-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

To ensure the image has not been corrupted in transit or tampered with,
perform these two steps to cryptographically verify its integrity:

1. Verify that this file is signed by the TurnKey GNU/Linux Trixie Images key:

    $ curl https://raw.githubusercontent.com/turnkeylinux/common/19.x/keys/tkl-trixie-images.asc | gpg --import
    $ gpg --list-keys --with-fingerprint --with-subkey-fingerprint release-trixie-images@turnkeylinux.org

   The primary key fingerprint must be:

      DEE9 0D99 70AE 35D5 5B7C  6C2D C6D2 54B7 6A9D 9430

   The signing subkey fingerprint must be:

      21FC E5FF 2EC6 4131 8D9E  A8F7 D9FC 75C2 9D0A 033B

    $ gpg --verify turnkey-observium-19.0-trixie-amd64.iso.hash

2. Recalculate either image checksum and confirm it matches:

    $ sha256sum turnkey-observium-19.0-trixie-amd64.iso
      7744c15cb859ff92bf89e8cad89442806d99816821fa9f14a33639efad4724ae  turnkey-observium-19.0-trixie-amd64.iso

    $ sha512sum turnkey-observium-19.0-trixie-amd64.iso
      b000d051fc98033bfefaefde5ff43d43adf505d3558deea63a93e9ba7e4e4986cc88eac616b97e429f4a9e76c0cea07b883f8313180e37aa14b305a531a9348e  turnkey-observium-19.0-trixie-amd64.iso

   Check either checksum automatically:

    $ sha256sum --ignore-missing -c turnkey-observium-19.0-trixie-amd64.iso.hash
      turnkey-observium-19.0-trixie-amd64.iso: OK

    $ sha512sum --ignore-missing -c turnkey-observium-19.0-trixie-amd64.iso.hash
      turnkey-observium-19.0-trixie-amd64.iso: OK

Key identifiers for audit use:

  Primary key fingerprint: DEE90D9970AE35D55B7C6C2DC6D254B76A9D9430
  Signing subkey fingerprint: 21FCE5FF2EC641318D9EA8F7D9FC75C29D0A033B
-----BEGIN PGP SIGNATURE-----
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=83KU
-----END PGP SIGNATURE-----