0A 033B

    $ gpg --verify turnkey-nginx-php-fastcgi-19.0-trixie-amd64.iso.hash

2. Recalculate either image checksum and confirm it matches:

    $ sha256sum turnkey-nginx-php-fastcgi-19.0-trixie-amd64.iso
      3349863884705652c28a6a4aa1e9b9cfa5e7473b53c54bf4e31d43c86622ec80  turnkey-nginx-php-fastcgi-19.0-trixie-amd64.iso

    $ sha512sum turnkey-nginx-php-fastcgi-19.0-trixie-amd64.iso
      96180acd400de5a6fb41075939fa34c539d78b08cedbf64cb5a65ea6f881e7541129e5ae17f25c6e74d48e6ca3ebad358eaa9c3e5df16461d39a352b771bb32b  turnkey-nginx-php-fastcgi-19.0-trixie-amd64.iso

   Check either checksum automatically:

    $ sha256sum --ignore-missing -c turnkey-nginx-php-fastcgi-19.0-trixie-amd64.iso.hash
      turnkey-nginx-php-fastcgi-19.0-trixie-amd64.iso: OK

    $ sha512sum --ignore-missing -c turnkey-nginx-php-fastcgi-19.0-trixie-amd64.iso.hash
      turnkey-nginx-php-fastcgi-19.0-trixie-amd64.iso: OK

Key identifiers for audit use:

  Primary key fingerprint: DEE90D9970AE35D55B7C6C2DC6D254B76A9D9430
  Signing subkey fingerprint: 21FCE5FF2EC641318D9EA8F7D9FC75C29D0A033B
-----BEGIN PGP SIGNATURE-----
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=IH/z
-----END PGP SIGNATURE-----